RADAR DES SKILLS · GITHUB
Des Agent Skills utiles classés selon leur usage réel
Comparez les Skills vérifiés par fonction, contenu, installations et fiabilité de la source avant de les ajouter.
- PÉRIMÈTRE
- VÉRIFIÉ
- Skills
- 15 628
- dépôts
- 2528
- dernière synchronisation
- 12 oct. 2026
cournot-aicournot
Query Cournot probabilities and manage prepaid calls, balances, and API keys. Use only for /cournot or an explicit request to use Cournot, not for casual odds questions.
- installations
- 5
- GitHub Stars
- 0
- Mis à jour
- 24 sept.
usestrixapi-security-testing
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level authorization, unrestricted resource consumption, SSRF, injection, and auth/token flaws. E
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
usestrixapplication-security-testing
Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn the results into a ranked remediation plan. Autonomous agents exploit and prove each issue instead of emitting static-analysis alerts, so the plan is ordered by what is actually reachable. Use when the user asks for an application security review or audit, an appsec assessment, vulnerability scanning across their stack, a
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
usestrixci-security-scanning-with-strix
Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or au
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
usestrixfind-security-vulnerabilities-in-code
Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user as
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
usestrixfix-security-vulnerabilities-with-strix
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strixruns report, vulnerabilities.json, findings.sarif, or a cloud scan
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
usestrixmanaged-pentesting-with-strix
Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the strix cloud CLI or REST API — no local Docker or LLM key needed. Safely review and upload local source, register assets, launch and poll scans, triage vulnerabilities, export SARIF, download compliance reports, start PR reviews, buy credits, and set up schedules or webhooks. Use for managed, continuous, scheduled, team-tracked, or sandboxed-agent security testing.
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
usestrixowasp-top-10-testing
Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, integrity failures, logging and alerting failures, mishandling of exceptional conditions) and report only what they could actually prove, mapped back to the category wi
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
usestrixweb-app-penetration-testing
Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match. Runs with Strix, either the self-hosted open-source CLI or the managed app.strix.ai cloud. Use when the user asks to pentest, hack, security-test, or audit their web app, websi
- installations
- 5
- GitHub Stars
- 66,9 k
- Mis à jour
- 7 oct.
tavily-aitavily-best-practices
Build production-ready Tavily integrations with best practices baked in. Reference documentation for developers using coding assistants (Claude Code, Cursor, etc.) to implement web search, content extraction, crawling, and research in agentic workflows, RAG systems, or autonomous agents.
- installations
- 5
- GitHub Stars
- 487
- Mis à jour
- 4 sept.
benciumbencium-impact-designer
Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics. Based on Anthropic's Frontend Designer Skill
- installations
- 5
- GitHub Stars
- 444
- Mis à jour
- 4 oct.
benciumbencium-innovative-ux-designer
Develop an independent visual language and turn the human-chosen direction into a production-ready graphic, brand, campaign, publication, web, or product system. Use when originality and differentiation matter enough to escape generic AI and Big Tech aesthetics. Guides a minimum-evidence start, ten isolated typography-led HTML design directions made only from type, color, and space, visual-first human judgement, explicit commitment, and concrete Round 2 production. Do not use for routine UI fixe
- installations
- 5
- GitHub Stars
- 444
- Mis à jour
- 4 oct.
googlegoogle-ads-api-account-diagnostics
- Diagnoses Google Ads account performance issues such as conversion loss (value or volume), low lead flow/volume, and lost impression share (opportunities) due to ad rank, bids, or budgets. Use when troubleshooting sudden performance drops, analyzing campaign impression share metrics, investigating low lead flow, or searching for bidding and budget constraints. Don't use for setting up new campaigns, uploading conversion events directly, or general Google Mobile Ads SDK integration issues (use
- installations
- 5
- GitHub Stars
- 21 k
- Mis à jour
- 6 oct.
googlegoogle-analytics-admin-api-basics
- Manages Google Analytics account and property settings, enables the Analytics Admin API via the Cloud CLI, lists accounts and properties, and manages data streams, custom dimensions, conversion events, and integrations. Use when you need to programmatically configure Google Analytics accounts, provision properties, manage data retention, configure Measurement Protocol secrets, or manage Firebase and Google Ads links.
- installations
- 5
- GitHub Stars
- 21 k
- Mis à jour
- 6 oct.
deanpeterspestel-delta-monitor
Quarterly re-scan of a prior PESTEL analysis. Use when checking which macro factors moved, which assumptions broke, and what's new — turning PESTEL from a workshop artifact into a radar.
- installations
- 5
- GitHub Stars
- 7,2 k
- Mis à jour
- 1 sept.
deanpeterspm-skill-creator
Design a new PM skill through guided conversation. Use when you have raw content or an idea and want to shape it into a compliant skill.
- installations
- 5
- GitHub Stars
- 7,2 k
- Mis à jour
- 1 sept.
deanpetersporters-five-forces
Read an industry's structure through Porter's Five Forces with documented signals per rating, ending at the profit pool. Use when weighing market entry or when margins erode and nobody can say why.
- installations
- 5
- GitHub Stars
- 7,2 k
- Mis à jour
- 1 sept.
deanpetersproduct-lifecycle-plays
Map a product's lifecycle stage and choose between extension, replacement, and retirement plays. Use when a product is maturing or declining and the next move isn't obvious.
- installations
- 5
- GitHub Stars
- 7,2 k
- Mis à jour
- 1 sept.
deanpetersproduct-sense-interview-answer
Structure a spoken PM product-sense answer with assumptions, segmentation, pain-point prioritization, and MVP tradeoffs. Use when practicing design, improve, or build-next interview questions.
- installations
- 5
- GitHub Stars
- 7,2 k
- Mis à jour
- 1 sept.
okxokx-sentiment-tracker
Use this skill when the user asks about: 'any crypto news', 'latest news', 'market update', 'daily briefing', 'BTC news', 'ETH news', 'news on SOL', 'search SEC ETF', 'regulation news', 'Bitcoin halving', 'is BTC bullish or bearish', 'coin sentiment', 'sentiment trend', 'trending coins', 'top bullish coins', 'bearish sentiment', 'social buzz', 'market mood', 'fear and greed', 'full article', 'read more', 'economic calendar', '经济日历', 'macro data', '宏观数据', 'NFP', 'nonfarm', '非农', 'CPI', 'GDP', 'FO
- installations
- 5
- GitHub Stars
- 185
- Mis à jour
- 23 sept.
hubspotcommunication-history
Retrieve activity history (calls, emails, notes, meetings, tasks) for a CRM record and assemble pre-call briefs.
- installations
- 5
- GitHub Stars
- 26
- Mis à jour
- 1 oct.
hubspotcustom-object-management
Discover, create, update, and delete custom CRM object schemas. Use when defining a new object type, inspecting existing schemas, or removing one. Record CRUD on custom objects is identical to standard objects — see bulk-operations.
- installations
- 5
- GitHub Stars
- 26
- Mis à jour
- 1 oct.
hubspotcustomer-retention
Identify inactive/at-risk customers via CRM filters and create follow-up tasks at scale. Builds on bulk-operations; defers activity-creation specifics to sales-execution.
- installations
- 5
- GitHub Stars
- 26
- Mis à jour
- 1 oct.
hubspotdata-enrichment
Match external CSV/JSONL records to CRM contacts (by email) or companies (by domain) and write enriched data back in one pass using hubspot objects upsert.
- installations
- 5
- GitHub Stars
- 26
- Mis à jour
- 1 oct.