AGENT SKILLS · MISSION KIT
Useful agent skills ranked by real adoption
Browse verified skills from public repositories. Compare what each skill does, package contents, install activity, and source evidence before adding it to your agent.
- CATALOG SCOPE
- VERIFIED
- skills
- 23,248
- repositories
- 3589
- last synced
- Nov 4, 2026
zhinkgitssh
SSH/服务器操作助手。用于远程服务器、user@host、SSH 配置、上传下载、部署、跳板机、隧道、端口转发、服务器命令执行等任务；以 ~/.ssh/config 的 Host 别名为唯一服务器清单，优先密钥认证，通过本 skill 的 Python 脚本封装 OpenSSH 操作。
- 1h installs
- 1
- GitHub stars
- 696
- Updated
- Sep 3
zhinkgitworkflow
- embeddedskills 的薄编排层，用于在当前 workspace 中发现工程、选择 build/flash/debug/observe 后端、串联 .embeddedskills/state.json，并聚合底层 skill 的结果。 当用户明确输入以下命令之一："一键构建烧录"、"自动诊断"、"串起 build - flash - debug - observe" 或显式调用 /workflow 时触发。
- 1h installs
- 1
- GitHub stars
- 696
- Updated
- Sep 3
raphaelsalajacreate-sound
- Generate a SoundDefinition for @web-kits/audio from any input - a natural-language prompt, an audio file the user shares, or both. Use when the user says "create a sound", "/create-sound", "design a sound for X", shares a WAV/MP3/sprite, or asks to reverse-engineer a sample. Optionally renders a WAV preview and round-trip-validates the result.
- 1h installs
- 1
- GitHub stars
- 574
- Updated
- Sep 5
transilienceaiauthenticated-session-acquisition
Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaiclient-side
Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaicoordination
Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaicve-risk-score
Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is mentioned to display CVSS score, severity, CWE, and description.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaidfir
Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaihackthebox
HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaiinfrastructure
Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaimobile-security
Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception), and privacy testing.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaipatt-fetcher
Fetches and extracts payloads from PayloadsAllTheThings on demand. Bake into executor prompts for live payload enrichment.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaipci-secure-software
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET / PARTIALLYMET / NOTAPPLICABLE / REQUIRESMANUALREVIEW) with file+line citations, then a Transilience gap report. Use when asked to assess, gap-assess, or check an application's readiness
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceairisk-prioritiser
Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaiscript-generator
Generates optimized, syntax-validated scripts on demand. Never executes — only generates, optimizes, and validates.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaiserver-side
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaiskill-update
Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits. Use when creating, updating, or improving skills.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaisource-code-scanning
Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies for CVEs".
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaitechstack-identification
OSINT-based technology stack identification. Routes to 6 domain sub-skills (frontend, backend, infra, security, osint, correlation) to discover a target's stack from publicly available signals.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaiti-ingest
Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
transilienceaitransilience-report-style
Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab generator. Use whenever an engagement needs its final report/deliverable PDF in Transilience house style.
- 1h installs
- 1
- GitHub stars
- 534
- Updated
- Jul 29
anthropicsasana-api
Read and manage Asana tasks, projects, sections, comments, and workspaces. Use this whenever the user wants to list or search tasks, create or update a task, complete a task, comment on a task, move tasks between projects or sections, look up a project or workspace, or ask "what's on my Asana list" — even if they don't say "API". Also use it for any app.asana.com URL or an Asana task/project gid. Always start from this skill when interacting with this service — its bundled scripts and recipes ar
- 1h installs
- 1
- GitHub stars
- 54
- Updated
- Sep 17
anthropicsconfig-guide
Reference guide for configuring @Claude agents — agents, agent scopes, identity profiles, presets, connections, rules, GitHub repositories, and custom instructions. Explains the inheritance model and configuration best practices.
- 1h installs
- 1
- GitHub stars
- 54
- Updated
- Sep 17
anthropicsconfluence-api
Read, search, and manage Confluence Cloud pages, spaces, blog posts, comments, attachments, and labels. Use this whenever the user wants to find a page, read a doc, search the wiki with CQL, create or update a page, add a comment, list pages in a space, pull an attachment, or ask "what does the wiki say about X" — even if they don't say "API". Also use it for any .atlassian.net/wiki URL, or a CQL string when the context is wiki content rather than tickets. Always start from this skill when inter
- 1h installs
- 1
- GitHub stars
- 54
- Updated
- Sep 17