All authors
Claude Skills by siddu1004
github.com/siddu1004345 skills29 installs1,248 views
- Owasp Top 10 TestingTest an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, integrity failures, logging and alerting failures, mishandling of exceptional conditions) and report only what they could actually prove, mapped back to the category...Votes: 0GitHub stars: 3
- Penetration Testing With StrixPentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, s...Votes: 0GitHub stars: 3
- Reverse Engineer AnythingReverse engineer native, managed, Electron/JavaScript, packaged, firmware, and browser targets with REA. Use shipped-artifact or requested runtime evidence to explain features, compare versions, decompile code, or guide a reconstruction. Skip REA for ordinary source-repository architecture analysis.Votes: 0GitHub stars: 3
- Security ScanScan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. Use when auditing a .claude/ directory — CLAUDE.md, settings.json, MCP servers, hooks, or agent definitions.Votes: 0GitHub stars: 3
- Web App Penetration TestingPentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match. Runs with Strix, either the self-hosted open-source CLI or the managed app.strix.ai cloud. Use when the user asks to pentest, hack, security-test, or audit their web app, we...Votes: 0GitHub stars: 3
- Sfp HiveChooses which SFP skills to use for a task, in what order, and learns from feedback. Use at the start of any substantial build, fix, test, review, security or deploy task, and again when the work moves to a new phase. It reads the task, the project's files and the skills used so far, returns a short ordered list of skills to load instead of many, and improves when you tell it what helped and what did not.Votes: 0GitHub stars: 3
- SfpSFP (Skills for Productivity) is a library of 1,065 agent skills across 24 categories - frontend, backend, mobile, languages, testing, devops, security, agents, agent-dev (skills, plugins, hooks, MCP), AI/ML, AI gateway, data APIs, content, business, industry, networking, research, web3, engineering, memory. Use it first whenever a task might have a matching skill - building UI, APIs or apps, reviewing or securing code, designing agents, plugins or MCP servers, finding a free API or data sour...Votes: 0GitHub stars: 3
- Delivery GateStop hook that blocks Claude from finishing until quality checks pass. Detects rationalization patterns (surface text heuristics), stale learning logs (filesystem mtime), and low disk space. Complements self-audit by mechanically enforcing learning capture habits. Use when Claude should be mechanically blocked from declaring work finished before quality checks and learning capture actually pass.Votes: 0GitHub stars: 3
- Agent Payment X402Add x402 payment execution to AI agents with per-task budgets, spending controls, and non-custodial wallets. Supports Base through agentwallet-sdk, X Layer through OKX Payments / OKX Agent Payments Protocol, and Solana plus multi-network EVM through the upstream x402 packages with facilitator-based settlement. Use when an agent must pay for something itself and needs per-task budgets, spending controls, and a non-custodial wallet.Votes: 0GitHub stars: 3
- CareerOpen-source AI job search and career agent -- revise resume, evaluate offers, generate CVs and resumes tailored to company needs, scan portals, track applications. Use when revising a resume, updating a CV, pasting a job description, preparing for interviews, or tracking job applications.Votes: 0GitHub stars: 3
- FreellmapiRun and use FreeLLMAPI, one OpenAI-compatible /v1 endpoint that stacks the free tiers of 34 LLM providers with automatic routing and failover. Use when the user wants free LLM inference, to point an OpenAI SDK, coding agent or other client at a free multi-provider endpoint, to self-host FreeLLMAPI with Docker, to pick a routing strategy such as auto:fast or auto:smart, or to fix a FreeLLMAPI setup problem.Votes: 0GitHub stars: 3
- GraphifyUse for any question about a codebase, its architecture, file relationships, or project content — especially when graphify-out/ exists, where the question should be treated as a graphify query first. Turns any input (code, docs, papers, images, videos) into a persistent knowledge graph with god nodes, community detection, and query/path/explain tools.Votes: 0GitHub stars: 3
- Cloudflare CodemodeBuild and run sandboxed agent tools using Cloudflare Code Mode (@cloudflare/codemode). Connects dynamic Worker sandboxes, Durable Objects, OpenAPI, and MCP servers safely. Use when creating agent sandboxes, building code tools, or integrating Cloudflare Workers with agents.Votes: 0GitHub stars: 3
- Harness EngineeringDesign, test, and optimize AI agent execution harnesses, test fixtures, action spaces, and evaluation gates. Use when building agent evaluation loops, configuring autonomous runtime environments, or optimizing agent action spaces.Votes: 0GitHub stars: 3
- OpencodeAutomate coding workflows using OpenCode CLI (opencode) and terminal subagents. Use when orchestrating background coding tasks, running automated pull request triage, or integrating multi-model coding workflows.Votes: 0GitHub stars: 3
- Skill InspectorReview AI agent skills before installation using NVIDIA SkillSpector and source-aware semantic review. Use when asked whether a skill or downloaded skill folder is safe, trustworthy, installable, over-permissioned, or malicious.Votes: 0GitHub stars: 3
- Browser UseAutomate browser interactions for AI agents using the Browser-Use Python library and Playwright. Use when building web scraping agents, automating complex UI workflows, interacting with authenticated web apps, or testing browser tasks.Votes: 0GitHub stars: 3
- GraftCompile and execute declarative multi-agent pipelines using the Graft CLI runtime. Compose agent graphs, state handoffs, and verification steps into repeatable workflows. Use when orchestrating cooperating agents.Votes: 0GitHub stars: 3
- MoliFast, resource-light headless browser automation using Moli for web scraping and AI agent DOM extraction. Use when running lightweight browser automation, extracting clean DOM content, or scraping web data without heavy Chromium overhead.Votes: 0GitHub stars: 3
- Orch Build MvpOrchestrate bootstrapping a working prototype or MVP from a design or specification document -- ingest the SDD/PRD/spec, plan thin vertical slices, scaffold the initial prototype for testing, and drive a build-eval loop with review and gated feat commits. Use when a specification or design must become a working prototype or MVP.Votes: 0GitHub stars: 3
- ColibriCompile and run ultra-fast streaming MoE local model inference using the pure-C Colibri engine. Use when running minimal-footprint streaming model inference on CPU or lightweight machines.Votes: 0GitHub stars: 3
- Api DesignREST API design patterns and web service interface design for data exchange -- resource naming, status codes, pagination, filtering, error responses, versioning, and rate limiting for production APIs. Use when designing web service interfaces, REST APIs, endpoints, or data exchange protocols.Votes: 0GitHub stars: 3
- Chief Financial OfficerOwns the financial position: planning, budgeting, forecasting, unit economics, cash, and the numbers the business is run and reported on. Use this to build or challenge a budget, model a decision's financial consequence, assess unit economics or runway, evaluate an investment or spend request, set financial controls, or when a plan's numbers do not reconcile. Also use to decide whether the business can afford something.Votes: 0GitHub stars: 3
- Chief Human Resources OfficerOwns the organization itself: org design, hiring, performance, compensation, development, culture, and employee relations. Use this to design or restructure a team, plan hiring, write a role or leveling definition, handle a performance or compensation question, diagnose why a team is underperforming for non-technical reasons, or assess the people risk in a plan. Also use for onboarding design and retention of key staff.Votes: 0GitHub stars: 3
- Chief Information Security OfficerHeadcount executive CISO role guidance: enterprise security governance, risk acceptance, board reporting, and compliance posture.Votes: 0GitHub stars: 3
- Chief Operating OfficerOwns execution: how work actually gets done across the organization, including process, program management, capacity, vendors, supply chain, and service delivery. Use this when execution is the problem rather than strategy, to design or fix a process, to resolve cross-functional handoff failures, to plan capacity, to assess delivery risk, or when the same failure keeps recurring. Also use to decide whether to build, hire, or outsource a capability.Votes: 0GitHub stars: 3
- Chief Product OfficerOwns what gets built and why: product strategy, roadmap, discovery, user experience, and the definition of success for each release. Use this to decide what to build next, to cut scope, to turn a business goal into a product bet, to judge whether a feature is worth its cost, or when engineering and go-to-market disagree about what a release is for. Also use for roadmap sequencing and for killing work that is not earning its place.Votes: 0GitHub stars: 3
- Chief Revenue OfficerOwns the revenue engine end to end: sales, monetization, pricing, customer success, retention, and partnerships. Use this for pricing and packaging decisions, sales strategy and coverage, forecast and pipeline health, churn and expansion, partner and channel strategy, or when marketing-sourced demand is not converting. Also use to decide which segments to pursue and which to decline.Votes: 0GitHub stars: 3
- Code ReviewHeadcount engineering organizational code review policy, team peer-review workflow standards, and feedback governance.Votes: 0GitHub stars: 3
- Completion VerificationHeadcount organizational definition-of-done checklist, acceptance verification, and milestone sign-off criteria.Votes: 0GitHub stars: 3
- Founder BrandEstablish startup brand identity, company naming, domain checks, and founder look. Use when naming a new business or startup, creating a brand tagline, or defining initial founder brand voice and logo direction.Votes: 0GitHub stars: 3
- Headcount Api DesignDesigns interfaces that survive their consumers — resource modeling, errors, versioning, pagination, and compatibility. Use this to design a new API, review one before it ships, decide how to version or deprecate, fix an interface consumers keep misusing, or work out whether a change is breaking.Votes: 0GitHub stars: 3
- Headcount Brand VoiceCaptures how a person or brand actually writes and turns it into reusable voice instructions every other content skill draws from. Use this before drafting any content for a new brand or client, when output keeps coming back sounding generic, when several writers need to sound like one, or when a voice needs defining without existing samples to learn from.Votes: 0GitHub stars: 3
- Headcount Design SystemBuilds and maintains the design system a product is assembled from — tokens for color, type, spacing and elevation, component contracts, and the rules that keep them coherent as the product grows. Use this when starting a new interface, when screens have drifted apart visually, when the same component exists three times in slightly different forms, or when a token or component needs adding without breaking what exists.Votes: 0GitHub stars: 3
- Headcount Prompt OptimizerTurns rough intent or a weak prompt into a reliable one — diagnosing why output is inconsistent, restructuring the instruction, and adapting it across models. Use this when a prompt is not producing what was wanted, when output varies run to run, when writing a prompt for a repeated task, when moving a prompt between models, or when someone describes what they want an AI to do and needs it written properly.Votes: 0GitHub stars: 3
- Performance ManagementHeadcount HR and management policy for employee performance management systems, review cycles, feedback calibration, and performance improvement plans.Votes: 0GitHub stars: 3
- Product LaunchHeadcount go-to-market planning, launch readiness criteria, cross-functional tiering, and announcement coordination.Votes: 0GitHub stars: 3
- Security Architecture ReviewHeadcount enterprise security architecture review process for corporate systems, vendor integrations, and compliance sign-offs.Votes: 0GitHub stars: 3
- Skill AuthoringHeadcount guidelines for authoring, reviewing, and standardizing agent skills across company teams.Votes: 0GitHub stars: 3
- Test Driven DevelopmentHeadcount engineering policy for test-driven development adoption, unit testing expectations, and testing governance.Votes: 0GitHub stars: 3
- Vulnerability ManagementHeadcount organizational vulnerability management lifecycle: policies, SLAs, scanner triage, leadership posture reporting, and patch governance.Votes: 0GitHub stars: 3
- ScrapeFinds new job postings matching your profile via installed portal-search CLIs (LinkedIn, local job boards, and any skills added with /add-portal). Deduplicates across runs. Triggers on: job scrape, find jobs, search jobs, new jobs, job search, scrape jobs, /scrapeVotes: 0GitHub stars: 3
- Gpt Image PromptingEngineer detailed prompts and visual composition specifications for GPT-4o, DALL-E 3, and generative image models based on awesome-gpt-image-2 techniques. Use when creating UI mockups, icons, banners, and diagrams.Votes: 0GitHub stars: 3
- Lemo OpuscarDirect and produce short films made entirely in code using Lemo-Opuscar styles (oil painting, watercolor, ukiyo-e, teardown). Use when creating programmatic video, animations, explainers, or promo shorts from code or real archive material, or customizing film styles.Votes: 0GitHub stars: 3
- OpenmontageCreate and render programmatic video montages from video clips, audio tracks, and timeline specs using OpenMontage. Use when automating video compilation, generating clip reels, or synchronizing video transitions.Votes: 0GitHub stars: 3
- SepiaMake AI-generated fiction and professional prose read as human-written. Use when revising or humanizing AI writing, eliminating AI patterns, or reviewing fiction and documents for authentic human voice.Votes: 0GitHub stars: 3
- GlassmorphismFrosted glass effect and translucent UI elements with blurred translucent layers, subtle borders, and depth for modern UI elegance. Use when designing translucent UI elements, frosted glass components, or glassmorphism styling.Votes: 0GitHub stars: 3
- Build Your Own XRecreate core technologies from scratch step-by-step: Git, Redis, Docker, SQLite, HTTP servers, or compilers. Use when building deep foundational systems, designing zero-dependency implementations, or mastering low-level software architecture.Votes: 0GitHub stars: 3
- DifftasticPerform syntax-aware structural diffing on source code using Difftastic (difft). Compares code based on AST structure rather than lines. Use when reviewing syntactic changes, inspecting complex refactors, or comparing nested code blocks across files.Votes: 0GitHub stars: 3
- FloorplanDraw a floorplan of an app's codebase (one repo or several side by side), an interactive node-graph map where every subsystem, module, file and HTTP route has a human-readable name and a one-line description, connected by the imports and HTTP calls between them, at several zoom levels. It is saved as a self-contained floorplan/index.html in the codebase. Use whenever the user wants to visualize, map, diagram, document or get an architectural overview of a codebase, repo or monorepo, understan...Votes: 0GitHub stars: 3