All authors
Claude Skills by aibot88
github.com/aibot885,195 skills189 installs11,850 views
- Pentest LlmLLM application red team — OWASP LLM Top 10, prompt injection, RAG poisoning, MCP server abuse, agent tool abuse, jailbreak testing advisory. Triggers on LLM red team, prompt injection, jailbreak, RAG poisoning, OWASP LLM Top 10, MCP abuse, agent tool abuse, AI security testing.Votes: 0GitHub stars: 4
- Pentest MalwareMalware analizi — triage, static analiz, dynamic sandbox, IOC extract, YARA imza yazimi advisory. Triggers on malware analiz, malware triage, sandbox, Cuckoo, IDA, Ghidra, dynamic analysis, IOC, YARA imza, packer, unpacker, reverse malware.Votes: 0GitHub stars: 4
- Pentest MobileMobile application pentest — Android/iOS, MASTG/MASVS, Frida/Objection dynamic analiz, sertifika pinning bypass, IPC test advisory. Triggers on Android pentest, iOS pentest, Frida, Objection, MobSF, MASTG, MASVS, certificate pinning, root detection, jailbreak detection, IPC, deep link.Votes: 0GitHub stars: 4
- Pentest Network ScanningNetwork reconnaissance and port scanning using Naabu, hping3, and complementary toolsVotes: 0GitHub stars: 4
- Pentest Opsec EvidenceOperator OPSEC + evidence handling — operator identity hygiene, source IP design, burner infrastructure, evidence chain of custody, log retention advisory. Triggers on OPSEC, operator anonymity, source IP hygiene, burner infrastructure, evidence chain, chain of custody, log retention, attribution, fingerprint hygiene.Votes: 0GitHub stars: 4
- Pentest OrchestratorYetkili penetration testing engagement orchestrator — scope declaration, OPSEC tagging, evidence handling disiplini. Triggers on pentest, penetration test, red team, engagement, ROE, scope, security assessment, vulnerability assessment, ethical hacking. ADVISORY/DEFENSIVE: live exploit yapmaz; metodoloji, plan, analiz, raporlama.Votes: 0GitHub stars: 4
- Pentest PfsensePentest especializado para pfSense CE e Plus — cobre todas as superfícies de ataque a partir da rede externa e interna, mapeado ao PTES e ao código-fonte real do pfSenseVotes: 0GitHub stars: 4
- Pentest PrivescPrivilege escalation methodology — Linux + Windows + container escape advisory. LinPEAS/WinPEAS analizi, SUID/capability abuse, kernel exploit secimi. Triggers on privesc, privilege escalation, LinPEAS, WinPEAS, SUID, capability, sudo abuse, kernel exploit, Windows token, UAC bypass.Votes: 0GitHub stars: 4
- Pentest ReconReconnaissance ve enumeration advisory — Nmap/Nessus/Nikto/BloodHound output parsing, attack surface prioritization, next-step onerisi. OSINT (domain recon, email harvest, breach data) dahil. Triggers on recon, reconnaissance, enumeration, Nmap output, attack surface, target prioritization, subdomain enum, port scan analysis, OSINT, domain recon.Votes: 0GitHub stars: 4
- Pentest ReportPenetration test rapor yazimi — executive summary, technical writeup, CVSS scoring, remediation roadmap advisory. Triggers on pentest report, executive summary, technical writeup, CVSS, remediation roadmap, finding writeup, retest report.Votes: 0GitHub stars: 4
- Pentest SocialSocial engineering pentest methodology — phishing strategy, pretexting, vishing senaryosu, awareness training advisory. Live phishing operation YOK. Triggers on social engineering, phishing, vishing, pretext, awareness, OSINT-driven pretext, GoPhish, Evilginx, phishing simulation.Votes: 0GitHub stars: 4
- Pentest StigDISA STIG (Security Technical Implementation Guide) audit + GPO remediation + keep-open justification advisory. Triggers on STIG, DISA, SCAP, OpenSCAP, Compliance Master, GPO, group policy hardening, keep-open justification, CKL.Votes: 0GitHub stars: 4
- Pentest Threat ModelThreat modeling — STRIDE, DREAD, attack tree, data flow diagram, MITRE ATT&CK Navigator integration. Triggers on threat model, STRIDE, DREAD, attack tree, DFD, data flow diagram, MITRE ATT&CK, threat matrix, risk scoring.Votes: 0GitHub stars: 4
- Pentest WebWeb application security testing methodology — OWASP Top 10, SSRF, IDOR, auth bypass, injection sinifi advisory. Burp/ZAP cikti analizi. Triggers on web pentest, OWASP, SQL injection, XSS, SSRF, IDOR, auth bypass, Burp output, ZAP, parameter pollution, request smuggling.Votes: 0GitHub stars: 4
- Pentest WirelessWireless network pentest — WPA/WPA2/WPA3, evil twin, 802.1X enterprise, Bluetooth advisory. Triggers on wireless pentest, WiFi, WPA2, WPA3, PMKID, evil twin, deauth, Aircrack, hcxdumptool, 802.1X, Bluetooth, BLE security.Votes: 0GitHub stars: 4
- PentesterAuthorized exploitation, proof-of-concept chain, kill-chain mapping.Votes: 0GitHub stars: 4
- PerchServer intelligence layer for RunCloud-managed Linux servers. Use when the user mentions Perch, /perch_*, RunCloud, nginx-rc, server intelligence, server diagnosis, WordPress site auditing, plugin vulnerability scanning, or any time they want to investigate, monitor, or heal a server they own.Votes: 0GitHub stars: 4
- Perf Torch Sync FreeIdentify and eliminate host-device synchronizations in PyTorch code. Detects sync points (.item(), .cpu(), boolean indexing, torch.tensor on CUDA), classifies false vs true dependencies, provides sync-free alternatives. Triggers: sync-free, synchronization, .item(), .cpu(), host-device sync, eliminate syncs, CPU stall, non_blocking, set_sync_debug_mode, cudaStreamSynchronize, cudaEventSynchronize, remove syncs, async GPU.Votes: 0GitHub stars: 4
- Performance BudgetPerformance budget tanımı + CI enforcement. Web Vitals (LCP/INP/CLS), JS/CSS bundle size, API p95/p99 latency, DB query, memory/CPU, cost budget. PR-time gate (size-limit, Lighthouse CI, k6 threshold). RUM authoritative (CrUX/Datadog/SpeedCurve). Regression detection trend-based.Votes: 0GitHub stars: 4
- Performing Penetration TestingPerform security testing on web applications, APIs, and codebases. Use when the user asks to "run a security scan", "check for vulnerabilities", "audit dependencies", "check security headers", "find security issues", "pentest", "security audit", or "scan for secrets". Trigger with "pentest", "security scan", "vulnerability check", "audit dependencies", "check headers", "find secrets".Votes: 0GitHub stars: 4
- Performing Security AuditsAnalyze code, infrastructure, and configurations by conducting comprehensive security audits. It leverages tools within the security-pro-pack plugin, including vulnerability scanning, compliance checking, and cryptography review. Use when assessing security or running audits. Trigger with phrases like 'security scan', 'audit', or 'vulnerability'.Votes: 0GitHub stars: 4
- Performing Security Code Review'Execute this skill enables AI assistant to conduct a security-focusedVotes: 0GitHub stars: 4
- Performing Security TestingTest automate security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues. Use when performing security assessments, penetration tests, or vulnerability scans. Trigger with phrases like "scan for vulnerabilities", "test security", or "run penetration test".Votes: 0GitHub stars: 4
- Peripheral Code WizardGenera fragmentos de código inicial funcionales para Arduino IDE y ESP-IDF a partir del mapeo de pines y periféricos de un microcontrolador ESP32. Activa cuando el usuario menciona: código, code, programar ESP32, Arduino, ESP-IDF, GPIO, periférico, peripheral, firmware, sketch, ejemplo de código, pin mapping, o cuando se necesita generar código que controle un periférico específico del microcontrolador para un proyecto de domótica. Usar SIEMPRE después de schematic-storyteller para traducir l...Votes: 0GitHub stars: 4
- Perl Security中文优先：用于Perl安全相关任务，帮助识别、设计、实现或验证对应工作流。English keywords: Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.Votes: 0GitHub stars: 4
- Perplexity Deploy IntegrationDeploy Perplexity Sonar API integrations to Vercel, Cloud Run, and Docker. Use when deploying Perplexity-powered applications to production, configuring platform-specific secrets, or setting up edge functions. Trigger with phrases like "deploy perplexity", "perplexity Vercel", "perplexity production deploy", "perplexity Cloud Run", "perplexity Docker".Votes: 0GitHub stars: 4
- Perplexity Install AuthInstall and configure Perplexity Sonar API authentication. Use when setting up a new Perplexity integration, configuring API keys, or initializing the OpenAI-compatible client for Perplexity. Trigger with phrases like "install perplexity", "setup perplexity", "perplexity auth", "configure perplexity API key", "perplexity sonar setup".Votes: 0GitHub stars: 4
- Perplexity Security BasicsApply Perplexity security best practices for API key management and query safety. Use when securing API keys, implementing query sanitization, or auditing Perplexity security configuration. Trigger with phrases like "perplexity security", "perplexity secrets", "secure perplexity", "perplexity API key security", "perplexity PII".Votes: 0GitHub stars: 4
- Persist Reusable Coding Agent Memory Across Sessions With EngramKeep searchable long-term memory for coding agents in a local SQLite store and expose it through MCP when sessions keep forgetting prior decisions, conventions, and useful findings.Votes: 0GitHub stars: 4
- Persona Compliance ManagerPersona eines Compliance-Managers / Head of GRC, organisatorisch dem CISO unterstellt, steuert operativ Framework-Erweiterungen. Effizienz- und Effektivitäts-getrieben, obsessiv bei Data-Reuse über Frameworks hinweg (z.B. ISO 27001 → NIS2, DORA, TISAX). Lässt sich aktiv vom Senior-Consultant beraten, setzt dann intern um. Aktivieren bei Triggern wie "aus dem Blickwinkel eines Compliance-Managers", "als GRC-Lead", "als Compliance-Manager", "Head-of-GRC-Sicht", "aus Sicht Compliance-Steuerung",...Votes: 0GitHub stars: 4
- Persona ComposerCompose Dutch-context personas on-demand from external trait pools and pre-authored coupled archetype bundles. Returns 1-30 composed personas given optional constraints (domain + role catalog, count, diversity requirements, output format). All output in Dutch. Callable by other skills (ontdek-kansen, business-case-management, user-research) via the Skill tool when they need disposable, domain-relevant persona sets.Votes: 0GitHub stars: 4
- Persona Install AuthConfigure Persona API authentication with sandbox and production API keys. Use when setting up identity verification, configuring API credentials, or initializing Persona in your project. Trigger with phrases like "install persona", "setup persona", "persona auth", "persona API key", "KYC setup".Votes: 0GitHub stars: 4
- Persona It AdminThis skill should be used when the user says \"IT admin mode\", \"check for security issues\", \"review audit logs\", \"configure Drive permissions\", \"monitor login activity\", \"run IT standup\", or \"manage Workspace settings\", or wants to administer IT operations, enforce security policies, and review pending requests in Google Workspace.Votes: 0GitHub stars: 4
- Persona Security BasicsSecure Persona API keys, webhook secrets, PII handling in verification data. Use when working with Persona identity verification. Trigger with phrases like "persona security-basics", "persona security-basics".Votes: 0GitHub stars: 4
- Persona Tool TesterPersona eines Tool-Testers mit ISMS-Basics. Arbeitet dem Compliance-Manager zu, deckt Bugs und Effizienzprobleme in der TATSÄCHLICHEN Umsetzung auf, achtet auf Übersetzungen, UX-Konsistenz und Aurora-Design-System-Konformität. Aktivieren bei Triggern wie "aus dem Blickwinkel eines Tool-Testers", "als Tester", "QA-Sicht", "Test-Perspektive", "wie funktioniert das wirklich", "i18n-Check", "UX-Bug-Hunt" oder wenn User Feedback zu Real-World-Implementierungs-Qualität will. Primär DE.Votes: 0GitHub stars: 4
- Personal Data ExpertActs as a Personal Data Expert providing PDPA and GDPR compliance guidance, risk assessments, privacy documentation, and breach response procedures in Thai, grounded in official PDPC standards.Votes: 0GitHub stars: 4
- Personal Pre Push ReviewPre-push adversarial review for personal repos before git push. Runs adversarial-input sweep, parallel-implementation symmetry audit, project AGENTS.md compliance, dead-code sweep, secrets scan. Use before any push; mandatory for repos that will become public or shared. Tier 2 sub-agent does the bulk; Tier 3 main synthesizes.Votes: 0GitHub stars: 4
- Personal Repo BootstrapBootstrap a new personal repo with industry-best-practice docs and defensive .gitignore. Routes by repo type (scratch / personal-published / portfolio-public). Ensures secrets/PII protection from the first commit. Triggered by 'create new repo', 'bootstrap [name]', '/repo-bootstrap'.Votes: 0GitHub stars: 4
- Pev Bootstrap Playwrightpev-harness を使うプロジェクトに Playwright を導入する自動 bootstrap skill。 npm install / browser binary / playwright.config.ts template / seed test template / `npx playwright init-agents --loop=claude` (Playwright agents 自動生成) の 5 step を 1 操作で完了する。 pev-e2e-verify skill の Preflight が「未setup」と判定した時に自動的に提案される。Votes: 0GitHub stars: 4
- Pexels Api Stock Photo CuratorSearches and downloads royalty-free images from Pexels API with smart filtering by orientation, color, and size. Generates attribution HTML and maintains a local deduplication index via SQLite.Votes: 0GitHub stars: 4
- PgaScreen products for FDA, EPA, USDA, CPSC, FCC, and other government agency requirements using AskRosetta. Use when checking regulatory compliance for US imports.Votes: 0GitHub stars: 4
- PhantomBuild frontend Solana applications with Phantom Connect SDK and Helius infrastructure. Covers React, React Native, and browser SDK integration, transaction signing via Helius Sender, API key proxying, token gating, NFT minting, crypto payments, real-time updates, and secure frontend architecture.Votes: 0GitHub stars: 4
- Pharma ComplianceAudit pharmaceutical regulatory compliance -- inspection readiness, CAPA system effectiveness, change control pipeline, data integrity (ALCOA+), and validation lifecycle tracking. Covers FDA 21 CFR 210/211, EU GMP Annexes, ICH Q7-Q12, WHO Prequalification, and PIC/S guidelines. Evaluates 483 observation history, SOP currency, equipment qualification, training matrices, and compliance gap remediation. Use when preparing for FDA or EMA inspection, assessing CAPA closure rates, evaluating change...Votes: 0GitHub stars: 4
- Pharma Quality ControlAudit pharmaceutical QC laboratory operations -- OOS/OOT investigations, stability program trending, analytical method validation status, release testing optimization, and specification compliance. Covers ICH Q1A-Q1E stability guidelines, ICH Q2(R2) method validation, USP compendial verification, ALCOA+ data integrity, Croston shelf life estimation, and LIMS/CDS system evaluation. Use when reviewing OOS investigation quality, trending stability data, auditing method validation coverage, optim...Votes: 0GitHub stars: 4
- Phase 7 Seo SecurityEnhance SEO (meta tags, semantic HTML) and security (vulnerability checks, hardening). Triggers: SEO, security, meta tags, vulnerability, 검색 최적화, 보안.Votes: 0GitHub stars: 4
- Phase 8 ReviewVerify codebase quality — architecture consistency, convention compliance, gap analysis. Triggers: code review, architecture check, quality, gap analysis, 코드 리뷰, 품질 검증.Votes: 0GitHub stars: 4
- Phase ReviewAdaptive post-implementation phase verification through fresh subagents with S/M/L sizing (bug-fix → feature → architecture). Multi-agent pipeline with strict role zoning: Spec + Architecture (параллель) → Quality + Security + Forward-Look (параллель) → Adversarial Skeptic → fix → Regression Sweep → final report. Auto-scales 2 → 7 агентов в зависимости от размера фазы, чтобы не жечь токены на тривиальных правках. USE WHEN: an implementation phase is done and needs validation before moving to ...Votes: 0GitHub stars: 4
- Philips HuePhilips Hue スマートライトの制御スキル。Hue BridgeのローカルCLIP API v2を使用して照明のON/OFF、明るさ調整、色変更、シーン制御を行う。「Hueの電気をつけて」「リビングを暖色にして」「全部の照明を消して」「ライトの一覧」などの依頼時に使用。Votes: 0GitHub stars: 4
- Phishing Vorfall PruefenPrüft Online-Banking-Phishing, pushTAN, Call-ID-Spoofing, grobe Fahrlässigkeit, Beweislast, Banklogs, Ombudsmann und Klage gegen Zahlungsdienstleister.Votes: 0GitHub stars: 4
- Phoenix Pxi PlaywrightWrite, extend, and debug PXI Playwright E2E tests for Phoenix. Use when adding PXI agent frontend specs, authoring LLM-as-judge rubrics, asserting PXI tool use, persisting PXI test runs as Phoenix experiments, or debugging PXI E2E failures.Votes: 0GitHub stars: 4