AGENT SKILLS · EQUIPO DE MISIÓN
Agent Skills útiles ordenados por uso real
Compara Skills verificados por función, contenido del paquete, instalaciones y fiabilidad de la fuente antes de añadirlos.
- ALCANCE DEL CATÁLOGO
- VERIFICADO
- Skills
- 22.603
- repositorios
- 3475
- última sincronización
- 30 oct 2026
lvcasmadeitimplement-it
Implement and verify exactly one ready Ticket from TODO.md; use when the user names an issue ID and its acceptance criteria can be completed in the current repository.
- Instalaciones / 1h
- 1
- GitHub Stars
- 0
- Actualizado
- 8 oct
mixiopromixio-episode
Use when creating or maintaining a Mixio episode’s source text, scenes, shots, and relations through Studio primitives.
- Instalaciones / 1h
- 1
- GitHub Stars
- 0
- Actualizado
- 16 oct
mraliasgrill-me
Stress-test a plan, design, architecture, or proposal by interviewing the user one question at a time until key decisions, tradeoffs, assumptions, and risks are resolved. Use when the user asks to be grilled, wants a plan challenged, or needs design review through pointed questioning.
- Instalaciones / 1h
- 1
- GitHub Stars
- 0
- Actualizado
- 12 oct
securityskillscontainer-image-hardening
Harden Dockerfiles and container images — multi-stage builds, non-root users, minimal base images, and vulnerability gates. Use when building production containers or reviewing Dockerfiles.
- Instalaciones / 1h
- 1
- GitHub Stars
- 0
- Actualizado
- 26 ago
shomod9need-reading-material
The user is in need for inspiration. Find them high quality sources to read.
- Instalaciones / 1h
- 1
- GitHub Stars
- 0
- Actualizado
- 16 oct
sanyuan0704code-review-expert
Expert code review of current git changes with a senior engineer lens. Detects SOLID violations, security risks, and proposes actionable improvements.
- Instalaciones / 1h
- 1
- GitHub Stars
- 3,9 mil
- Actualizado
- 11 may
dingtalk-real-aidingtalk-calendar
钉钉日历与会议室。Use when 用户说 约会议/查日程/订会议室/查闲忙/加参会人/改期/取消会议/今天的日程/本周日程/共同空闲。不做视频会议发起/邀请入会/会中控制（走 dingtalk-misc）、AI 听记（走 dingtalk-minutes）、待办任务（走 dingtalk-todo）。命令前缀：dws calendar。
- Instalaciones / 1h
- 1
- GitHub Stars
- 3,7 mil
- Actualizado
- 16 oct
quodsolerue-procedural-generation
Use when generating world content or geometry procedurally in Unreal Engine: PCG graphs, custom PCG nodes in C++, runtime mesh building, instancing and seeded noise. Also use when the user mentions 'PCG', 'UPCGComponent', 'UPCGSettings', 'IPCGElement', 'UPCGBasePointData', 'surface sampler', 'static mesh spawner', 'runtime generation', 'CreateMeshSection', 'UProceduralMeshComponent', 'UDynamicMeshComponent', 'Geometry Script', 'AddInstance', 'HISM', 'spline mesh', 'PerlinNoise', 'FRandomStream',
- Instalaciones / 1h
- 1
- GitHub Stars
- 391
- Actualizado
- 28 sept
netlifynetlify-frameworks
Deploy and configure web frameworks on Netlify — build settings and SSR/edge adapters plus local platform emulation and env vars. Use when setting up or fixing a framework deploy (Next.js / Astro / Nuxt / SvelteKit / Remix / React Router / TanStack Start / SolidStart / Gatsby / Angular / Vite / Express / Hydrogen / Hugo / Eleventy / Vue / React), adding SSR or edge functions or middleware wired to Netlify context, fixing SPA redirect and catch-all rules, setting a build command or publish direct
- Instalaciones / 1h
- 1
- GitHub Stars
- 41
- Actualizado
- 15 oct
meituaudio-song-generate
歌词驱动的完整歌曲生成（含人声），也支持强节奏成品级纯音乐。仅当用户明确要求生成歌曲/音频成品，并提供或同意补充风格与歌词参数时触发；普通音乐讨论、歌词创作、闲聊式演唱请求不触发。
- Instalaciones / 1h
- 1
- GitHub Stars
- 34
- Actualizado
- 28 ago
caizongyuandevelopment-timeline
Record development stages and verification evidence, then generate offline HTML reports of delivery, waits, rework, and improvements. Use for PM milestone delivery, pauses, handoffs, or development retrospectives.
- Instalaciones / 1h
- 1
- GitHub Stars
- 0
- Actualizado
- 6 oct
anthropicssector-overview
Create comprehensive industry and sector landscape reports covering market dynamics, competitive positioning, key players, and thematic trends. Use for client requests, sector initiations, thematic research pieces, or internal knowledge building. Triggers on "sector overview", "industry report", "market landscape", "sector analysis", "industry deep dive", or "thematic research".
- Instalaciones / 1h
- 1
- GitHub Stars
- 40 mil
- Actualizado
- 21 sept
sickn33ask-questions-if-underspecified
Clarify requirements before implementing. Use when serious doubts arise.
- Instalaciones / 1h
- 1
- GitHub Stars
- 47,7 mil
- Actualizado
- 14 oct
browserbaseautobrowse
Self-improving browser automation via the auto-research loop. Iteratively runs a browsing task, reads the trace, and improves the navigation skill (strategy.md) until it reliably passes. Supports parallel runs across multiple tasks using sub-agents. Use when you want to build or improve browser automation skills for specific website tasks.
- Instalaciones / 1h
- 1
- GitHub Stars
- 3,7 mil
- Actualizado
- 29 sept
agricidanielseo-ecommerce
Analyze ecommerce SEO across product pages, product schema, Shopping visibility, marketplace signals, and keyword gaps. Use only for stores, catalogs, or product listings.
- Instalaciones / 1h
- 1
- GitHub Stars
- 19 mil
- Actualizado
- 4 oct
dotnettooling
Implementation details for the EF Core dotnet-ef CLI and tooling. Use when changing dotnet-ef commands, the ef wrapper, EFCore.Tools (PMC), or EFCore.Tasks MSBuild integration.
- Instalaciones / 1h
- 1
- GitHub Stars
- 14,8 mil
- Actualizado
- 15 oct
elementalsoulsbugcrowd-reporting
Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, manual severity override when VRT defaults underrate impact, severity-request paragraph as first body section, OOS-clause rebuttal templates (rate limiting on auth-flow endpoints, debug-info framing, user-enumeration with sensitive PII, theoretical-issue counter), chained-finding cross-reference patterns, target selection for QA-vs-prod programs, researcher-side
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct
elementalsoulsevidence-hygiene
Evidence-capture and PoC-redaction discipline for bug-bounty submissions: cookie redaction protocol (which fields to mask, Preview annotation / Burp panel hiding / DevTools workflow), PII black-bar discipline (what to mask in other-user data — names, emails, phones, faces — vs what is safe to leave — usernames, trace IDs, request bodies), HAR file sanitization (jq filters for Cookie/Set-Cookie/Authorization headers), Burp Repeater/Intruder screenshot hygiene (hide request body, show only Results
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct
elementalsoulshunt-api-misconfig
Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {isadmin:true, role:admin, verified:true} on profile/account/reset endpoints — server blindly applies. JWT signature/crypto forging (alg:none, key confusion, kid/jku) is owned by hunt-jwt-crypto; this skill covers only non-crypto JWT handling. Prototype pollution: proto injection in JSON merge / Object.assign / lodash .merge → polluted prototype reaches sink (RCE in Node, XSS in
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct
elementalsoulshunt-aspnet
Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-pattern, request-validator bypass, trace.axd/elmah.axd disclosure, load-balanced ViewState cross-node failures, SafeControl enumeration via reflection, customErrors mode=Off stack-trace leaks, classic Webforms .aspx/.asmx/.svc surface. Built for ASP.NET Webforms + WCF + SharePoint farms.
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct
elementalsoulshunt-business-logic
Hunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-stacking (Instacart, Stripe, Reverb), negative-quantity-in-cart price tampering (Upserve, Eternal/Zomato), decimal/fraction price-field overflow (Shipt), client-side checkout amount trust on PayPal redirect (WordPress.org), price-per-unit mass-assignment (Krisp), and archived-price swap / cart-TOCTOU (Stripe). Use when hunting business logic — heavy emphasis on financial-impact-demonstra
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct
elementalsoulshunt-cicd
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pullrequesttarget Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-policy abuse, Jenkins script-console RCE and CVE-2024-23897 file read, GitLab CI runner-token registration, Terraform state file leakage, artifact/log secret leakage, pipeline env-var disclosure. Use when target has a public GitHub/GitLab org, exposed CI dashboards (Jenkins/TeamCity/Drone/Argo), or build artifacts/images are reachabl
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct
elementalsoulshunt-clickjacking
Hunt Clickjacking — missing X-Frame-Options / CSP frame-ancestors lets an attacker embed the target page in an invisible iframe and trick victims into clicking buttons they cannot see (UI redressing). Targets: login flows, money transfers, account settings, OAuth confirmation pages. Confirm by fetching the page, then PROVE it frames in a real browser and a sensitive state-changing action survives the cross-site context (SameSite cookies / framebusting JS can defeat it) — header-absence alone is
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct
elementalsoulshunt-dispatch
Skill-set loader for /hunt orchestrator. Fingerprints the target, picks the right platform attack skills, and loads the Red Team or WAPT skill set. Use when /hunt has just received a mode answer (redteam or wapt + blackbox|greybox) and needs to load the appropriate skills and print the taxonomy. Not for direct user invocation.
- Instalaciones / 1h
- 1
- GitHub Stars
- 5,1 mil
- Actualizado
- 15 oct