All authors
Claude Skills by tools-only
github.com/tools-only19,166 skills18 installs6,168 views
- 1287 Authorization 5ccfd579Authorization verifies that a requested action or service is approved for a specific entity—distinct from authentication, which verifies identity. A user who has been authenticated is often not authorized to access every resource and perform every action.Votes: 0GitHub stars: 9
- 1287 Authorization B4ae8377HealthKit uses **per-data-type, separate read/write authorization**. Users grant access individually for each health data type.Votes: 0GitHub stars: 9
- 1288 Cryptography 1e1301621. **Avoid storing sensitive data** when possible - the best protection is not having the data 2. **Use established libraries** - never implement cryptographic algorithms yourself 3. **Use modern algorithms** - avoid deprecated algorithms even if they seem convenient 4. **Manage keys securely** - key management is often harder than encryption itselfVotes: 0GitHub stars: 9
- 1289 Csrf 7b57ba0aCSRF attacks trick authenticated users into performing unintended actions by exploiting the browser's automatic credential transmission. The attack works because browsers automatically include cookies with requests to a domain, regardless of the request's origin.Votes: 0GitHub stars: 9
- 129 Fn 28 56fe39feUpdate all documentation to include Codex as cross-platform alternative to RepoPrompt.Votes: 0GitHub stars: 9
- 1290 Deserialization Be9946daSerialization converts objects into transferable data formats, while deserialization reconstructs those objects. Native language serialization formats pose significant risks—enabling denial-of-service, access control breaches, or remote code execution when processing untrusted input.Votes: 0GitHub stars: 9
- 1291 Error Handling 64a30f98This reference documents common errors during preflight validation and how to handle them.Votes: 0GitHub stars: 9
- 1291 Error Handling 91c157e7> **错误 ID**: E003, E007 > **频率**: 中-高 > **严重度**: 🔴 严重 ---Votes: 0GitHub stars: 9
- 1291 Error Handling E12d3c9fImproper error handling can lead to information disclosure, denial of service, or security bypasses. This includes verbose error messages exposing internals, fail-open patterns that skip security checks on errors, and unhandled exceptions that crash services or leave systems in insecure states.Votes: 0GitHub stars: 9
- 1292 Injection D3989e97Injection flaws occur when untrusted data is sent to an interpreter as part of a command or query. The attacker's hostile data tricks the interpreter into executing unintended commands or accessing data without proper authorization.Votes: 0GitHub stars: 9
- 1293 Modern Threats D2ac69d9This reference covers emerging security threats that may not fit traditional categories: prototype pollution, DOM clobbering, WebSocket security, and LLM prompt injection.Votes: 0GitHub stars: 9
- 1294 Ssrf 0941b15eSSRF vulnerabilities allow attackers to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing. This can be used to:Votes: 0GitHub stars: 9
- 1295 Xss 4735df1eXSS occurs when applications include untrusted data in web pages without proper validation or escaping. Attackers can execute scripts in victims' browsers to hijack sessions, deface websites, or redirect users to malicious sites.Votes: 0GitHub stars: 9
- 1297 Setup 3e64c603Configure Supabase MCP with OAuth authenticationVotes: 0GitHub stars: 9
- 1297 Setup 968bf76dConfigure Claude Code statuslineVotes: 0GitHub stars: 9
- 1297 Setup B654d69dConfigure ccproxy/LiteLLM to use Claude Code with any LLM providerVotes: 0GitHub stars: 9
- 1297 Setup E2228d94Configure Tavily MCP server credentialsVotes: 0GitHub stars: 9
- 1297 Setup Ed4939b1[Home](../../README.md) > [Docs](../README.md) > [Installation](.) > Setup This guide provides comprehensive instructions for installing and setting up EverMemOS. ---Votes: 0GitHub stars: 9
- 1298 Sync Allowlist 0dc11fd9Sync allowlist from GitHub repository to user settingsVotes: 0GitHub stars: 9
- 1299 Sync Claude Md 969ca670Sync CLAUDE.md from GitHub repositoryVotes: 0GitHub stars: 9
- 130 Fn 22 53k2 9798f602Create command shim for `/flow-next:epic-review` that invokes the skill.Votes: 0GitHub stars: 9
- 1300 Code Simplifier 11faf8d7Use this agent when code has been written or modified and needs to be simplified for clarity, consistency, and maintainability while preserving all functionality. This agent should be triggered automatically after completing a coding task or writing a logical chunk of code. It simplifies code by following project best practices while retaining all functionality. The agent focuses only on recently modified code unless instructed otherwise. Examples: <example> Context: The assistant has just ...Votes: 0GitHub stars: 9
- 1300 Code Simplifier 325e3798Auto-triggers after TodoWrite tool or before Task tool to ensure new code follows existing patterns for imports, function signatures, naming conventions, base class structure, API key handling, and dependency management. Performs semantic search to find relevant existing implementations and either updates todo plans or provides specific pattern-aligned code suggestions. Examples: <example>Context: Todo "Add Stripe payment integration". Agent finds existing payment handlers use `from utils.api...Votes: 0GitHub stars: 9
- 1300 Code Simplifier 3a2a8fc5Simplifies code after implementation. Reviews recent changes and suggests/applies simplifications while preserving behavior.Votes: 0GitHub stars: 9
- 1300 Code Simplifier 976ddb22Use this agent when code has been written or modified and needs to be simplified for clarity, consistency, and maintainability while preserving all functionality. This agent should be triggered automatically after completing a coding task or writing a logical chunk of code. It simplifies code by following project best practices while retaining all functionality. The agent focuses only on recently modified code unless instructed otherwise. Examples: <example> Context: The assistant has just ...Votes: 0GitHub stars: 9
- 1300 Code Simplifier 9e954890**Research Date**: 2026-02-23 **Source URL**: <https://github.com/anthropics/claude-plugins-official/blob/main/plugins/code-simplifier/agents/code-simplifier.md> **GitHub Repository**: <https://github.com/anthropics/claude-plugins-official> **Version at Research**: 1.0.0 **License**: Apache-2.0 ---Votes: 0GitHub stars: 9
- 1300 Code Simplifier D37b5013Use this agent when code has been written or modified and needs to be simplified for clarity, consistency, and maintainability while preserving all functionality. This agent should be triggered automatically after completing a coding task or writing a logical chunk of code. It simplifies code by following project best practices while retaining all functionality. The agent focuses only on recently modified code unless instructed otherwise. Examples: <example> Context: The assistant has just ...Votes: 0GitHub stars: 9
- 1301 Commit Creator 1c71783dUse this agent when you have staged files ready for commit and need intelligent commit planning and execution. Examples: <example>Context: User has staged multiple files with different types of changes and wants to commit them properly. user: 'I've staged several files with bug fixes and new features. Can you help me commit these?' assistant: 'I'll use the commit-creator agent to analyze your staged files, create an optimal commit plan, and handle the commit process.' <commentary>The user has...Votes: 0GitHub stars: 9
- 1302 Pr Reviewer 2e540740Use this agent when user asks to "review a PR", "review pull request", "review this pr", "code review this PR", "check PR #N", or provides a GitHub PR URL for review. Examples:\n\n<example>\nContext: User wants to review the PR for the current branch\nuser: "review this pr"\nassistant: "I'll use the pr-reviewer agent to find and review the PR associated with the current branch."\n<commentary>\nNo PR number given, agent should auto-detect PR from current branch.\n</commentary>\n</example>\n\n<...Votes: 0GitHub stars: 9
- 1303 Update Pr Summary E19147a1Update PR description with automatically generated summary based on complete changeset.Votes: 0GitHub stars: 9
- 1304 Agent Creator 2ecae63bUse this agent when the user asks to "create an agent", "generate an agent", "build a new agent", "make me an agent that...", or describes agent functionality they need. Trigger when user wants to create autonomous agents for plugins. Examples:\n\n<example>\nContext: User wants to create a code review agent\nuser: "Create an agent that reviews code for quality issues"\nassistant: "I'll use the agent-creator agent to generate the agent configuration."\n<commentary>\nUser requesting new agent c...Votes: 0GitHub stars: 9
- 1304 Agent Creator Dc15bc78Creates Claude Code agent files from requirements — handles discovery, template selection, frontmatter generation, scope determination (project/user/plugin), and plugin.json updates. Use when the user asks to create an agent, generate an agent, add an agent to a plugin, or describes agent functionality they need. Trigger phrases — 'create an agent', 'add an agent', 'build a new agent', 'make me an agent that', 'I need an agent for'. Examples — <example>Context — User wants a code review agent...Votes: 0GitHub stars: 9
- 1305 Create Plugin B6c0c231Guided end-to-end plugin creation workflow with component design, implementation, and validationVotes: 0GitHub stars: 9
- 1306 Aidefense Analyzer 21afc3c1The AI Defense Analyzer integrates with Cisco AI Defense API to provide enterprise-grade security scanning for Agent Skills. It analyzes prompts, instructions, markdown content, and code files for threats including prompt injection, data exfiltration, and malicious patterns.Votes: 0GitHub stars: 9
- 1306 Aidefense Analyzer 708d2986The AI Defense Analyzer integrates with Cisco AI Defense API to provide enterprise-grade security scanning for Agent Skills. It analyzes prompts, instructions, markdown content, and code files for threats including prompt injection, data exfiltration, and malicious patterns.Votes: 0GitHub stars: 9
- 1306 Aidefense Analyzer Cd4d6ca7The AI Defense Analyzer integrates with Cisco AI Defense API to provide enterprise-grade security scanning for Agent Skills. It analyzes prompts, instructions, markdown content, and code files for threats including prompt injection, data exfiltration, and malicious patterns.Votes: 0GitHub stars: 9
- 1307 Behavioral Analyzer 6b1588c1The Behavioral Analyzer uses static code analysis with AST parsing and dataflow tracking to detect threats that require understanding code behavior and data flows. Unlike pattern-based detection, it tracks how data moves through code to identify multi-step attacks.Votes: 0GitHub stars: 9
- 1307 Behavioral Analyzer B61f6b36The Behavioral Analyzer uses static code analysis with AST parsing and dataflow tracking to detect threats that require understanding code behavior and data flows. Unlike pattern-based detection, it tracks how data moves through code to identify multi-step attacks.Votes: 0GitHub stars: 9
- 1307 Behavioral Analyzer C4811c7eThe Behavioral Analyzer uses static code analysis with AST parsing and dataflow tracking to detect threats that require understanding code behavior and data flows. Unlike pattern-based detection, it tracks how data moves through code to identify multi-step attacks.Votes: 0GitHub stars: 9
- 1308 Llm Analyzer 9643d352The LLM Analyzer uses large language models as security judges to perform semantic analysis of Agent Skills. It goes beyond pattern matching to understand code intent, data flows, and sophisticated attack patterns using industry-standard threat detection frameworks.Votes: 0GitHub stars: 9
- 1308 Llm Analyzer Cdf90845The LLM Analyzer uses large language models as security judges to perform semantic analysis of Agent Skills. It goes beyond pattern matching to understand code intent, data flows, and sophisticated attack patterns using industry-standard threat detection frameworks.Votes: 0GitHub stars: 9
- 1308 Llm Analyzer Ed34ff51The LLM Analyzer uses large language models as security judges to perform semantic analysis of Agent Skills. It goes beyond pattern matching to understand code intent, data flows, and sophisticated attack patterns using industry-standard threat detection frameworks.Votes: 0GitHub stars: 9
- 1309 How Eval Works 0e9fd11f1. **Static Analyzer Only** (includes YARA): ```bash python evals/eval_runner.py --test-skills-dir evals/skills ``` - Uses `StaticAnalyzer` which includes YARA rule matching - Fast, no API calls - Tests pattern-based detectionVotes: 0GitHub stars: 9
- 131 Fn 22 53k3 Cb05095aAdd `flowctl codex completion-review` command for Codex backend integration.Votes: 0GitHub stars: 9
- 1310 Codeguard 0 Framework And Languages 327894e4rule_id: codeguard-0-framework-and-languagesVotes: 0GitHub stars: 9
- 1311 Codeguard 0 Mobile Apps 260fccb6rule_id: codeguard-0-mobile-appsVotes: 0GitHub stars: 9
- 1312 Codeguard 1 Crypto Algorithms 452ea9aarule_id: codeguard-1-crypto-algorithmsVotes: 0GitHub stars: 9
- 1313 Codeguard 1 Digital Certificates 47973111LEGACY_CERT = """ -----BEGIN CERTIFICATE----- MIIC... (data for a certificate that expired on 2024-12-01) ... -----END CERTIFICATE----- """ ``` - Your Analysis and Report: > CRITICAL VULNERABILITY: The certificate stored in the `LEGACY_CERT` variable is invalid. > > - Reason: It expired on 2024-12-01. > > - Impact: Any TLS connection attempting to use this certificate will fail. > > - Action: This certificate must be renewed and the variable updated with the new PEM data immediately. > Exampl...Votes: 0GitHub stars: 9
- 1314 Code Alignment Threat Analysis Prompt 8f953761You are a security expert analyzing **agent skill packages** to detect mismatches between what skills claim to do (in SKILL.md) and what they actually do (in their implementation). **Critical Mission**: Detect supply chain attacks where malicious code is hidden behind benign descriptions in agent skills.Votes: 0GitHub stars: 9
- 1315 Skill Meta Analysis Prompt 6227e8b9You are a **Principal Security Analyst** performing expert-level meta-analysis on security findings from the Skill Scanner.Votes: 0GitHub stars: 9