スキルレーダー · GITHUB
実際に使われている Agent Skills。
公開リポジトリの検証済み Skills を比較し、機能、内容、導入状況、出典を確認してから追加できます。
- 掲載範囲
- 検証済み
- Skills
- 10,772
- リポジトリ
- 1711
- 最終同期
- 2026/09/23
raintree-technologyhig-components-menus
- Apple HIG guidance for menu and button components including menus, context menus, dock menus, edit menus, the menu bar, toolbars, action buttons, pop-up buttons, pull-down buttons, disclosure controls, and standard buttons. Use this skill when the user says "how should my buttons look," "what goes in the menu bar," "should I use a context menu or action sheet," "how do I design a toolbar," or asks about button design, menu design, context menu, toolbar, menu bar, action button, pop-up button, pull-down button, disclosure control, dock menu, edit menu, or any menu/button component layout and behavior. Cross-references: hig-components-search, hig-components-controls, hig-components-dialogs.
- 導入数
- 1
- GitHub Stars
- 129
- 更新日
- 9月11日
raintree-technologyhig-components-search
- Apple HIG guidance for navigation-related components including search fields, page controls, and path controls. Use this skill when the user says "how should search work in my app," "I need a breadcrumb," "how do I paginate content," or asks about search field, search bar, page control, path control, breadcrumb, navigation component, search UX, search suggestions, search scopes, paginated content navigation, or file path hierarchy display. Cross-references: hig-components-menus, hig-components-controls, hig-components-dialogs, hig-patterns.
- 導入数
- 1
- GitHub Stars
- 129
- 更新日
- 9月11日
raintree-technologyhig-project-context
- Create or update a shared Apple design context document that other HIG skills use to tailor guidance. Use when the user says "set up my project context," "what platforms am I targeting," "configure HIG settings," or when starting a new Apple platform project. Also activates when other HIG skills need project context but none exists yet. This skill creates .claude/apple-design-context.md so that hig-foundations, hig-platforms, hig-components-, hig-inputs, and hig-technologies can provide targeted advice without repetitive questions.
- 導入数
- 1
- GitHub Stars
- 129
- 更新日
- 9月11日
fallow-rsfallow
Codebase intelligence for TypeScript and JavaScript. Static analysis reports changed-code risk, cleanup opportunities, duplication, circular dependencies, complexity hotspots, architecture boundaries, design-system drift, feature flags, and opt-in security candidates. Optional local similar-code discovery finds functions that may implement the same intent despite different syntax. Runtime coverage can merge production execution data. Use when asked to audit PR risk, find unused code or dependencies, compare semantically similar functions, detect duplicates, inspect architecture boundaries, merge runtime coverage, auto-fix supported issues, or run fallow.
- 導入数
- 1
- GitHub Stars
- 123
- 更新日
- 9月17日
fallow-rsfallow-review
- Review AI-generated or human-written code changes with fallow's graph-grounded review brief. Subtracts deterministic concerns (unused code, complexity, duplication, styling) from the loop, ranks what to look at by blast radius and risk, and surfaces the few consequential structural decisions (new public-API contracts, coupling/boundary crossings, new dependencies) as framed judgment questions anchored to verifiable signals. Drives a closed agent-contract loop: fetch the walkthrough guide, return a judgment, and have fallow post-validate it against the live graph (hallucinated or stale judgments are rejected). Use when asked to review a PR, review a branch, review a diff, do a code review, or check changed code before merge.
- 導入数
- 1
- GitHub Stars
- 123
- 更新日
- 9月17日
hardw00tapi-security
Router skill for API penetration testing across REST, GraphQL, gRPC, and WebSocket. Covers OWASP API Top 10 (2023) including BOLA/BFLA/BOPLA, JWT attack chains, GraphQL introspection abuse, and mass assignment. Invoke when the user asks to pentest an API, analyze OpenAPI/Swagger, test auth/authorization, fuzz endpoints, or find API vulnerabilities.
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
hardw00tcloud-security
Multi-cloud security assessment skill for AWS, Azure, and GCP. Use when performing cloud security audits, scanning for misconfigurations, testing IAM policies, auditing storage permissions, and identifying privilege escalation paths. Triggers on requests to audit cloud security, scan AWS/Azure/GCP, check cloud misconfigurations, or perform cloud penetration testing. Covers CIS benchmarks, CSPM, and cross-cloud identity federation.
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
hardw00tdast-automation
Automated Dynamic Application Security Testing (DAST) using Playwright MCP plus standard OS pentest tooling. Performs blackbox or greybox scans on single or multiple domains with orchestrated crawling, vulnerability detection, and structured output. Trigger on requests like "scan this domain", "run DAST on these URLs", "automated pentest", or "security-test the staging app".
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
hardw00tiac-security
Infrastructure-as-Code security scanning router for Terraform, CloudFormation, Kubernetes manifests, Helm, ARM/Bicep. Orchestrates Checkov, tfsec, Terrascan, KICS, kubesec, kube-linter, Polaris, cfn-lint/cfn-nag, and OPA/Conftest. Use when auditing IaC for misconfigurations, scanning Terraform plans, validating K8s security policies, checking cloud infrastructure compliance, or authoring custom policy-as-code (Rego).
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
hardw00tllm-security
LLM and AI application security testing skill for prompt injection (direct, indirect, multimodal), system-prompt extraction, RAG poisoning, memory poisoning, MCP server injection, skill-file injection, agentic tool misuse, computer-use UI injection, and excessive agency. Authorization required — this skill tests AI systems you are explicitly permitted to assess. Triggers on requests to test LLM / AI-agent / RAG / MCP / computer-use security, perform prompt injection, extract system prompts, poison RAG or memory, audit agent tool use, or evaluate AI guardrails.
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
hardw00tnetwork-pentest
Internal network and Active Directory penetration testing skill for corporate environments. Use when performing authorized internal network assessments, AD attack path analysis, lateral movement, privilege escalation, and post-exploitation across Windows/Linux estates. Covers BloodHound, Impacket, NetExec/CrackMapExec, Responder, Rubeus, mimikatz, certipy. Triggers on requests to pentest internal networks, attack AD, perform lateral movement, Kerberoast, DCSync, or escalate privileges.
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
hardw00tsca-security
Software Composition Analysis: find vulnerable dependencies, correlate CVE/GHSA/OSV across ecosystems, generate CycloneDX/SPDX SBOMs, assess license compliance, and run reachability-aware triage to suppress unexploitable findings. Use when scanning package dependencies (npm, PyPI, Maven, Cargo, Go, RubyGems, Composer), reviewing PR lockfile diffs, generating SBOMs, auditing licenses, hunting malicious packages, or auditing the software supply chain. Triggers on requests to scan dependencies, check vulnerable packages, generate SBOM, license compliance, typosquat/dependency-confusion review, or reachability-based vuln triage.
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
hardw00tthreat-modeling
Systematic threat modeling skill for applications, APIs, and systems using STRIDE, PASTA, Attack Trees, DREAD, LINDDUN, and OCTAVE. Use when assessing security architecture, creating data flow diagrams (Mermaid), enumerating threats from OpenAPI specs or architecture docs, building attack trees, mapping threats to NIST/CIS/OWASP ASVS controls, or producing a threat model report. Triggers on requests to threat model, analyze attack surface, create a DFD, apply STRIDE, or design security mitigations.
- 導入数
- 1
- GitHub Stars
- 101
- 更新日
- 4月19日
oil-oilcodex
将编码、代码库探索、实现、评审和验证任务委托给持久化 Codex CLI Agent。仅当用户明确要求“用 Codex”“让 Codex 执行”，或要求继续某个 Codex Agent 任务时使用。
- 導入数
- 1
- GitHub Stars
- 99
- 更新日
- 9月10日
travisjneumanvolunteer-coordinator
Volunteer management system design with scheduling, skill matching, communication templates, recognition programs, and retention strategies. Use when building volunteer programs, coordinating volunteers, or improving volunteer engagement.
- 導入数
- 1
- GitHub Stars
- 99
- 更新日
- 9月5日
fabricioctelleshumanizar
Reescreve textos em português brasileiro para soarem mais humanos e naturais, reduzindo padrões típicos de escrita gerada por IA sem alterar fatos, argumento ou intenção. Use quando o texto em PT-BR parecer genérico, burocrático ou gerado por IA, ou quando o usuário pedir para "humanizar", "dar vida", "tirar cara de IA", "remover AI slop" ou "reescrever com voz". Use também para ESCREVER DO ZERO em português qualquer texto que uma pessoa vai assinar ou publicar (post, artigo, e-mail, proposta, release, README, bio, descrição de produto): nesse caso a lista de padrões funciona como filtro de saída. Para textos em inglês, use a skill-irmã human-ai.
- 導入数
- 1
- GitHub Stars
- 88
- 更新日
- 9月19日
hookdecksanity-webhooks
Receive and verify Sanity GROQ-powered webhooks. Use when setting up Sanity webhook handlers, debugging signature verification with the sanity-webhook-signature header, or handling Content Lake document create/update/delete events for cache revalidation and search reindexing.
- 導入数
- 1
- GitHub Stars
- 87
- 更新日
- 9月14日
hookdecksquare-webhooks
Receive and verify Square webhooks. Use when setting up Square webhook handlers, debugging Square signature verification, or handling payment and commerce events like payment.created, payment.updated, refund.created, invoice.paymentmade, or order.updated.
- 導入数
- 1
- GitHub Stars
- 87
- 更新日
- 9月14日
promovawebspecsfy-01-inbox
Use quando o usuário enviar uma ideia, pensamento, necessidade, oportunidade ou texto livre para guardar, capturar, anotar ou retomar depois. Preserve o input integral, faça pré-processamento silencioso e crie imediatamente um arquivo timestampado em specs/inbox/. Não faça perguntas, não peça confirmação e não crie backlog, spec, tarefas, testes ou código.
- 導入数
- 1
- GitHub Stars
- 80
- 更新日
- 9月15日
promovawebspecsfy-03-specify
Use quando o usuário pede para promover uma entrada ou backlog já refinado, criar, iniciar ou consolidar uma especificação nova ou ainda em Draft em spec.md. Use também quando uma transição automática exigir criar ou completar a fonte normativa inicial. Inicializa specs em specs/draft/ e aplica o MCR-10; para mudar spec aprovada use specsfy-update-spec, para captura sem perguntas use specsfy-01-inbox, para refinamento use specsfy-02-backlog e para revisão sem edição use specsfy-04-validate.
- 導入数
- 1
- GitHub Stars
- 80
- 更新日
- 9月15日
promovawebspecsfy-04-validate
Use quando o usuário pede para validar, revisar, auditar ou checar se specs/{id}-{slug}/spec.md segue o formato rígido Specsfy/2.0 e está pronto para planejar. Use também quando uma transição automática pedir prova do Definition Gate ou nova validação após correção. Use antes do Ato II. Registre gates na seção 13 do mesmo arquivo; não crie checklist, relatório, plan.md ou outro artefato.
- 導入数
- 1
- GitHub Stars
- 80
- 更新日
- 9月15日
promovawebspecsfy-05-tasks
Use quando o usuário quer quebrar ou decompor a especificação em tarefas, preencher ou atualizar a seção 14. Tarefas de spec.md, ordenar dependências, planejar fatias verticais ou preparar a execução. Use também quando uma transição automática pedir planejamento, replanejamento ou retomada após RED. Use somente para editar o backlog dentro da fonte única; não crie tasks.md, não escreva código nem marque trabalho como concluído.
- 導入数
- 1
- GitHub Stars
- 80
- 更新日
- 9月15日
promovawebspecsfy-06-tdd-bdd
Use quando o usuário pede TDD, BDD, testes derivados do Gherkin de referência da especificação, rastreabilidade entre spec.md e testes, ou um ciclo RED-GREEN-REFACTOR. Use também quando uma transição automática pedir materialização, RED ou verificação de testes. Use para editar as seções 11–13 e executar testes; specsfy-07-implement continua responsável pelas tarefas de produção na seção 14 do mesmo arquivo.
- 導入数
- 1
- GitHub Stars
- 80
- 更新日
- 9月15日
promovawebspecsfy-07-implement
Use quando o usuário pede para implementar, executar ou concluir tarefas da seção 14. Tarefas de specs/{id}-{slug}/spec.md, criar o código definido pela fonte única, continuar a próxima tarefa pronta ou finalizar a feature. Use também quando uma transição automática iniciar ou retomar a entrega. Use para produção; para apenas criar testes use specsfy-06-tdd-bdd, e para apenas decompor use specsfy-05-tasks.
- 導入数
- 1
- GitHub Stars
- 80
- 更新日
- 9月15日