AGENT SKILLS · MISSIONS-AUSRÜSTUNG

Nützliche Agent Skills nach echter Nutzung sortiert

Vergleiche verifizierte Skills aus öffentlichen Repositories nach Aufgabe, Paketinhalt, Installationen und nachvollziehbarer Quelle.

KATALOGUMFANG
VERIFIZIERT
Skills
22.662
Repositories
3481
zuletzt synchronisiert
31.10.2026
22.662 Skills
nexscope-ai
Community

amazon-return-reduction

Return rate reduction — root cause analysis, listing accuracy, packaging improvements, size guides

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
nexscope-ai
Community

amazon-search-optimization

Amazon search ranking optimization and A9 algorithm mastery. Comprehensive SEO strategy, indexing optimization, keyword ranking improvement, and search visibility enhancement. Use when the user asks about Amazon SEO, A9 algorithm, search ranking, or product discoverability.

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
nexscope-ai
Community

amazon-seasonal-planning

Seasonal sales calendar — Prime Day, Black Friday, Q4 prep, inventory planning, promotion scheduling

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
nexscope-ai
Community

amazon-storefront-design

Amazon Store builder — page layouts, brand story, shoppable images, traffic driving, conversion optimization

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
nexscope-ai
Community

amazon-subscribe-save

Subscribe & Save optimization — enrollment, discount tiers, frequency optimization, retention analysis

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
nexscope-ai
Community

amazon-trending-products

Trending products and rising categories discovery for Amazon sellers. Analyzes Best Seller Rank patterns, seasonal trends, new release momentum, and emerging niches. Identifies product opportunities before they peak. Use when the user asks about what's trending on Amazon, hot products, rising categories, seasonal opportunities, viral products, what to sell next, emerging niches, or early-mover opportunities. Also trigger for questions like 'what should I sell now?', 'what products are doing well

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
nexscope-ai
Community

amazon-variation-strategy

Parent-child variation planning — when to merge/split, color/size variations, ranking benefits

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
nexscope-ai
Community

amazon-vine-program

Vine review program strategy — enrollment, product selection, timing, review quality maximization

Installationen / 1h
1
GitHub Stars
759
Aktualisiert
26. Aug.
cosmicstack-labs
Community

video-downloader

Video Downloader: Using yt-dlp to download videos from YouTube, Bilibili, Twitter, and thousands of other sites

Installationen / 1h
1
GitHub Stars
480
Aktualisiert
25. Aug.
aiskillstore
Community

accessibility-wcag

Enforce WCAG 2.2 accessibility standards. Use when creating UI components, reviewing frontend code, or when accessibility issues are detected. Covers semantic HTML, ARIA, keyboard navigation, and color contrast.

Installationen / 1h
1
GitHub Stars
433
Aktualisiert
13. Okt.
anomalyco
Community

terminal-control

Drive and verify terminal applications with the termctrl CLI in a real PTY - read visible screens, run named live sessions, send typed keyboard input, wait for text, save evidence, record timelines, and export edited videos. Use when an agent must operate or test a TUI, REPL, interactive CLI, shell process, or OpenTUI application.

Installationen / 1h
1
GitHub Stars
432
Aktualisiert
4. Sept.
briiirussell
Community

cloud-audit

Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps. Use when the user mentions 'cloud security,' 'cloud audit,' 'AWS security,' 'GCP security,' 'Azure security,' 'IAM audit,' 'S3 bucket,' 'cloud misconfiguration,' 'cloud hardening,' or needs to review cloud infrastructure security.

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

container-audit

Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks. Use when the user mentions 'container security,' 'Docker security,' 'Dockerfile audit,' 'Kubernetes security,' 'K8s security,' 'pod security,' 'container hardening,' 'kubectl audit,' 'image scanning,' 'distroless,' 'rootless containers,' 'pod security policy,' 'pod security standards,' 'PSS,' 'network policy,' 'OPA Gatekeeper,' 'Kyverno,' 'runtime securit

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

crypto-audit

Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation. Deeper than owasp-audit A02. Use when the user mentions 'crypto review,' 'cryptography audit,' 'encryption review,' 'KDF,' 'PBKDF2,' 'Argon2,' 'bcrypt cost,' 'IV reuse,' 'nonce reuse,' 'AES mode,' 'AES-GCM,' 'AES-ECB,' 'signature verification,' 'TLS configuration,' 'cipher suites,' 'key rotation,' 'libsodium,' 'BoringSSL,' or

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

csf-mapping

Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover). Produce a gap analysis, current/target tier assessment, and roadmap in the governance language that boards, auditors, and CISOs actually use. Use when the user mentions 'NIST CSF,' 'CSF 2.0,' 'cybersecurity framework,' 'security posture,' 'governance mapping,' 'CSF gap analysis,' 'CSF tiers,' 'cybersecurity maturity,' 'security roadmap,' 'CISO report,' 'board reporting,'

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

disk-forensics

Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and CTF challenges. Use when the user mentions 'disk forensics,' 'forensic analysis,' 'disk image,' 'file carving,' 'deleted files,' 'evidence recovery,' 'timeline analysis,' 'memory forensics,' 'volatility,' 'autopsy,' 'sleuthkit,' 'plaso,' 'log2timeline,' 'artifact analysis,' 'chain of custody,' or needs to examine a forensic image.

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

finding-triage

Triage a single security finding — from a scanner, audit, advisory, or report — to a defensible disposition with a mitigation plan, false-positive justification, or accepted-risk writeup. Use when the user mentions 'triage this finding,' 'is this a real vulnerability,' 'mitigation plan,' 'false positive,' 'accept this risk,' 'compensating controls,' 'risk justification,' 'security ticket,' 'CVSS this,' 'should we fix this,' 'disposition,' 'sign off on,' or has a single security finding and needs

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

iam-audit

Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization (RBAC, ABAC, ReBAC), and federated identity. Use when the user mentions 'IAM,' 'identity,' 'access management,' 'least privilege,' 'role design,' 'SSO,' 'SAML,' 'OIDC,' 'OAuth,' 'JIT access,' 'just-in-time access,' 'break-glass,' 'service accounts,' 'RBAC,' 'ABAC,' 'privilege creep,' 'role explosion,'

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

incident-triage

Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology. Use when the user mentions 'incident response,' 'security incident,' 'triage,' 'we've been hacked,' 'breach,' 'compromised,' 'malware detected,' 'suspicious activity,' 'IOC,' 'indicators of compromise,' or needs help handling a security event.

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

mobile-audit

Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, reverse-engineering resistance. Use when the user mentions 'mobile security,' 'iOS security,' 'Android security,' 'mobile audit,' 'mobile pentest,' 'MASVS,' 'MASTG,' 'certificate pinning,' 'jailbreak detection,' 'root detection,' 'deeplink,' 'URL scheme,' 'app transport security,' 'keychain,' 'keystore,' 'mobile reverse engineering,

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

pci-audit

Audit applications and infrastructure handling payment card data against PCI DSS v4.0. Heavy emphasis on scope determination (the single most-leveraged variable) plus the engineering-relevant requirements — Req 3 (storage of CHD), Req 4 (transmission), Req 6 (secure SDLC), Req 7-8 (access), Req 10 (logging), Req 11 (testing), Req 12 (program). Use when the user mentions 'PCI,' 'PCI DSS,' 'PCI DSS 4.0,' 'payment card,' 'cardholder data,' 'CHD,' 'PAN,' 'PCI scope,' 'PCI compliance,' 'SAQ,' 'AoC,'

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

red-team-engagement

Plan, scope, and execute an authorized red-team engagement — distinct from a penetration test. Covers engagement methodology, assumed-breach scenarios, ATT&CK emulation plans, rules of engagement, deconfliction with the blue team, post-engagement debriefs, and the program-level work that makes red teams actually improve defenses. Use when the user mentions 'red team,' 'red team engagement,' 'red teaming,' 'adversary emulation,' 'ATT&CK emulation,' 'assumed breach,' 'purple team exercise,' 'table

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

secrets-audit

Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks. Use when the user mentions 'secrets audit,' 'secret scanning,' 'leaked credentials,' 'API key in code,' 'gitleaks,' 'trufflehog,' 'git history scan,' 'secrets management,' 'vault audit,' 'rotation policy,' 'AWS Secrets Manager,' 'HashiCorp Vault,' 'Doppler,' '1Password Secrets Automation,' 'sealed-secrets,' 'External Secrets Operator,' or needs

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai
briiirussell
Community

security-comms

Translate technical security work into the language of non-security audiences — board, executives, engineering, customer success, customers, legal, procurement, sales. Covers incident communication, post-mortem narrative, audit-findings-for-stakeholders, risk justification, security spend justification, and customer-facing breach disclosure. Use when the user mentions 'security comms,' 'communicate this finding,' 'explain to my boss,' 'board update,' 'executive summary,' 'incident communication,

Installationen / 1h
1
GitHub Stars
420
Aktualisiert
27. Mai