All authors
Claude Skills by smartworldarafath
github.com/smartworldarafath182 skills0 installs0 views
- Agent ReachRead-only access to internet platforms (Twitter/X, Reddit, YouTube subtitles, GitHub, LinkedIn, Bilibili, web). Use when the agent needs to search, read web links, retrieve social discussions, CVE/vulnerability intel, or when standard web search/fetch is blocked or insufficient.Votes: 0GitHub stars: 5
- Awesome Agent SkillsCurated collection of 1497+ official Agent Skills from leading engineering teams and the community. References hand-picked, real-world skills — not AI-generated bulk content — compatible with Claude Code, Codex, Antigravity, Gemini CLI, Cursor, GitHub Copilot, OpenCode, Windsurf, and more. Use when discovering high-quality community skills, looking for proven patterns from real engineering teams, or finding skills for specific domains like testing, DevOps, frontend, security, and more.Votes: 0GitHub stars: 5
- Awesome Hacking ResourcesAwesome Hacking Resources — curated collection of hacking/penetration testing resources (learning, CTF, exploit dev, privilege escalation, OSINT, malware analysis, AI red teaming, vulnerable apps/OS, exploits, forums). GPL-3.0 licensed; referenced externally only, no content copied.Votes: 0GitHub stars: 5
- Awesome HackingAwesome Hacking — a collection of awesome lists for hackers, pentesters, and security researchers (Android, AppSec, Bug Bounty, AI Security, Cryptography, Forensics, Payloads, Reverse Engineering, Web Security, and more). CC0-1.0 licensed; referenced externally only, no content copied.Votes: 0GitHub stars: 5
- Brightdata McpBright Data Model Context Protocol (MCP) server for industrial web scraping, CAPTCHA bypass, residential proxy routing, and search engine data extraction (brightdata/brightdata-mcp). Use when the agent needs to bypass anti-bot walls, scrape protected websites, or collect public web intelligence.Votes: 0GitHub stars: 5
- Claude BughunterClaude-BugHunter — a Claude Code skill bundle for bug hunting and external red-team work (82 skills, 15 slash commands, 681 disclosed-report patterns across 24 vulnerability classes). MIT + CC-BY-4.0; referenced externally only, no content copied.Votes: 0GitHub stars: 5
- Claude MemPersistent memory compression system for Claude Code and AI coding agents. Compresses conversation transcripts, knowledge graphs, and project context into compact memory snapshots that survive across sessions. Use when you want Claude Code to remember previous work, decisions, and context without re-loading full conversation history. Features transcript-based compression, multi-agent memory sharing, team cowork sessions, and cross-tool support (Cursor, Grok, Windsurf, OMP, Hermes, Pi, and more).Votes: 0GitHub stars: 5
- Context And DecisionsGovern stable domain context with a narrowly scoped CONTEXT.md when needed, and route hard-to-reverse decisions to ECC's existing architecture-decision-records skill. Use when domain terms require repeated explanation, one term has multiple meanings, unclear language causes module-boundary mistakes, or domain semantics must remain separate from architecture decisions.Votes: 0GitHub stars: 5
- Docs GovernanceRoute broad documentation-governance requests to existing ECC skills and run an opt-in, read-only audit of mapped documentation roles, links, ADR indexes, and evidence references. Use when a user asks for documentation governance, project-knowledge organization, documentation integrity, or a deterministic docs audit without naming a narrower skill.Votes: 0GitHub stars: 5
- Ecc WorkflowEverything Claude Code (ECC) engineering harness and multi-agent workflow system. Use when planning, implementing features, fixing bugs, applying TDD, running code reviews, or orchestrating subagents across Claude Code, Codex, Antigravity, Cursor, and Windsurf.Votes: 0GitHub stars: 5
- GtfobinsGTFOBins — curated reference of Unix-like executables that can bypass local security restrictions (privilege escalation, post-exploitation). Owner-authorized defensive auditing only; references GTFOBins externally (GPL-3.0), no content copied.Votes: 0GitHub stars: 5
- HacktricksHackTricks — pentesting tricks and techniques from CTFs, real-world apps, and security research (book.hacktricks.xyz). Covers web, network, AD, cloud, mobile, reversing, and more. Referenced externally only, no content copied.Votes: 0GitHub stars: 5
- Hyperbrowser McpHyperbrowser Model Context Protocol (MCP) server for cloud headless browser automation, dynamic SPA crawling, session recording, and stealth web scraping (hyperbrowserai/mcp). Use when the agent needs to render complex JavaScript single-page apps, crawl websites, or execute browser agents.Votes: 0GitHub stars: 5
- ImpeccableDesign vocabulary and quality enforcement system for AI coding agents. Use to steer design with commands like polish, bolder, quieter, critique, and audit — catching AI slop before it ships. Features 24 commands including live iteration, scored UX reviews, technical quality audits, and accessibility/performance hardening. Works with Claude Code, Cursor, Codex, Gemini CLI, Grok Build, Google Antigravity, and 10+ other coding agents.Votes: 0GitHub stars: 5
- LightpandaHeadless browser built from scratch for AI agents and automation workflows. 16x lighter and 9x faster than Chromium — 123MB peak memory vs 2GB, 5s vs 46s for 100 pages. Written in Zig, not a Chromium fork or WebKit patch. Use when integrating headless browser automation into AI agent pipelines, web scraping at scale, or any automation needing a lightweight, fast alternative to Puppeteer/Playwright with Chromium. Supports CDP (Chrome DevTools Protocol) for drop-in compatibility.Votes: 0GitHub stars: 5
- Module GovernanceEstablish or maintain a business module's local agent instructions, domain-context links, and interface ownership when implementing a new module or changing its responsibilities. Reuse project-level rules and existing ECC workflows; ordinary bug fixes, styling, and read-only design discussions do not start module documentation setup.Votes: 0GitHub stars: 5
- Offensive Active DirectoryActive Directory security assessment and hardening methodology covering Kerberoasting/AS-REP Roasting exposure, BloodHound ACL path auditing, ADCS certificate template misconfigurations (ESC1-ESC15), delegation controls (unconstrained/constrained/RBCD), and tiered administration architecture.Votes: 0GitHub stars: 5
- Offensive Advanced RedteamAuthorized Purple Team and adversary emulation methodology mapped to MITRE ATT&CK, validating that EDR, SIEM, and network telemetry accurately detect and alert on multi-stage intrusion scenarios.Votes: 0GitHub stars: 5
- Offensive Ai SecurityAI and LLM application security assessment aligned with OWASP Top 10 for LLM Applications covering direct and indirect prompt injection, agent tool-call authorization gates, RAG document ACL enforcement, structured output validation, and system prompt isolation.Votes: 0GitHub stars: 5
- Offensive Anti ForensicsDigital forensics readiness and log integrity engineering covering centralized immutable SIEM forwarding, Windows Event Log / Linux auditd tamper detection, filesystem timestamp consistency (MFT `$SI` vs `$FN`), and chain-of-custody preservation.Votes: 0GitHub stars: 5
- Offensive Api AbuseAPI business logic and automated abuse resilience assessment covering bulk enumeration prevention, cursor pagination bounds, idempotency key enforcement on state-changing endpoints, and cost-based rate limiting.Votes: 0GitHub stars: 5
- Offensive Api SecurityComprehensive OWASP API Security Top 10 auditing across REST, GraphQL, gRPC, and WebSocket APIs covering object/function-level authorization, mass assignment, OpenAPI schema validation, and token-bucket rate limiting.Votes: 0GitHub stars: 5
- Offensive Basic ExploitationSource and binary auditing for classic memory safety flaws including unbounded stack copies (`gets`, `strcpy`, `sprintf`), format string specifiers (`printf(user_buf)`), and `-fstack-protector-strong` / `-Wformat-security` enforcement.Votes: 0GitHub stars: 5
- Offensive Bluetooth BleBluetooth Low Energy (BLE) security assessment covering GATT profile enumeration, characteristic read/write authentication requirements, LE Legacy vs LE Secure Connections (ECDH) pairing, and application-layer encryption.Votes: 0GitHub stars: 5
- Offensive Bluetooth ClassicBluetooth Classic (BR/EDR) security assessment covering SDP service discovery, link key negotiation minimum entropy (KNOB/BIAS remediation), HID profile restrictions, and discoverability controls.Votes: 0GitHub stars: 5
- Offensive Bug IdentificationSystematic vulnerability discovery through static code auditing, CodeQL and Semgrep taint-tracking queries, security patch diffing, and sink-to-source reachability verification.Votes: 0GitHub stars: 5
- Offensive Business LogicApplication business logic vulnerability assessment covering multi-step workflow state machine enforcement, numeric boundary/negative value manipulation, privilege/subscription tier validation, currency rounding discrepancies, and invariant verification. Use when auditing checkout, billing, and multi-stage workflows.Votes: 0GitHub stars: 5
- Offensive C2 FrameworksNetwork threat hunting and detection engineering for command-and-control (C2) channels covering JA3/JA4 TLS fingerprinting, periodic beacon jitter statistical analysis, DNS tunneling entropy detection, and egress proxy inspection.Votes: 0GitHub stars: 5
- Offensive Cicd PipelineCI/CD workflow security assessment for GitHub Actions, GitLab CI, and Jenkins covering `pull_request_target` untrusted code execution, `${{ }}` script injection, third-party action SHA pinning, ephemeral runners, and `GITHUB_TOKEN` permissions.Votes: 0GitHub stars: 5
- Offensive Cicd SecretsCI/CD secret hygiene and architecture audit covering replacement of long-lived cloud keys with OIDC workload identity federation, environment approval gates, log redaction, and pre-commit secret scanning.Votes: 0GitHub stars: 5
- Offensive CloudAWS, Azure, and GCP cloud security assessment covering IAM privilege escalation paths (`iam:PassRole`, policy versioning, Azure RBAC/Entra roles, GCP service account impersonation), storage bucket public exposure, IMDSv2 enforcement, and VPC endpoints.Votes: 0GitHub stars: 5
- Offensive Container EscapeDocker and OCI container isolation auditing covering `--privileged` risks, dangerous Linux capabilities (`CAP_SYS_ADMIN`, `CAP_DAC_READ_SEARCH`), hostPath/docker.sock mounts, seccomp/AppArmor profiles, and rootless user namespaces.Votes: 0GitHub stars: 5
- Offensive Crash AnalysisCrash triage and root-cause analysis methodology using WinDbg, GDB, LLDB, AddressSanitizer (ASan), MemorySanitizer (MSan), and UndefinedBehaviorSanitizer (UBSan) to classify defects and produce minimal reproducers.Votes: 0GitHub stars: 5
- Offensive Crypto AttacksApplied cryptography implementation auditing covering ECB/CBC padding oracle elimination, AEAD (AES-GCM, ChaCha20-Poly1305) nonce uniqueness, constant-time comparisons, CSPRNG usage, and Argon2id/scrypt password hashing.Votes: 0GitHub stars: 5
- Offensive Data ExfiltrationData Loss Prevention (DLP) and egress control assessment covering recursive DNS restrictions, egress proxy allowlisting, S3/GCS VPC Service Controls, and database bulk-query anomaly detection.Votes: 0GitHub stars: 5
- Offensive Deauth DisassocProtected Management Frames (802.11w / PMF) auditing methodology verifying whether access points and clients enforce cryptographic authentication on deauthentication, disassociation, and robust action frames.Votes: 0GitHub stars: 5
- Offensive Dependency ConfusionDependency confusion vulnerability auditing across npm, PyPI, Maven, NuGet, and Cargo, verifying organization scope reservations, `--index-url` vs `--extra-index-url` pitfalls, and artifact repository upstream routing rules.Votes: 0GitHub stars: 5
- Offensive DeserializationInsecure deserialization analysis across Java (ObjectInputStream, Jackson, XStream), .NET (BinaryFormatter, Json.NET TypeNameHandling), PHP (unserialize, Phar), Python (pickle, PyYAML), and Node.js, focusing on gadget chain reachability and safe schema-validated data formats. Use when auditing serialized state or message queues.Votes: 0GitHub stars: 5
- Offensive Edr EvasionEndpoint Detection and Response (EDR) sensor telemetry auditing covering Event Tracing for Windows (ETW), AMSI integration, kernel callback health, user-mode hook integrity, and anti-tamper protection verification.Votes: 0GitHub stars: 5
- Offensive Evil TwinRogue access point and SSID spoofing resilience assessment covering Wireless Intrusion Detection/Prevention System (WIDS/WIPS) alerting verification, client auto-connect profile hygiene, and certificate-pinned 802.1X profiles.Votes: 0GitHub stars: 5
- Offensive Exploit Dev CourseStructured systems security curriculum covering x86_64 and ARM64 calling conventions, stack frame layout, glibc ptmalloc / Windows Segment Heap internals, and modern compiler hardening flags.Votes: 0GitHub stars: 5
- Offensive Exploit DevelopmentMemory corruption root-cause analysis and patch engineering covering stack and heap buffer overflows, use-after-free (UAF), type confusion, integer overflow calculations, and compiler sanitizer verification.Votes: 0GitHub stars: 5
- Offensive Fast CheckingHigh-signal rapid security triage checklist for developers and auditors to quickly verify authentication, authorization, secret hygiene, security headers, dependency health, and binary mitigations before release.Votes: 0GitHub stars: 5
- Offensive File UploadFile upload security auditing covering extension allowlisting, MIME and magic-byte verification, path traversal in filenames, archive extraction (Zip Slip), image processing parser safety, polyglot file handling, and isolated object storage serving with nosniff headers. Use when auditing upload handlers and media pipelines.Votes: 0GitHub stars: 5
- Offensive Fuzzing CourseStructured training curriculum on automated software testing: instrumentation mechanics (` SanitizerCoverage`), dictionary creation, persistent-mode harnesses, differential fuzzing, and continuous fuzzing in CI/CD (OSS-Fuzz).Votes: 0GitHub stars: 5
- Offensive FuzzingPractical coverage-guided fuzzing methodology using AFL++, libFuzzer, Honggfuzz, and Cargo-Fuzz, covering fuzz harness writing, seed corpus curation, custom structure-aware mutators, sanitizer integration, and coverage maximization.Votes: 0GitHub stars: 5
- Offensive GraphqlGraphQL API security assessment covering schema introspection exposure, query depth and complexity DoS, alias/batching rate-limit bypass, field-level authorization enforcement, and resolver injection checks. Use when auditing Apollo, Hasura, Yoga, or custom GraphQL servers.Votes: 0GitHub stars: 5
- Offensive IdorInsecure Direct Object Reference (IDOR) and Broken Object Level Authorization (BOLA) assessment covering sequential/UUID identifier predictability, horizontal and vertical privilege matrix testing, multi-tenant isolation, and Row-Level Security (RLS) policy verification. Use when auditing REST/GraphQL resource endpoints.Votes: 0GitHub stars: 5
- Offensive Initial AccessExternal perimeter and attack-surface auditing covering internet-facing asset discovery, VPN/ZTNA multi-factor authentication enforcement, exposed administrative interfaces, and edge appliance patch verification.Votes: 0GitHub stars: 5
- Offensive IotIoT and embedded hardware/firmware security assessment covering debug interface lockdown (UART, JTAG, SWD), SPI/NAND flash encryption, hardware root-of-trust Secure Boot verification, signed OTA firmware updates, and RTOS memory protection.Votes: 0GitHub stars: 5