AGENT SKILLS · 임무 장비
실제 사용량으로 검증된 유용한 Agent Skills
공개 저장소의 검증된 Skills를 기능, 패키지 구성, 설치 수, 출처 근거에 따라 비교할 수 있습니다.
- 카탈로그 범위
- 검증 완료
- Skills
- 22,847
- 저장소
- 3523
- 최근 동기화
- 2026. 11. 3.
riekeltdocumenting-legacy-codebases
Use when documenting an existing codebase whose documentation is missing, stale, or untrusted - an inherited system, a legacy application, a repo where the docs lie - or when regrounding a documentation tree against the code, or when someone asks what a system actually does. Encodes the survey-first inventory, the writer-side evidence hierarchy, depth-per-surface rules, the refactor test, dead-or-alive proofs, the quirks-and-findings split, the coverage ledger, the parallel campaign, and the doc
- 1시간 설치 수
- 14
- GitHub Stars
- 36
- 업데이트
- 9월 13일
riekeltrecording-decisions
Use when a decision needs recording - an ADR, a decision log entry, or when someone asks to write down why something was chosen, rejected, or superseded. Encodes the ADR and decision-log formats. Use whenever a choice was made that would otherwise live only in chat, even if nobody says "ADR".
- 1시간 설치 수
- 14
- GitHub Stars
- 36
- 업데이트
- 9월 13일
riekeltwriting-changelogs
Use when writing a changelog entry, release notes, or a "what shipped" summary after completing work. Encodes the entry shape, the handover template, and the honesty conventions. Use after shipping meaningful work, even if the user just says "summarize what we did".
- 1시간 설치 수
- 14
- GitHub Stars
- 36
- 업데이트
- 9월 13일
riekeltwriting-issues
Use when writing or refining tracker items - epics, stories, tasks, bug reports, spikes, or acceptance criteria - or when turning a discussion, review finding, or plan into tickets. Encodes the survives-without-you test, the issue-type glossary, and the story and bug skeletons. Use whenever work is written into a tracker, even from a rough verbal dump.
- 1시간 설치 수
- 14
- GitHub Stars
- 36
- 업데이트
- 9월 13일
riekeltwriting-postmortems
Use when writing a postmortem, incident report, or root-cause analysis after an outage, a defect that reached users, a data issue, or a near miss - or when turning an incident channel, alert log, or war-room thread into a durable document. Encodes the blameless framing, the evidence-only timeline, contributing factors, and owned action items. Use whenever something broke and the write-up must outlive the incident.
- 1시간 설치 수
- 14
- GitHub Stars
- 36
- 업데이트
- 9월 13일
elevenlabssound-effects
Generate sound effects from text descriptions using ElevenLabs. Use when creating sound effects, generating audio textures, producing ambient sounds, cinematic impacts, UI sounds, or any audio that isn't speech. Supports looping, duration control, and prompt influence tuning.
- 1시간 설치 수
- 14
- GitHub Stars
- 528
- 업데이트
- 10월 28일
elevenlabstext-to-speech
Convert text to speech using ElevenLabs voice AI. Use when generating audio from text, creating voiceovers, building voice apps, or synthesizing speech in 90+ languages.
- 1시간 설치 수
- 14
- GitHub Stars
- 528
- 업데이트
- 10월 28일
usestrixapi-security-testing
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level authorization, unrestricted resource consumption, SSRF, injection, and auth/token flaws. E
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixapplication-security-testing
Application security testing (AppSec) across a whole product with Strix — decide which asset needs which test (source code, running web app, API, CI pipeline), run it, and turn the results into a ranked remediation plan. Autonomous agents exploit and prove each issue instead of emitting static-analysis alerts, so the plan is ordered by what is actually reachable. Use when the user asks for an application security review or audit, an appsec assessment, vulnerability scanning across their stack, a
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixci-security-scanning-with-strix
Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks vulnerable code before it merges, with results as PR comments and SARIF uploaded to code scanning. Covers both the self-hosted open-source CLI (runs in your runner) and the managed app.strix.ai platform (GitHub/GitLab app or API, no runner infra). Use when the user asks to add security scanning, SAST/DAST, pentesting, vulnerability checks, or au
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixfind-security-vulnerabilities-in-code
Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security review that reads your source, reasons about the actual data flow and authorization model, then exploits what it finds in a live sandbox so every reported issue has a working proof-of-concept instead of a noisy static-analysis alert. Covers injection, XSS, SSRF, broken access control and IDOR, insecure deserialization, secrets in code, unsafe dependencies, and business-logic flaws. Use when the user as
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixfix-security-vulnerabilities-with-strix
Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the symptom, and re-run Strix to prove each fix actually closes the exploit. Handles injection, XSS, SSRF, broken access control, IDOR, and other validated findings. Use after a Strix scan reports findings, or when the user asks to remediate, patch, or fix security issues from a strixruns report, vulnerabilities.json, findings.sarif, or a cloud scan
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixowasp-top-10-testing
Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real exploits for each category of the current OWASP Top 10:2025 (broken access control including SSRF, security misconfiguration, software supply chain failures, cryptographic failures, injection, insecure design, authentication failures, integrity failures, logging and alerting failures, mishandling of exceptional conditions) and report only what they could actually prove, mapped back to the category wi
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixweb-app-penetration-testing
Pentest a web app or website end to end — black-box testing of a live URL, staging environment, or local dev server that finds and exploits real vulnerabilities (auth bypass, broken access control, IDOR, injection, XSS, SSRF, business logic) and proves each one with a working proof-of-concept instead of a signature match. Runs with Strix, either the self-hosted open-source CLI or the managed app.strix.ai cloud. Use when the user asks to pentest, hack, security-test, or audit their web app, websi
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixmanaged-pentesting-with-strix
Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platform with the strix cloud CLI or REST API — no local Docker or LLM key needed. Safely review and upload local source, register assets, launch and poll scans, triage vulnerabilities, export SARIF, download compliance reports, start PR reviews, buy credits, and set up schedules or webhooks. Use for managed, continuous, scheduled, team-tracked, or sandboxed-agent security testing.
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
usestrixpenetration-testing-with-strix
Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penetration testing that exploits and proves vulnerabilities (OWASP Top 10 and beyond — injection, XSS, SSRF, auth/access-control flaws, IDOR, business logic) instead of just flagging them. Runs self-hosted with the open-source CLI or via the managed app.strix.ai cloud, and returns validated findings with proof-of-concept exploits (Markdown, JSON, CSV, SARIF). Use when the user asks to pentest, hack, secu
- 1시간 설치 수
- 14
- GitHub Stars
- 7.3만
- 업데이트
- 10월 30일
gamedev-skillsgodot-3d-essentials
Set up a Godot 4.7 3D scene: Node3D transforms, Camera3D, lighting (DirectionalLight3D/OmniLight3D), WorldEnvironment for sky/ambient/tonemap/post, MeshInstance3D materials, and GridMap for tile-based 3D levels. Use when building a 3D scene in a Godot project, placing cameras/lights, configuring environment and post-processing, or working with Node3D/.tscn 3D content and GridMap.
- 1시간 설치 수
- 14
- GitHub Stars
- 6.3천
- 업데이트
- 10월 28일
gamedev-skillslevel-design
Design and build playable levels — the blockout/whitebox-to-playable workflow, player metrics and grid layout, pacing and flow (tension/rest curve), gating and the critical path, and encounter design. Engine-neutral practice. Use when the user mentions level design, blockout/whitebox/greybox, level layout, level pacing, encounter design, or the critical path through a level.
- 1시간 설치 수
- 14
- GitHub Stars
- 6.3천
- 업데이트
- 10월 28일
wshobsonmodern-javascript-patterns
Master ES6+ features including async/await, destructuring, spread operators, arrow functions, promises, modules, iterators, generators, and functional programming patterns for writing clean, efficient JavaScript code. Use when refactoring legacy code, implementing modern patterns, or optimizing JavaScript applications.
- 1시간 설치 수
- 14
- GitHub Stars
- 4.2만
- 업데이트
- 10월 26일
wshobsonpython-performance-optimization
Profile and optimize Python code using cProfile, memory profilers, and performance best practices. Use when debugging slow Python code, optimizing bottlenecks, or improving application performance.
- 1시간 설치 수
- 14
- GitHub Stars
- 4.2만
- 업데이트
- 10월 26일
actionbookm15-anti-pattern
Use when reviewing code for anti-patterns. Keywords: anti-pattern, common mistake, pitfall, code smell, bad practice, code review, is this an anti-pattern, better way to do this, common mistake to avoid, why is this bad, idiomatic way, beginner mistake, fighting borrow checker, clone everywhere, unwrap in production, should I refactor, 反模式, 常见错误, 代码异味, 最佳实践, 地道写法
- 1시간 설치 수
- 14
- GitHub Stars
- 1.6천
- 업데이트
- 8월 23일
gamedev-skillsgame-feel
Add "juice" and game feel that makes actions satisfying — screen shake, hit-stop/freeze frames, tweened/eased motion, squash & stretch, knockback, and layered audio-visual feedback — as engine-neutral techniques that pair with the detected engine's tween, particle, and camera APIs. Use when the user mentions game feel, juice, "make it feel good/punchy", screen shake, hit stop, screen freeze, easing, squash and stretch, impact frames, or feedback/polish on hits, jumps, pickups, and deaths.
- 1시간 설치 수
- 14
- GitHub Stars
- 5.5천
- 업데이트
- 10월 28일
t3dotggfile-pr
File a concise pull request. Use when the user asks to file, open, or create a PR.
- 1시간 설치 수
- 14
- GitHub Stars
- 2.2천
- 업데이트
- 10월 28일
t3dotggleaving-pr-comments
Use whenever leaving comments on GitHub.
- 1시간 설치 수
- 14
- GitHub Stars
- 2.2천
- 업데이트
- 10월 28일