All authors
Claude Skills by thameema
github.com/thameema9 skills0 installs0 views
- Claude Desktop SkillLong-term memory via memnos. Use when the user references past work, prior decisions, preferences, people, projects, or anything from earlier conversations — and after giving answers that contain decisions, identifiers, or outcomes worth keeping.Votes: 0GitHub stars: 5
- Hld ReviewReview a high-level design (HLD): a design doc, RFC, architecture proposal or "how should we build X" plan. Use before implementation starts, or when asked to review, challenge or sign off a system design.Votes: 0GitHub stars: 5
- Lld ReviewReview a low-level design (LLD): module and class structure, interfaces, data models, schemas, API contracts, sequence of calls and error handling, before or alongside implementation. Use when asked to review an implementation plan, interface design or data model.Votes: 0GitHub stars: 5
- ExplainExplain code, a design, a bug, an error, a review finding or a trade-off in plain English with a concrete real-world scenario. Use when the user says "explain", "why", "what does this do", "I don't get it", "walk me through", "what could go wrong", or when a finding or decision needs to be understood by someone who has not read the code.Votes: 0GitHub stars: 5
- Performing Live Cluster Penetration TestingRun a structured, authorized internal penetration test from INSIDE a live Kubernetes cluster (Azure AKS focus). Covers pod recon, Azure workload-identity and Key Vault credential escalation, internal-only endpoint testing, IMDS reachability, RBAC and privilege-escalation checks, network-policy gaps, and source-code-to-runtime auth correlation — the classes of finding that are only discoverable from inside the perimeter and invisible to the passive/static skills in this pack. Read-only and exe...Votes: 0GitHub stars: 5
- Running Dynamic Exploitation With StrixRun a dynamic, active-exploitation pentest with the self-hosted Strix CLI (usestrix/strix, Apache-2.0) — autonomous AI agents that don't just flag vulnerabilities but attempt real exploits (XSS, SSRF, IDOR, auth/access-control flaws, JWT attacks, business logic, race conditions) and only report findings backed by a working proof-of-concept. Closes the gap the passive skills in this pack (headers, TLS, CORS, SAST, secrets) can't: pattern-matching is not proof of exploitability. Self-hosted OSS...Votes: 0GitHub stars: 5
- Qa BackendQA backend logic: design and run unit, integration and edge-case tests for services, jobs, database code and business rules. Use when asked to test a backend change, find bugs in a service, or raise test coverage where it matters.Votes: 0GitHub stars: 5
- Qa FrontendQA a web frontend: build a test plan from the real UI and run it in a real browser, including click paths, mixed states, forms, errors, responsive layouts and accessibility. Use when asked to test, verify or QA a page, flow or UI change.Votes: 0GitHub stars: 5
- Qa Rest ApiQA a REST API: contract, status codes, validation, auth and authorization, pagination, idempotency and error shapes, against a running instance or an OpenAPI spec. Use when asked to test an endpoint, verify an API change, or check a service for contract drift.Votes: 0GitHub stars: 5