All authors
Claude Skills by Lu1sDV
github.com/Lu1sDV86 skills4 installs149 views
- Bug Bounty ReportingA skill for creating a report in a bug bounty vulnerability assessment.Use when an agent drafts, revises, freezes, or independently verifies a bug bounty vulnerability report for source code, application or live assesment, executable PoC, CVSS or cleanup proof for HackerOne, Bugcrowd, Intigriti, or a vendor-managed program.Votes: 0GitHub stars: 2
- Bugbounty Poc Video RunnerDesigns a one-command, triager-friendly live security PoC video runner with staged evidence, expected-versus-actual output, a negative control, optional UI pause, and cleanup proof.Votes: 0GitHub stars: 2
- CodeqlScans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality + security-experimental suites) and "important only" (high-precision security findings) scan modes. Also handles creating data extension models and processing CodeQL SARIF output.Votes: 0GitHub stars: 2
- CookUse when user says "cook", "let it cook", wants iterative refinement with quality gates, wants to race multiple approaches and pick the best, needs repeat passes, or wants autonomous task-list completion. Triggers: cook, let it cook, review loop, race approaches, ralph, iterate until done.Votes: 0GitHub stars: 2
- CtfdUse when developing, debugging, deploying, or maintaining any CTFd instance or fork - Docker stack issues, plugin development, CSRF 302 errors, theme customization, database migrations, nginx proxy misconfig, SQLAlchemy 1.4 gotchas, pytest test infrastructure, or API 500 responsesVotes: 0GitHub stars: 2
- DebateUse when a technical decision has 2–4 nameable positions and the user wants a recommendation, not open-ended exploration. Triggers include "X vs Y", "A or B", "pick one", "contested trade-off", adversarial review, and decide-between requests. Skip when analysis is open-ended (use superpowers:brainstorming) or the question has no real contest. Keywords: debate, decision, contested, trade-off, versus, steelman, adversarial, argue.Votes: 0GitHub stars: 2
- Feature EngineeringUse when building or improving time series forecasting models and the user asks about exogenous variables, calendar features, rolling statistics, cyclical encoding, differencing, or feature scaling — or when forecast accuracy has plateaued and new features may help.Votes: 0GitHub stars: 2
- GlitchtipUse when deploying, configuring, integrating, or troubleshooting GlitchTip — including self-hosted installation, SDK setup, source maps, sentry-cli, uptime monitoring, alerting, environment variables, Docker Compose, Helm, social auth, and migration from SentryVotes: 0GitHub stars: 2
- Hermes Self EvolutionReplicate the Hermes Agent self-evolving loop for agents that should learn from experience: persistent declarative memory, session recall, agent-managed procedural skills, and post-task review that creates or patches reusable skills. Use when designing, evaluating, or operating an AI agent workflow that should save durable user/project facts, recall prior conversations, turn successful non-trivial workflows into skills, and improve stale skills during use.Votes: 0GitHub stars: 2
- JoernUse when auditing code for vulnerabilities, assessing change impact, tracing dataflow, finding callers/callees of a function, mapping a refactor's blast radius, hunting sinks across a large codebase, or needing repeatable interprocedural queries over a Code Property Graph. Triggers: "joern", "CPG", "code property graph", "blast radius", "dataflow", "taint trace", "who calls X", "callgraph", "dead code", "find sinks", "interprocedural".Votes: 0GitHub stars: 2
- Llm Domain SpeedrunUse when someone needs to rapidly learn an unfamiliar technical domain under a tight deadline, when previous attempts through books, courses, or unstructured practice have failed, or when bridging a fundamental knowledge gap using an LLM as a private tutorVotes: 0GitHub stars: 2
- Oauth AuditUse when auditing OAuth 2.0 / OIDC implementations against RFC 9700 (OAuth Security BCP), reviewing client or authorization-server code, evaluating PKCE / state / redirect-URI handling, hardening token exchange and refresh flows, or triaging suspected OAuth vulnerabilities (CWE-352 CSRF, CWE-287 broken auth).Votes: 0GitHub stars: 2
- Obsidian Spaced RepetitionUse when creating or editing Obsidian Spaced Repetition flashcards, organizing decks, starting card or whole-note reviews, inspecting scheduling metadata, or troubleshooting missing cards through the official Obsidian CLI. Covers st3v3nmw/obsidian-spaced-repetition, cloze cards, #flashcards, #review, and obsidian command/eval workflows; not Anki or third-party obsidian-cli tools.Votes: 0GitHub stars: 2
- OfeliaUse when scheduling tasks in Docker environments with Ofelia — configuring job-exec, job-run, job-local, job-service-run via INI files or Docker labels, cron scheduling, overlap prevention, logging to Slack/email/disk, Docker Compose integration, Swarm services, and troubleshooting scheduled container jobsVotes: 0GitHub stars: 2
- Photon GeocoderUse when geocoding addresses, reverse geocoding coordinates, building address autocomplete, or integrating location search with OpenStreetMap data via Photon API (photon.komoot.io). Triggers on "photon", "geocode", "reverse geocode", "OSM address search".Votes: 0GitHub stars: 2
- Python ExploitationUse when escaping a Python sandbox or pyjail, bypassing import/builtins/attribute or character/byte blacklists, recovering builtins after __builtins__ is stripped, exploiting pickle/marshal/PyYAML/multiprocessing deserialization, Python-template SSTI (Jinja2/RestrictedPython/str.format), bypassing PEP 578 audit hooks, crafting or abusing CPython bytecode and code objects, exfiltrating with no stdout, or reversing .pyc files. CTF / security-research focused; covers CPython 3.8–3.13.Votes: 0GitHub stars: 2
- Rust PerformanceUse when writing or reviewing performance-sensitive Rust, reducing allocations, profiling slow code, investigating latency or throughput regressions, or diagnosing binary size and compile time. Covers cost-aware implementation, representative baselines, profiling, measured changes, and regression checks. Triggers include hot path, zero-copy, Criterion, cargo bench, samply, perf, flamegraph, DHAT, cargo-bloat, p99, contention, and performance code review.Votes: 0GitHub stars: 2
- Sink Research OrchestratorUse when sink subagents encounter unseen languages or new technique categories that require fresh comprehensive research — not well-known sinks. Orchestrates parallel research swarms with structured JSON citations. Triggers: "comprehensive", "exhaustive", "most complete", "deep dive", "unseen language", "new technique category", "long horizon", "parallel research".Votes: 0GitHub stars: 2
- Skill Smell CheckerAudits Agent Skill SKILL.md files for the 26 skill smells defined in arXiv:2607.01456, separating five static checks from 21 semantic checks. It applies when reviewing, linting, authoring, or refactoring SKILL.md files; when a skill quality audit is requested; or when terms such as skill smell, SSD, static skill check, context bloat, missing guardrails, or vague skill description appear.Votes: 0GitHub stars: 2
- Skillsmp SearchUse when finding, browsing, or installing community skills, or when a needed capability might exist as a marketplace skill. Triggers on "find a skill", "search skills", "install skill", "skillsmp", or "marketplace".Votes: 0GitHub stars: 2
- Ssrf TestingUse when testing for SSRF in web applications, accessing internal services through SSRF, bypassing SSRF filters, auditing applications that fetch user-supplied URLs, or implementing SSRF prevention. Covers blind and non-blind SSRF, cloud metadata exploitation, protocol smuggling, and defense strategies.Votes: 0GitHub stars: 2
- Tavily WebWeb search, content extraction, site crawling, URL discovery, and AI-powered research using Tavily API via curl. Use when user needs web search results, current events, news, finance data, content from URLs, site-wide extraction, or multi-topic research with citations. Trigger phrases: 'search the web', 'find online', 'extract from URL', 'crawl site', 'research topic', 'latest news about', 'web search', 'tavily'.Votes: 0GitHub stars: 2
- Telethon DevelopmentUse when working with Telethon (Telegram MTProto client) — debugging FloodWaitError, mocking for tests, handling None-as-False boolean fields, entity resolution, rate limiting, session management, or version compatibility issuesVotes: 0GitHub stars: 2
- Test EngineeringUse when designing a test strategy, deciding what to automate or which tests a change needs, applying Security TDD or planning security regression and abuse tests, reviewing or generating tests (especially AI-written ones) for weak or self-confirming assertions, triaging flaky tests, diagnosing slow suites or coverage gaps, or interpreting coverage and mutation results. Framework-agnostic; language-specific test writing hands off to go-tdd, python-tdd, rust-tdd or typescript-tooling-tdd.Votes: 0GitHub stars: 2
- Universal Research OrchestratorUse when starting research, audit, or investigation tasks needing multi-source coverage — security/sink research, codebase audits, framework deep-dives, market comparison, or any "exhaustive / most complete / long horizon" request. Triggers on "audit", "investigate", "research", "find vulns", "exhaustive", "long horizon", "deep dive", "most complete".Votes: 0GitHub stars: 2
- Universal Skill FinderUse when finding, browsing, or installing community skills across marketplaces, or when a needed capability might exist as a marketplace skill. Triggers on "find a skill", "search skills", "install skill", "skillsmp", "skills.sh", or "marketplace".Votes: 0GitHub stars: 2
- Vuln ResearchUse when performing security-focused vulnerability research, bug bounty hunting, penetration testing, or exploit development on a specific target codebase or binary. Covers taint analysis across 30+ attack domains, sink analysis for 10+ languages, SAST/DAST integration, agent sweep, DuckDB-persisted phase pipeline, fuzzing harness, stateful fuzzing, directed symbolic execution, history-driven fuzzing, FuzzGPT, generate edge-case test programs, differential / metamorphic oracle, continuous / p...Votes: 0GitHub stars: 2
- Web Performance OptimizationUse when improving Lighthouse scores, reducing page load times, debugging performance bottlenecks, optimizing Core Web Vitals for SEO, or implementing modern browser performance APIs like View Transitions and Speculation RulesVotes: 0GitHub stars: 2
- Zero DofUse when directing LLM coding agents on substantial development tasks — establishing executable oracles, designing agent playbooks, constraining agent output quality, or preventing metric gaming. Also use when LLM-generated code has recurring quality or architecture issues that need systematic correction. Triggers: zero dof, zero degrees of freedom, executable oracle, constrain agent, agent quality, LLM coding constraints, playbook design, oracle pipeline.Votes: 0GitHub stars: 2
- ZeroclawUse when building, configuring, deploying, or troubleshooting ZeroClaw AI agent infrastructure — including provider setup, channel binding, memory backends, config.toml authoring, CLI usage, Docker/native runtime, and migration from other agent frameworksVotes: 0GitHub stars: 2
- FuzzgptUse when you want to fuzz any software target — library, compiler, interpreter, parser, kernel/syscall, DB engine, SMT solver, binary/file format, or network protocol — by priming an LLM with that target's HISTORICAL bug-triggering code to generate unusual, edge-case inputs (history-driven LLM fuzzing). FuzzGPT-derived: retrieval replaces fine-tuning (Deng et al., arXiv:2304.02014): mine bug reports → auto-label each snippet's buggy fuzz target → few-shot / zero-shot / retrieval generation → ...Votes: 0GitHub stars: 2
- Hermes Mr WatchUse when adding GitLab MRs to the Hermes watcher on ssh-vhs, editing or redeploying watch_gitlab_mr_findings.py, diagnosing missed/duplicate MR status messages in Telegram, or verifying the Hermes no-agent cron.Votes: 0GitHub stars: 2
- JevUse when writing or improving Jev programs — the TypeSafe judgment model behind POST /v1/systemone. Covers primitive selection (noul, choice, score), instruction and criteria writing, minimal state and token budgets, the raw HTTP API, confidence-gated composition, speculative fan-out, and the symptom-to-fix revision table. Triggers: jev, judgment model, typesafe, systemone, noul, choice, score, confidence floor, jaggedness.Votes: 0GitHub stars: 2
- Security Fix OracleUse when turning a real project's git history into a labeled, enriched, leakage-free security-fix dataset ("oracle") for a vulnerability classifier, rule-authoring feed, or risk-prioritization model. Triggers: "mine commits for security fixes", "build a vuln dataset / training corpus from git history", "label commits by CWE / vuln category", "SZZ", "blame who introduced the vulnerability", "vulnerability-introducer attribution", "skill-gap analysis", "CVSS scoring of commits", "diff-verified ...Votes: 0GitHub stars: 2
- Vast Experiment OpsUse when running or reporting ML experiments on rented Vast.ai GPU instances — diagnosing strict FP32 equivalence checks that pass on CPU but fail on CUDA (cuDNN TF32), parsing JSON metrics collected over SSH, and keeping held-out/test-scope reporting accurate.Votes: 0GitHub stars: 2
- Opengrep Rule CreatorUse when creating, repairing, testing, or reviewing OpenGrep YAML rules, porting Semgrep rules, or modeling sources, sinks, sanitizers, and propagators. Apply procedural-first augmentation, claim-specific semantics, test-first fixtures, and false-positive/false-negative regression gates. Includes four complete commented examples and justified residual decision-model guidance.Votes: 0GitHub stars: 2
- Agentic Spec Driven DevelopmentUse when applying spec-driven development to agentic coding: drafting, reviewing, auditing or validating project specs, requirements or contracts for ambiguity, gaps, conflicts or readiness (alone or with user-requested subagent reviewers); clarifying ambiguous behavior or acceptance criteria, reconciling conflicting specs and code, changing an approved contract, handing implementation to or resuming it from another agent or session, or closing out a plan checklist against the delivered state...Votes: 0GitHub stars: 2
- SKILLUse when designing test strategies, planning coverage across the test pyramid, evaluating automation candidates, or improving test quality. Also use when diagnosing flaky tests, slow test suites, or coverage gaps. Framework-agnostic strategy and automation planning.Votes: 0GitHub stars: 2
- SKILLUse when designing test strategies, planning coverage across the test pyramid, evaluating automation candidates, or improving test quality. Also use when diagnosing flaky tests, slow test suites, or coverage gaps. Framework-agnostic strategy and automation planning.Votes: 0GitHub stars: 2
- SKILLUse when designing a test strategy, deciding what to automate or which tests a change needs, reviewing or generating tests (especially AI-written ones) for weak or self-confirming assertions, triaging flaky tests, diagnosing slow suites or coverage gaps, or interpreting coverage and mutation results. Framework-agnostic; language-specific test writing hands off to go-tdd, python-tdd, rust-tdd or typescript-tooling-tdd.Votes: 0GitHub stars: 2
- Evaluating Enhancing Vulnerability ReasoningPerform DAG-structured vulnerability reasoning on code, modeling causal dependencies between code facts instead of linear chain-of-thought. Use when asked to: 'analyze this code for vulnerabilities', 'explain why this code is vulnerable', 'trace the root cause of this security bug', 'review this function for memory safety issues', 'is this code exploitable and why', 'reason about the security of this code path'.Votes: 0GitHub stars: 2
- Go AlgorithmsUse when choosing Go slices, maps, sets, queues, heaps, linked lists, trees or graphs, or implementing two pointers, sliding windows, binary search, prefix sums, monotonic stacks, hash-map patterns, two heaps, merge intervals, cyclic sort, BFS/DFS, backtracking, dynamic programming, greedy or topological sort. Covers invariants, complexity, Unicode, integer overflow and mutation contracts.Votes: 0GitHub stars: 2
- Go Api DesignUse when designing or reviewing Go public APIs, generic constraints and type inference, interface method sets or typed nil, consumer-owned contracts, SOLID tradeoffs, constructors and functional options, or creation, composition and behavioral design patterns such as adapters, middleware, observers and state.Votes: 0GitHub stars: 2
- Go ConcurrencyUse when designing or debugging Go goroutines, channels, select, bounded worker pools, pipelines, fan-in/fan-out, semaphores, rate limits, context cancellation, sync locks/atomics, goroutine leaks, data races, or container GOMAXPROCS limits.Votes: 0GitHub stars: 2
- Go IdiomaticUse when writing or reviewing everyday Go, fixing slice aliasing, nil values, UTF-8 indexing, overflow, loop captures, error shadowing, defer/resource leaks, receiver copying, initialization surprises, or module/toolchain mismatches.Votes: 0GitHub stars: 2
- Go StdlibUse when choosing or debugging Go standard-library APIs for Reader/Writer and file ownership, Scanner limits, JSON/CSV/XML decoding, UTF-8 and regex, time parsing, HTTP clients/servers, URL/path handling, slog, flags, randomness or database/sql; especially truncated input, unchecked flushes and unbounded reads.Votes: 0GitHub stars: 2
- Go System DesignUse when organizing Go packages or modules, deciding internal versus pkg, evolving a CLI or net/http service, choosing clean/hexagonal/DDD boundaries, or assigning startup configuration, SQL transaction and shutdown ownership.Votes: 0GitHub stars: 2
- Go TddUse when implementing Go behavior test-first, reproducing a Go regression, characterizing legacy packages, writing table tests/subtests, httptest or filesystem boundary tests, fuzz/property tests, B.Loop benchmarks, or deterministic testing/synctest tests, and configuring race/coverage test CI.Votes: 0GitHub stars: 2
- Parallel SearchAI-powered web search via Parallel API. Returns ranked results with LLM-optimized excerpts. Use for up-to-date research, fact-checking, domain-scoped searching, and discovering web content. Triggers: "search the web", "web search", "look up", "find online", "current news about", "research [topic]", "fact-check", "find on Reddit/GitHub/Stack Overflow".Votes: 0GitHub stars: 2
- Python AlgorithmsUse when choosing Python collections or implementing and reviewing two pointers, sliding windows, binary search, prefix sums, monotonic stacks, hash-map patterns, two heaps, merge intervals, cyclic sort, BFS/DFS, backtracking, dynamic programming, greedy algorithms, topological sort, union-find, tries, bit manipulation, string search, order statistics, or dynamic range indexes. Covers invariants, complexity, mutation, duplicates, cycles, and boundary cases.Votes: 0GitHub stars: 2