SKILL RADAR · GITHUB

Useful agent skills, ranked by real adoption.

Browse verified skills from public repositories. Compare what each skill does, package contents, install activity, and source evidence before adding it to your agent.

CATALOG SCOPE
VERIFIED
skills
10,772
repositories
1711
last synced
Sep 23, 2026
10,772 skills
snailsploit
Community

offensive-wifi-recon

Wi-Fi reconnaissance methodology — adapter selection, monitor mode and packet injection setup, regulatory domain handling, multi-band airspace mapping, hidden SSID discovery, BSSID/ESSID/channel/PMF/encryption fingerprinting, client probe analysis, vendor OUI lookup, war-driving with Kismet/airodump-ng/Wigle, and structured airspace data capture for downstream attacks. Use at the start of any wireless engagement to build the target map before active attacks; covers 2.4 GHz, 5 GHz, and 6 GHz (Wi-Fi 6E) bands and adapter compatibility for each.

installs
1
GitHub stars
4.1K
Updated
Aug 30
snailsploit
Community

offensive-windows-privesc

Comprehensive Windows privilege escalation methodology for offensive security engagements. Covers the full attack surface from a standard user shell to NT AUTHORITY\\SYSTEM: token impersonation via SeImpersonate and SeAssignPrimaryToken privileges using JuicyPotato, PrintSpoofer, GodPotato, SweetPotato, and RoguePotato; service misconfigurations including unquoted service paths, weak service DACLs, writable service binaries, and insecure service creation permissions; AlwaysInstallElevated MSI exploitation; DLL hijacking through search order abuse, phantom DLL loading, and writable PATH directory injection; UAC bypass techniques via fodhelper.exe, eventvwr.exe, CMSTP, and environment variable manipulation; scheduled task abuse for writable task actions and new task creation; registry autorun exploitation for persistence and escalation; PrintNightmare (CVE-2021-34527) for remote and local privilege escalation; and credential harvesting from SAM database extraction, DPAPI blob decryption, LSA secret dumping, and Credential Manager enumeration. Integrates automated enumeration with WinPEAS, PowerUp, SharpUp, Seatbelt, and BeRoot. Each technique includes detection signatures and defender-side visibility for purple team operations. Maps to MITRE ATT&CK T1548 (Abuse Elevation Control Mechanism) and T1574 (Hijack Execution Flow). Designed for authorized penetration testing, red team engagements, and CTF competitions where you hold a standard user shell and need to escalate to SYSTEM or local Administrator.

installs
1
GitHub stars
4.1K
Updated
Aug 30
snailsploit
Community

offensive-wpa-enterprise

WPA/WPA2/WPA3-Enterprise (802.1X / EAP) attack methodology — EAP method identification (PEAP-MSCHAPv2, EAP-TTLS, EAP-TLS, EAP-GTC, EAP-PWD, EAP-FAST), evil-twin RADIUS attacks with eaphammer for credential capture, MSCHAPv2 challenge-response cracking, EAP-TLS client certificate theft paths (DPAPI, NDES, AD CS auto-enrollment), supplicant validation bypass (missing server cert validation, missing CN pinning, BYOD misconfigurations), and post-capture pivots into AD via cracked domain credentials. Use for corporate Wi-Fi engagements where the network is 802.1X authenticated.

installs
1
GitHub stars
4.1K
Updated
Aug 30
snailsploit
Community

offensive-z-wave

Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, S2 (modern) ECDH commissioning analysis, replay/injection on unauthenticated nodes, default-key brute-force on test deployments, and home-automation hub pivots. Use when targeting Z-Wave smart home devices (door locks, sensors, garage controllers) — common in mid-2010s smart home deployments still in production.

installs
1
GitHub stars
4.1K
Updated
Aug 30
snailsploit
Community

offensive-zigbee-thread-matter

Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff Zigbee Dongle E, KillerBee toolkit, Touchlink commissioning abuse with the well-known transport key, replay/injection attacks, Zigbee Cluster Library command abuse for door locks and bulbs, Thread network credential theft, Matter commissioning chain analysis, and 6LoWPAN/IPv6 routing exploitation. Use when targeting smart-home or commercial mesh deployments, Zigbee-based door locks, lighting, or sensor networks.

installs
1
GitHub stars
4.1K
Updated
Aug 30
charlie947
Community

pinned-comment

Write LinkedIn pinned comments AND image generation prompts in Charlie Hills' signature style. Use when Charlie or his team asks for a pinned comment, pin comment, or first comment for a LinkedIn post. ALWAYS produce the image prompt FIRST, then caption it with the 4-line comment. Output both together unless told otherwise.

installs
1
GitHub stars
3.4K
Updated
Aug 30
charlie947
Community

post-formatter

Turn a topic into a ready-to-publish LinkedIn post using PAS, AIDA, BAB, STAR, or SLAY frameworks. 200 to 250 words, 20 lines max, mobile-formatted with blank lines between sentences. Use this skill whenever the user says "format this as a post", "turn this into a LinkedIn post", "write it as PAS" or any named framework, or wants a properly structured post from a topic. Different from post-writer: post-formatter applies a strict framework. post-writer drafts in the user's voice without framework constraints.

installs
1
GitHub stars
3.4K
Updated
Aug 30
charlie947
Community

quote-post

Two-step workflow for creating quote posts on LinkedIn. Claude generates viral motivational quotes to accompany a caption, then produces a Gemini prompt that recreates a reference image with the chosen quote baked in. Use this skill whenever the user says "quote post", "quote graphic", "motivational post", "build me a quote", or wants a low-effort high-engagement LinkedIn graphic. Optimised for LinkedIn's employee and early-career audience, which skews toward motivational content.

installs
1
GitHub stars
3.4K
Updated
Aug 30
openstatushq
Community

data-table-filters

Install and extend data-table-filters — a React data table system with faceted filters (checkbox, input, slider, timerange), sorting, infinite scroll, virtualization, and BYOS state management. Delivered as 12 shadcn registry blocks installable via npx shadcn@latest add. Use when: (1) installing data-table-filters from the shadcn registry, (2) adding extension blocks (command palette, AI filters, cell renderers, sheet panel, store adapters, schema system, Drizzle helpers, query layer), (3) configuring store adapters (nuqs/zustand/memory), (4) generating table schemas from a data model, (5) wiring up server-side filtering with Drizzle ORM, (6) connecting the React Query fetch layer, (7) auto-inferring schemas from raw JSON data with DataTableAuto / inferSchemaFromJSON, (8) adding AI-powered natural language filtering, (9) exposing tables as MCP endpoints for AI agents, (10) troubleshooting integration issues. Triggers on mentions of "data-table-filters", "data-table.openstatus.dev", "data-table-filters.com", filterable data tables with shadcn, DataTableAuto, auto-infer, AI filters, MCP server, or any of the registry block names.

installs
1
GitHub stars
2.3K
Updated
Sep 6
ifuryst
Community

open-computer-use

Platform-neutral guidance for using Open Computer Use, the open-source Computer Use MCP server and CLI for macOS, Linux, and Windows. Use when an agent needs to install, verify, troubleshoot, configure, or operate Open Computer Use through its native CLI, stdio MCP server, or direct Computer Use tool calls.

installs
1
GitHub stars
2.1K
Updated
Sep 9
theorcdev
Community

fumadocs-mdx-structure

Create MDX documentation files with proper frontmatter, imports, and component integration. Apply when creating or updating Fumadocs documentation pages in content/docs/.

installs
1
GitHub stars
2K
Updated
Sep 3
mvanhorn
Community

pp-clinical-trials

A multi-source clinical-trials intelligence system — aggregates, normalizes, and analyzes trials across ClinicalTrials.gov, EU CTIS, and biomedical sources, with an offline SQLite engine no single-registry tool has. Trigger phrases: what clinical trials are running for, recruiting trials for, phase 3 trials for, compare these two drugs trials, emerging therapies in, is this trial risky, watch trials for, clinical trials intelligence, use clinical-trials, run clinical-trials.

installs
1
GitHub stars
2K
Updated
Sep 13
firecrawl
Official

firecrawl-knowledge-base

Build a knowledge base from web content with Firecrawl. Use for local reference docs, RAG-ready chunks, fine-tuning datasets, documentation mirrors, topic corpora, or LLM-ready markdown organized from web sources.

installs
1
GitHub stars
159
Updated
Aug 21
planetscale
Official

planetscale-traffic-control-recommendations

Build a safe recommendation plan for PlanetScale Postgres Database Traffic Control budgets and rules without applying them.

installs
1
GitHub stars
128
Updated
Sep 11
planetscale
Official

planetscale-webhook-automation-recommendations

Recommend webhook subscriptions and safe automation patterns for PlanetScale alerts, anomalies, schema recommendations, deploy requests, and agent workflows.

installs
1
GitHub stars
128
Updated
Sep 11
arnabbagxd
Community

brand-launch

Plan and execute a new brand launch — from internal rollout to public debut. Use when the user says "launch the brand", "brand launch plan", "how do we introduce the brand", "brand reveal", "brand debut", "going public with the brand", "announcing the new brand", "brand launch strategy", "pre-launch brand", "brand rollout", "introducing our brand to the market", or is ready to take a new or refreshed brand from internal to external. Also use for soft launches, hard launches, and phased rollouts.

installs
1
GitHub stars
642
Updated
Jun 13
arnabbagxd
Community

brand-packaging

Create a packaging design brief — structure, visual direction, hierarchy, materials, and unboxing experience. Use when the user says "packaging design", "packaging brief", "product packaging", "packaging direction", "label design", "packaging identity", "unboxing experience", "packaging look and feel", "brief my packaging designer", "packaging for my product", "packaging strategy", "retail packaging", "e-commerce packaging", "what should my packaging look like", or is briefing a designer, agency, or manufacturer on packaging requirements.

installs
1
GitHub stars
642
Updated
Jun 13
arnabbagxd
Community

d2c-marketing

Build and execute marketing strategy for Direct-to-Consumer (DTC) brands — customer acquisition, retention, email flows, social proof, subscription models, and repeat purchase mechanics. Use when the user says "DTC marketing", "direct to consumer", "D2C strategy", "selling directly to customers", "cut out the middleman", "DTC brand", "e-commerce brand marketing", "how do we get direct customers", "DTC growth", "consumer brand marketing", "we sell direct", or is building a brand that sells its products directly without retail or distribution middlemen.

installs
1
GitHub stars
642
Updated
Jun 13
arnabbagxd
Community

influencer-marketing

Build an influencer marketing strategy — finding influencers, briefing, contracts, deliverables, performance tracking, micro vs macro strategy, outreach, and FTC compliance. Use when the user says "influencer marketing", "influencer strategy", "work with influencers", "influencer outreach", "influencer brief", "find influencers", "micro influencer", "macro influencer", "nano influencer", "creator marketing", "brand ambassador", "influencer campaign", "influencer collaboration", "seed influencers", "gifting influencers", "paid influencer", "influencer ROI", or wants to use influencers or creators to grow the brand.

installs
1
GitHub stars
642
Updated
Jun 13
arnabbagxd
Community

personal-brand

Build a personal brand strategy for founders, executives, creators, and consultants. Use when the user says "personal brand", "personal branding", "build my brand", "founder brand", "executive brand", "thought leadership", "I want to be known for", "grow my personal brand", "LinkedIn presence", "creator brand", "consultant brand", "personal brand strategy", "position myself", "what should I be known for", or wants to establish credibility, grow an audience, or become a recognized voice in their industry.

installs
1
GitHub stars
642
Updated
Jun 13
arnabbagxd
Community

ugc-strategy

Build a User Generated Content (UGC) strategy — getting customers to create content, review generation, UGC briefs for creators, social campaigns, contest mechanics, legal rights management, and repurposing UGC in paid ads. Use when the user says "UGC", "user generated content", "get customers to create content", "customer content", "UGC ads", "UGC creators", "organic UGC", "UGC strategy", "how do we get customers to post about us", "brand hashtag", "UGC brief", "influencer UGC", "UGC for ads", "customer photos and videos", or wants to use real customer content to build trust and reduce content production costs.

installs
1
GitHub stars
642
Updated
Jun 13
evanca
Community

firebase-analytics

Use when logging analytics events, setting user properties, configuring default event parameters, building funnels, or adding screen-view tracking.

installs
1
GitHub stars
637
Updated
Aug 31
getagentseal
Community

money-models

Designs a deliberate sequence of offers (attraction, upsell, downsell, continuity) so a new customer generates enough cash within ~30 days to fund acquiring the next one - Alex Hormozi's client-financed acquisition. Use when customers buy once and never again, when CAC eats all the profit, when you can't afford to advertise profitably, when the business grows but cash shrinks, when you sell one product at one price, when deciding what to sell first or next, or when structuring upsells, downsells, payment plans, trials, and continuity. Covers the 30-day payback rule, attraction/upsell/downsell/continuity offer types, and cash-flow sequencing for validated markets.

installs
1
GitHub stars
575
Updated
Jul 24
antvis
Community

infographic-creator

Create beautiful infographics based on given text content. Use when users request to create infographics.

installs
1
GitHub stars
488
Updated
Sep 9