AGENT SKILLS · EQUIPO DE MISIÓN

Agent Skills útiles ordenados por uso real

Compara Skills verificados por función, contenido del paquete, instalaciones y fiabilidad de la fuente antes de añadirlos.

ALCANCE DEL CATÁLOGO
VERIFICADO
Skills
22.662
repositorios
3481
última sincronización
31 oct 2026
22.662 Skills
nexscope-ai
Comunidad

amazon-return-reduction

Return rate reduction — root cause analysis, listing accuracy, packaging improvements, size guides

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
nexscope-ai
Comunidad

amazon-search-optimization

Amazon search ranking optimization and A9 algorithm mastery. Comprehensive SEO strategy, indexing optimization, keyword ranking improvement, and search visibility enhancement. Use when the user asks about Amazon SEO, A9 algorithm, search ranking, or product discoverability.

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
nexscope-ai
Comunidad

amazon-seasonal-planning

Seasonal sales calendar — Prime Day, Black Friday, Q4 prep, inventory planning, promotion scheduling

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
nexscope-ai
Comunidad

amazon-storefront-design

Amazon Store builder — page layouts, brand story, shoppable images, traffic driving, conversion optimization

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
nexscope-ai
Comunidad

amazon-subscribe-save

Subscribe & Save optimization — enrollment, discount tiers, frequency optimization, retention analysis

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
nexscope-ai
Comunidad

amazon-trending-products

Trending products and rising categories discovery for Amazon sellers. Analyzes Best Seller Rank patterns, seasonal trends, new release momentum, and emerging niches. Identifies product opportunities before they peak. Use when the user asks about what's trending on Amazon, hot products, rising categories, seasonal opportunities, viral products, what to sell next, emerging niches, or early-mover opportunities. Also trigger for questions like 'what should I sell now?', 'what products are doing well

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
nexscope-ai
Comunidad

amazon-variation-strategy

Parent-child variation planning — when to merge/split, color/size variations, ranking benefits

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
nexscope-ai
Comunidad

amazon-vine-program

Vine review program strategy — enrollment, product selection, timing, review quality maximization

Instalaciones / 1h
1
GitHub Stars
759
Actualizado
26 ago
cosmicstack-labs
Comunidad

video-downloader

Video Downloader: Using yt-dlp to download videos from YouTube, Bilibili, Twitter, and thousands of other sites

Instalaciones / 1h
1
GitHub Stars
480
Actualizado
25 ago
aiskillstore
Comunidad

accessibility-wcag

Enforce WCAG 2.2 accessibility standards. Use when creating UI components, reviewing frontend code, or when accessibility issues are detected. Covers semantic HTML, ARIA, keyboard navigation, and color contrast.

Instalaciones / 1h
1
GitHub Stars
433
Actualizado
13 oct
anomalyco
Comunidad

terminal-control

Drive and verify terminal applications with the termctrl CLI in a real PTY - read visible screens, run named live sessions, send typed keyboard input, wait for text, save evidence, record timelines, and export edited videos. Use when an agent must operate or test a TUI, REPL, interactive CLI, shell process, or OpenTUI application.

Instalaciones / 1h
1
GitHub Stars
432
Actualizado
4 sept
briiirussell
Comunidad

cloud-audit

Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps. Use when the user mentions 'cloud security,' 'cloud audit,' 'AWS security,' 'GCP security,' 'Azure security,' 'IAM audit,' 'S3 bucket,' 'cloud misconfiguration,' 'cloud hardening,' or needs to review cloud infrastructure security.

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

container-audit

Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks. Use when the user mentions 'container security,' 'Docker security,' 'Dockerfile audit,' 'Kubernetes security,' 'K8s security,' 'pod security,' 'container hardening,' 'kubectl audit,' 'image scanning,' 'distroless,' 'rootless containers,' 'pod security policy,' 'pod security standards,' 'PSS,' 'network policy,' 'OPA Gatekeeper,' 'Kyverno,' 'runtime securit

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

crypto-audit

Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation. Deeper than owasp-audit A02. Use when the user mentions 'crypto review,' 'cryptography audit,' 'encryption review,' 'KDF,' 'PBKDF2,' 'Argon2,' 'bcrypt cost,' 'IV reuse,' 'nonce reuse,' 'AES mode,' 'AES-GCM,' 'AES-ECB,' 'signature verification,' 'TLS configuration,' 'cipher suites,' 'key rotation,' 'libsodium,' 'BoringSSL,' or

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

csf-mapping

Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover). Produce a gap analysis, current/target tier assessment, and roadmap in the governance language that boards, auditors, and CISOs actually use. Use when the user mentions 'NIST CSF,' 'CSF 2.0,' 'cybersecurity framework,' 'security posture,' 'governance mapping,' 'CSF gap analysis,' 'CSF tiers,' 'cybersecurity maturity,' 'security roadmap,' 'CISO report,' 'board reporting,'

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

disk-forensics

Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and CTF challenges. Use when the user mentions 'disk forensics,' 'forensic analysis,' 'disk image,' 'file carving,' 'deleted files,' 'evidence recovery,' 'timeline analysis,' 'memory forensics,' 'volatility,' 'autopsy,' 'sleuthkit,' 'plaso,' 'log2timeline,' 'artifact analysis,' 'chain of custody,' or needs to examine a forensic image.

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

finding-triage

Triage a single security finding — from a scanner, audit, advisory, or report — to a defensible disposition with a mitigation plan, false-positive justification, or accepted-risk writeup. Use when the user mentions 'triage this finding,' 'is this a real vulnerability,' 'mitigation plan,' 'false positive,' 'accept this risk,' 'compensating controls,' 'risk justification,' 'security ticket,' 'CVSS this,' 'should we fix this,' 'disposition,' 'sign off on,' or has a single security finding and needs

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

iam-audit

Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization (RBAC, ABAC, ReBAC), and federated identity. Use when the user mentions 'IAM,' 'identity,' 'access management,' 'least privilege,' 'role design,' 'SSO,' 'SAML,' 'OIDC,' 'OAuth,' 'JIT access,' 'just-in-time access,' 'break-glass,' 'service accounts,' 'RBAC,' 'ABAC,' 'privilege creep,' 'role explosion,'

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

incident-triage

Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology. Use when the user mentions 'incident response,' 'security incident,' 'triage,' 'we've been hacked,' 'breach,' 'compromised,' 'malware detected,' 'suspicious activity,' 'IOC,' 'indicators of compromise,' or needs help handling a security event.

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

mobile-audit

Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, reverse-engineering resistance. Use when the user mentions 'mobile security,' 'iOS security,' 'Android security,' 'mobile audit,' 'mobile pentest,' 'MASVS,' 'MASTG,' 'certificate pinning,' 'jailbreak detection,' 'root detection,' 'deeplink,' 'URL scheme,' 'app transport security,' 'keychain,' 'keystore,' 'mobile reverse engineering,

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

pci-audit

Audit applications and infrastructure handling payment card data against PCI DSS v4.0. Heavy emphasis on scope determination (the single most-leveraged variable) plus the engineering-relevant requirements — Req 3 (storage of CHD), Req 4 (transmission), Req 6 (secure SDLC), Req 7-8 (access), Req 10 (logging), Req 11 (testing), Req 12 (program). Use when the user mentions 'PCI,' 'PCI DSS,' 'PCI DSS 4.0,' 'payment card,' 'cardholder data,' 'CHD,' 'PAN,' 'PCI scope,' 'PCI compliance,' 'SAQ,' 'AoC,'

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

red-team-engagement

Plan, scope, and execute an authorized red-team engagement — distinct from a penetration test. Covers engagement methodology, assumed-breach scenarios, ATT&CK emulation plans, rules of engagement, deconfliction with the blue team, post-engagement debriefs, and the program-level work that makes red teams actually improve defenses. Use when the user mentions 'red team,' 'red team engagement,' 'red teaming,' 'adversary emulation,' 'ATT&CK emulation,' 'assumed breach,' 'purple team exercise,' 'table

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

secrets-audit

Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks. Use when the user mentions 'secrets audit,' 'secret scanning,' 'leaked credentials,' 'API key in code,' 'gitleaks,' 'trufflehog,' 'git history scan,' 'secrets management,' 'vault audit,' 'rotation policy,' 'AWS Secrets Manager,' 'HashiCorp Vault,' 'Doppler,' '1Password Secrets Automation,' 'sealed-secrets,' 'External Secrets Operator,' or needs

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may
briiirussell
Comunidad

security-comms

Translate technical security work into the language of non-security audiences — board, executives, engineering, customer success, customers, legal, procurement, sales. Covers incident communication, post-mortem narrative, audit-findings-for-stakeholders, risk justification, security spend justification, and customer-facing breach disclosure. Use when the user mentions 'security comms,' 'communicate this finding,' 'explain to my boss,' 'board update,' 'executive summary,' 'incident communication,

Instalaciones / 1h
1
GitHub Stars
420
Actualizado
27 may