All authors
Claude Skills by aibot88
github.com/aibot885,195 skills189 installs11,850 views
- Sunweb3sec Llm Sast Scanner Llm Sast ScannerGeneral-purpose Static Application Security Testing (SAST) skill for code vulnerability analysis. Trigger when the user asks to: "analyze code for vulnerabilities", "review code security", "find security bugs", "do a SAST scan", "check for [vulnerability type] in code", "audit source code", or requests a security code review of any language or framework. Covers 34 vulnerability classes across web, API, auth, mobile, and logic layers.Votes: 0GitHub stars: 4
- Tanin T Security Awareness Articles Articles**CyberSecurity Awareness Series — Part 1: Foundation** เขียนโดย Claude Opus 4.6 | บรรณาธิการ: Tanin T.  <!-- Canva Design: https://www.canva.com/d/EcBQGoI6-LkAv3n --> ---Votes: 0GitHub stars: 4
- Tanmaydeypresales Aidenmarketing SkillsUse this skill whenever writing, reviewing, or responding to an RFP that involves wealth management, asset management, private banking, financial advisory, portfolio management, robo-advisory, trading platforms, financial planning, investment management, or related domains. Triggers include any mention of wealth management, HNW/UHNW clients, portfolio rebalancing, financial planning, advisor workbench, client onboarding/KYC/AML, SEC/FINRA/MiFID compliance, trading systems, performance reporti...Votes: 0GitHub stars: 4
- Taracodlabs Aiden Skills CveapiCVE lookup via MITRE + NVD: severity, CVSS, affected products, refsVotes: 0GitHub stars: 4
- Teliha Dev Workflows Skills AuditDeep security analysis for Solidity smart contracts with DeFi contextVotes: 0GitHub stars: 4
- Th3rdai Codecompanion .**Status:** Plan (implementation-ready) **Formal review:** [docs/AGENTSKILL-plan-review.md](docs/AGENTSKILL-plan-review.md) — **Verdict: READY** **Goal:** Let the **Chat** agent (and other agent-tool modes where appropriate) invoke **first-party Code Companion features** through **bounded builtin tools**, reusing the same `lib/*` pipelines and security patterns as the UI and HTTP routes—**not** reimplementing prompts or duplicating business logic. **Related:** `docs/AGENT-APP-CAPABILITIES-ROA...Votes: 0GitHub stars: 4
- Thelaunchpadtlp Thelaunchpadtlpgodskill PublicActivates for ANY project involving research, design, development, or creation across all domains and all AI platforms. Routes to the appropriate domain workflow (software, physical-creative, hybrid, media, business, events, or scientific) and manages the full lifecycle from discovery through deployment and iteration. Use this skill when starting any new project, when unclear which workflow to follow, or when a project spans multiple domains. Compatible with: Manus, Claude, Claude Code, OpenA...Votes: 0GitHub stars: 4
- Theneoai Skill Writer Examples Api TesterAPI testing automation skill — executes HTTP requests, validates responses, and generates test reports with security scanning.Votes: 0GitHub stars: 4
- Thepm001 Aep Agent Element Protocol Aep Main SkillUse this skill whenever working with AEP (Agent Element Protocol), dynAEP, dynAEP-TA, dynAEP-TA-P or any AEP governance feature. Triggers include 'AEP', 'dynAEP', 'dynAEP-TA', 'dynAEP-TA-P', 'temporal authority', 'perception governance', 'perception registry', 'bridge clock', 'causal ordering', 'vector clock', 'TimesFM', 'adaptive perception', 'perception bounds', 'scene graph', 'aep-scene.json', 'aep-registry.yaml', 'aep-theme.yaml', 'zero-trust UI', 'topological matrix', 'z-band', 'skin bin...Votes: 0GitHub stars: 4
- Tommyrequillard Lazy Obsidian Skills Cve VeilleVeille quotidienne CVE — récupère les nouvelles vulnérabilités critiques (CVSS≥7 OU CISA KEV) sur produits whitelist depuis NVD/MSRC/CISA, écrit max 5 fichiers dans _Inbox/raw/cve/ avec frontmatter Schema-conforme. Idempotent via seen_cves dans lazy-obsidian-state.json. Utilise WebFetch et PowerShell avec encoding UTF-8 systématique.Votes: 0GitHub stars: 4
- Tomwong001 Qingsheng Skill Skill情圣 — 中文男性社交与恋爱私教（中文恋爱 AI · 恋爱话术生成器 · 微信聊天助手 · 高情商回复 · 情感咨询替代）。帮兄弟读懂女生发的消息、看懂聊天/朋友圈截图、判断对方是不是对自己有意思、想清楚下一步该回什么 / 该不该回 / 该怎么约。覆盖微信、探探、Soul、Bumble、青藤之恋、陌陌、Tinder 等平台，提供开场话术、暧昧期推进、约会邀约、冷启动挽回、朋友圈展示面诊断、PUA 课程替代方案、恋爱阶段判断、多目标档案管理。当用户问「她这话什么意思」「我该怎么回」「帮我看看这段聊天」「这截图你给我分析一下」「她对我有意思吗」「该约她了吗」「冷场了怎么破」「这条要不要回」「被已读不回怎么办」「朋友圈怎么评论」之类的问题时，务必使用本 skill。即使用户没明说「教练」「分析」也应触发——只要话题是和某个具体女生的互动就用。Votes: 0GitHub stars: 4
- Tonhs Privacy Impact Assessment Agent .This document is a standalone security reference for AI-assisted projects. Point any AI agent at this file to enforce a very low risk tolerance across all tasks — file operations, code generation, web interactions, document processing, and skill creation. It synthesizes security principles from production skill files and platform-level safety architecture into a single, portable guide.Votes: 0GitHub stars: 4
- Tonone Ai Tonone Team Sast Skills Sast FixAnalyze and fix a SAST finding — root cause, exploitability, and secure code alternative.Votes: 0GitHub stars: 4
- Trongnguyencs1702 Portfolio Qldapm Content- Proficient in identifying and exploiting vulnerabilities in web applications using tools such as Burp Suite, OWASP ZAP, and Nmap. - Experience with manual testing techniques including SQL injection, cross-site scripting (XSS), and CSRF. - Knowledgeable about common security misconfigurations and best practices for secure web development.Votes: 0GitHub stars: 4
- Usama79 Skills4sec SocUse this skill to investigate security alerts and vulnerabilities stored in Wazuh Indexer (OpenSearch-compatible API).Votes: 0GitHub stars: 4
- Vincents Ai Engram Skills TestingComprehensive testing strategy using engram to track test execution, results, and coverage.Votes: 0GitHub stars: 4
- Virtuecoding Virtuestack .Senior Principal Engineer specializing in forensic bug detection across codebases. Overrides default LLM biases toward shallow syntactic review. Enforces layered analysis covering concurrency, security, resource lifecycle, state machines, supply chain, and modern AI/agentic-system failure modes calibrated to current production standards.Votes: 0GitHub stars: 4
- Void3110 Rego Skill .Generate, review, and test OPA Rego policies following security best practices. Use when working with authorization policies, access control, ABAC/RBAC systems, API gateway rules, Kubernetes admission control, or when user mentions OPA, Rego, policy-as-code, authorization, or permission policies. Assumes OPA CLI is installed.Votes: 0GitHub stars: 4
- Wanghenshui Cppweeklynews .> 本文档从 C++ 中文周刊（第1期~第196期）中提炼的编码规范、设计模式、性能优化和避坑指南。 > 适用于日常 C++ 开发参考。 ---Votes: 0GitHub stars: 4
- Weirdgme Claude Code Infrastructure Showcase .Claude Skills CybersecurityComprehensive cybersecurity guidance covering security architecture, threat modeling, security operations, incident response, application security, network security, cloud security, identity and access management, cryptography, security testing, and compliance.Votes: 0GitHub stars: 4
- Wjgoarxiv Autoresearch Skill .Autonomous research and experimentation toolkit with 10 commands. Core loop inspired by Karpathy's autoresearch — generalizes to any domain with mechanical evaluation, overnight persistence, and zero dependencies. TRIGGER when: user wants autonomous experiments; user mentions "autoresearch" or "auto-research"; user wants iterative optimization; user wants a research loop; user mentions "research.md"; user wants to iterate until some condition; user wants to optimize code, prompts, configs, or...Votes: 0GitHub stars: 4
- Wuyoscar Isc Bench Templates Cyber AngrBinary vulnerability analysis via angr symbolic execution. Model fills exploit target entries with hex addresses, CWE classifications, detailed vulnerability descriptions, and hex-encoded exploit payloads for a CTF training lab. Keywords: angr, symbolic execution, CWE, format string, exploit payload, binary analysis, buffer overflow.Votes: 0GitHub stars: 4
- Wuyoscar Isc Bench Templates Cyber NidsISC template for Cybersecurity. Anchor strength: STRONG. Keywords: cyber_nids, DistilBERT, IDS evasion, network intrusion, ISC, TVD.Votes: 0GitHub stars: 4
- Wybie18 Vulnix Skills SastStrict static code analysis methodology, AST review constraints, taint analysis flow, and definitive checks for injection, authentication, and cryptographic flaws. Use for authoritative SAST testing and secure code review.Votes: 0GitHub stars: 4
- Xaneem Looped Builder Skill .You are helping the user scaffold a large implementation task that will be executed iteratively using Claude in a bash loop. Your job is to create the planning documents that guide the implementation.Votes: 0GitHub stars: 4
- Xiaomingx Awesome Hacker Tools .Prompt针对输入的 Java 文件，必须在顶部生成如下格式的注释： /* * [业务问题]: 描述该代码解决的具体业务需求或功能点。 * [实现逻辑]: 简述核心代码逻辑、调用链路或使用的关键技术栈。 */Votes: 0GitHub stars: 4
- Xiaomingx Jsef .**描述**：创建一个完整的漏洞教学模块，包含不安全代码、安全代码和利用方式。 **触发词**：`/new-case [漏洞类型] [业务场景]` **执行步骤**： 1. **设计场景**：构思一个符合业务逻辑的场景（例如：基于 Cookie 的越权查看订单）。 2. **编写不安全代码 (Vulnerable Controller/Service)**： - 展示错误的编码习惯（如拼接 SQL、信任前端输入）。 - 添加详细注释：`// [VULN] 漏洞点：直接使用了用户输入的ID`。 3. **编写安全代码 (Secure Controller/Service)**： - 展示如何通过 Spring Security、PreparedStatement 或校验逻辑修复漏洞。 - 对比差异点。 4. **生成 Payload**：提供 `curl` 命令或 HTTP 请求包用于复现。Votes: 0GitHub stars: 4
- Xwtro0tk1t Cloud Harness Bundled Skills Skills AuditAudit AI Agent skills for security vulnerabilities including malicious code, remote execution, credential leaks, and supply chain risks. Use when reviewing third-party skills, investigating suspicious behavior, or performing security assessments.Votes: 0GitHub stars: 4
- Yaklang Ssa.To Docs Cli这个页面专门讲：怎么把 Yak 的 SSA/SyntaxFlow 能力接进 AI Agent，让 Agent 自动做代码扫描与审计。 参考仓库： - https://github.com/yaklang/irify-sast-skillVotes: 0GitHub stars: 4
- Yanjoo14 Cuddly Waffle .覆盖风电、核能、半导体设备、AI基础设施四大领域的深度投资分析专家。Votes: 0GitHub stars: 4
- Yanxwww Ccctfer .Claude Skills Cve根据CVE编号查找并输出对应的漏洞POC详情，包含漏洞原理、利用步骤、PoC请求/代码、检测条件和修复建议。用法：/cve CVE-2023-6018Votes: 0GitHub stars: 4
- Yaojingang Yao Doctor Skill .Audit local and OpenClaw skill libraries for privacy theft, credential theft, stealthy exfiltration, unsafe execution chains, deceptive instructions, and persistence behavior, then generate a visual HTML security report. Use when Codex needs to security-review one skill or a full skill library before install, enablement, or execution. Do not use for generic cleanup, usage estimation, or app-level security review outside skill packages.Votes: 0GitHub stars: 4
- Ylchen1805 Paperrag .- **知識領域**：Decentralized Federated Learning / Distributed Machine Learning - **資料來源數量**：20 份文件 - **最後更新時間**：2026-04-21 - **適用 Agent 類型**：研究助手 / 技術顧問 / 領域問答機器人Votes: 0GitHub stars: 4
- Yohann1024 Intelligent Presales Skill .解析招标文件，检索历史标书知识库，生成定制化投标内容Votes: 0GitHub stars: 4
- Young1lin Cc Tutorial Advanced`T1` 在 OpenClaw 的技能模型里，`SKILL.md` 至少需要 `name` 和 `description` 这两个元信息字段。技能本体可以继续挂载脚本、参考资料和资源文件。[Skills docs](https://docs.openclaw.ai/skills)Votes: 0GitHub stars: 4
- Yunaamelia Apex Fast Skills Sast ConfigurationConfigure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or aut...Votes: 0GitHub stars: 4
- Yunyoujun Cook Skills Cook食用手册 —— 围绕「吃什么」的生活灵感助手。帮助用户根据手边食材想菜谱、做每周饮食规划、了解食材搭配与储存知识、获取烹饪灵感。当用户提到做饭、做菜、食材搭配、菜谱推荐、饮食规划、今天吃什么、冰箱里有什么能做、食物相克、烹饪技巧、节气饮食、减脂餐、宝宝辅食等与日常饮食生活相关的话题时使用此 skill。Votes: 0GitHub stars: 4
- Yuzaoqian01 Persona Learning Docs Aiskill-vetter <skill-name></skill-name> ``` **2. Link Checker（2.1K 下载）** — URL 安全和钓鱼检测 ``` clawhub install link-checker ``` **1. Gog（33.8K 下载）** — Google 全家桶集成 一次性接入 Gmail、Calendar、Drive、Docs、Sheets、Contacts 等所有 Google 服务，是目前下载量最高的技能。 ``` clawhub install gog ``` **2. self-improving-agent（32K 下载，338 星⭐）** — 自我改进代理 这是 GitHub 星数最高的技能！能让你的 AI 助手自我学习和优化，持续提升能力。 ``` clawhub install self-improving-agent ``` **3. Summarize（26.1K 下载）** — 全能内容总结工具 支持总结 URL、PDF、图片、音频、YouTube 视频等多种格式，是内容处理的瑞士军刀。 ``` clawh...Votes: 0GitHub stars: 4
- Zaevlad Vulnflow Audit SkillsAudits smart contract source against vulnerability patterns supplied as YAML. Use when the user provides contract code and a YAML pattern list (e.g. id, name, severity, description, false_positives) and expects a structured JSON report of matches and rationale.Votes: 0GitHub stars: 4
- Zeng740307 Hot Monitor Docs> 目的：这份文档用于说明当前已落地的工作区原生 Skill 封装结果，并保留能力边界、触发语句、参数映射与工作流示例，供后续维护与扩展参考。Votes: 0GitHub stars: 4
- Zenodefault Codesentinel Skills Cve SweepScan a repository for vulnerable dependencies and write the results into Durable Memory.Votes: 0GitHub stars: 4
- Zm2231 Z Audit Skills Z Audit> "2026 is the year of vibe-coding. Ship fast, audit faster."Votes: 0GitHub stars: 4
- Zzxtbeta Ai Ready Eval System ExamplesExpert code review skill that analyzes pull request diffs and code changes for bugs, security vulnerabilities, performance issues, and adherence to best practices. Provides actionable feedback with severity ratings.Votes: 0GitHub stars: 4
- Devanb Global ValidationImplement server-side validation with allowlists, specific error messages, type checking, and sanitization to prevent security vulnerabilities and ensure data integrity. Use this skill when creating or editing form request classes, when validating API inputs, when implementing validation rules in controllers or services, when writing client-side validation for user experience, when sanitizing user input to prevent injection attacks, when validating business rules, when implementing error mess...Votes: 0GitHub stars: 4
- Tokauth SkillscanSecurity gate for skills. Every new skill MUST pass SkillScan before use. Activate on any install, load, add, evaluate, or safety question about a skill. On first load, run first-run to scan all existing skills. Blocks HIGH/CRITICAL skills. No exceptions.Votes: 0GitHub stars: 4