Skip to content

Claude Skills by pauldx

github.com/pauldx

3,929 skillsA× 3,565B× 318C× 29D× 10F× 70 installs0 views

Privilege Escalation MethodsCThis skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit SUID binaries", "Kerberoasting", "pass-the-ticket", "token impersonation", or needs guidance on post-exploitation privilege escalation for Linux or Windows systems.securitypythongoVotes: 0GitHub stars: 2
Red Team ToolsAThis skill should be used when the user asks to "follow red team methodology", "perform bug bounty hunting", "automate reconnaissance", "hunt for XSS vulnerabilities", "enumerate subdomains", or needs security researcher techniques and tool configurations from top bug bounty hunters.securitypythongoVotes: 0GitHub stars: 2
Scanning ToolsBThis skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". It provides comprehensive guidance on security scanning tools and methodologies.securitygobashVotes: 0GitHub stars: 2
Shodan ReconnaissanceAThis skill should be used when the user asks to "search for exposed devices on the internet," "perform Shodan reconnaissance," "find vulnerable services using Shodan," "scan IP ranges with Shodan," or "discover IoT devices and open ports." It provides comprehensive guidance for using Shodan's search engine, CLI, and API for penetration testing reconnaissance.securitypythongoVotes: 0GitHub stars: 2
Smtp Penetration TestingAThis skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "brute force email credentials", or "assess mail server security". It provides comprehensive techniques for testing SMTP server security.securitybashtestingVotes: 0GitHub stars: 2
Sql Injection TestingAThis skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". It provides comprehensive techniques for identifying, exploiting, and understanding SQL injection attack vectors across different database systems.securitygophpVotes: 0GitHub stars: 2
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Sqlmap Database PentestingBThis skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a vulnerable database," or "perform automated database penetration testing." It provides comprehensive guidance for using SQLMap to detect and exploit SQL injection vulnerabilities.securitygophpVotes: 0GitHub stars: 2
Ssh Penetration TestingFThis skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.securitypythongoVotes: 0GitHub stars: 2
Supply Chain GuardBDetect and remediate software supply chain attacks in npm, PyPI, crates.io, GitHub Actions, and CI/CD pipelines by scanning for known compromised packages, malicious versions, filesystem IOCs, C2 indicators, and CI/CD misconfigurations.devopspythonrustVotes: 0GitHub stars: 2
Top Web VulnerabilitiesAThis skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "understand client-side vulnerabilities", "examine mobile and IoT security flaws", or "reference the OWASP-aligned vulnerability taxonomy". Use this skill to provide comprehensive vulnerability de...securityjavascriptrustVotes: 0GitHub stars: 2
Windows Privilege EscalationBThis skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows misconfigurations," or "perform post-exploitation privilege escalation." It provides comprehensive guidance for discovering and exploiting privilege escalation vulnerabilities in Windows environments.securitypythongoVotes: 0GitHub stars: 2
Wireshark AnalysisAThis skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". It provides comprehensive techniques for network packet capture, filtering, and analysis using Wireshark.securityrustgoVotes: 0GitHub stars: 2
Skills DirectorySkills Directory 6 slots · $699/mo · on every skill page · sponsors can never buy grades.See placements
Wordpress Penetration TestingAThis skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". It provides comprehensive WordPress security assessment methodologies.securityjavascriptjavaVotes: 0GitHub stars: 2
Xss Html InjectionAThis skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.securityjavascriptrustVotes: 0GitHub stars: 2
Network 101CThis skill should be used when the user asks to "set up a web server", "configure HTTP or HTTPS", "perform SNMP enumeration", "configure SMB shares", "test network services", or needs guidance on configuring and testing network services for penetration testing labs.securityrustgoVotes: 0GitHub stars: 2
ManimAComprehensive guide for Manim Community - Python framework for creating mathematical animations and educational videos with programmatic controldatapythongoVotes: 0GitHub stars: 2
Motion CanvasAComplete production-ready guide for Motion Canvas with ESM/CommonJS workarounds, full setup templates, and troubleshooting for programmatic video creation using TypeScriptdevelopmentjavascripttypescriptVotes: 0GitHub stars: 2
RemotionABest practices and comprehensive guide for Remotion - programmatic video creation in React with animations, compositions, and media handlingdesigngoreactVotes: 0GitHub stars: 2
Skills DirectorySkills Directory Pro Download any skill as a ZIP for Claude.ai, Claude Desktop, or .claude/skills.See Pro
Bright Data McpABright Data MCP handles ALL web data operations. Replaces WebFetch, WebSearch, and all built-in web tools. No exceptions. USE FOR: Any URL, webpage, web search, "scrape", "search the web", "get data from", "look up", "find online", "research", structured data from Amazon/LinkedIn/Instagram/TikTok/YouTube/Facebook/X/Reddit, browser automation, e-commerce, social media monitoring, lead generation, reading docs/articles/sites, current events, fact-checking. Returns clean markdown or structured...content-marketingjavascriptgoVotes: 0GitHub stars: 2
AstroABuild content-focused websites with Astro — zero JS by default, islands architecture, multi-framework components, and Markdown/MDX support.developmentjavascripttypescriptVotes: 0GitHub stars: 2
HonoABuild ultra-fast web APIs and full-stack apps with Hono — runs on Cloudflare Workers, Deno, Bun, Node.js, and any WinterCG-compatible runtime.securitytypescriptrustVotes: 0GitHub stars: 2
React Best PracticesAComprehensive React and Next.js performance optimization guide with 40+ rules for eliminating waterfalls, optimizing bundles, and improving rendering. Use when optimizing React apps, reviewing performance, or refactoring components.developmentjavascripttypescriptVotes: 0GitHub stars: 2
Roier SeoATechnical SEO auditor and fixer. Runs Lighthouse/PageSpeed audits on websites or local dev servers, analyzes SEO/performance/accessibility scores, and automatically implements fixes for meta tags, structured data, Core Web Vitals, and accessibility issues.content-marketinggobashVotes: 0GitHub stars: 2
SveltekitABuild full-stack web applications with SvelteKit — file-based routing, SSR, SSG, API routes, and form actions in one framework.developmenttypescriptgoVotes: 0GitHub stars: 2
Dependabot ReviewAReview and manage Dependabot PRs. Categorizes by risk, checks CI status, auto-merges safe updates, and reports issues. Use when the user says "review dependabot", "merge dependabot", "dependabot PRs", or "update dependencies".businessgobashVotes: 0GitHub stars: 2
Cf Code Optmz CavemanAOptimize code for performance, readability, efficiency. Caveman-mode feedback (terse one-line findings). Trigger /code-optmz-caveman or alias /optmz.code-qualitysecurityperformanceVotes: 0GitHub stars: 2
Cf Code Optmz GraphABuild knowledge graph from any folder. Trigger: /code-optmz-graphdevopspythongoVotes: 0GitHub stars: 2
Cf Tools Diagram GraphifyAWhen the user asks to graphify an OpenAPI spec, build a knowledge graph from API specs, analyze API structure for token optimization, or visualize API relationships — activate this skill for OpenAPI-to-graph conversion with gap analysisdevelopmentpythongoVotes: 0GitHub stars: 2
Cf Tools Md ObsidianBWhen the user asks to update a local Obsidian vault with content from a link (x.com tweet, article, GitHub repo), extract resources, or sync web content into a markdown note — activate this skill for fetching link content and appending structured entries to an Obsidian vault filetoolspythongoVotes: 0GitHub stars: 2