AGENT SKILLS · WYPOSAŻENIE MISJI

Przydatne Agent Skills ocenione według realnego użycia

Porównuj zweryfikowane Skills: ich zastosowanie, zawartość pakietu, liczbę instalacji i wiarygodność źródła.

ZAKRES KATALOGU
ZWERYFIKOWANE
Skills
17 083
repozytoria
2744
ostatnia synchronizacja
16 paź 2026
17 083 Skills
aws
Oficjalne

diff-scanning-with-aws-security-agent

Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues, scan before committing, scan before PR, or any pre-commit/pre-push security check.

instalacje
2
GitHub Stars
2,8 tys.
Aktualizacja
5 paź
aws
Oficjalne

investigating-incidents-with-aws-devops-agent

Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike", "deployment failure", "rollback", "sev1", "investigate", "root cause", "debug", "alarm fired", "service down". Polls and streams progress, then surfaces recommendations.

instalacje
2
GitHub Stars
2,8 tys.
Aktualizacja
5 paź
aws
Oficjalne

pentesting-with-aws-security-agent

Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied endpoints with the managed Security Agent service, and returns verified runtime findings. Use when the user asks to pentest, run a penetration test, test their app's attack surface, find runtime vulnerabilities, register or verify a target domain, or check pentest status / findings.

instalacje
2
GitHub Stars
2,8 tys.
Aktualizacja
5 paź
aws
Oficjalne

remediating-with-aws-security-agent

- Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test results, code review findings, vulnerabilities found in their AWS account, "what did the security scan find", remediating or triaging security risks, or wants to start fixing reported vulnerabilities — even if they don't name the service explicitly. Trigger it for phrases like "get my security findings",

instalacje
2
GitHub Stars
2,8 tys.
Aktualizacja
5 paź
aws
Oficjalne

running-release-tests

- Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate multi-step workflows, verify features, check for regressions, or test API endpoints. Trigger words include run tests, UAT, test my app, test profile, UI test, API test, automated testing, regression test, QA, end-to-end test, run the QA agent.

instalacje
2
GitHub Stars
2,8 tys.
Aktualizacja
5 paź
aws
Oficjalne

setup-security-agent

Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks to "set up security agent", "configure security scanner", "is security agent configured", or on first-time use before any scan or pentest.

instalacje
2
GitHub Stars
2,8 tys.
Aktualizacja
5 paź
yaklang
Społeczność

binary-protection-bypass

- Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFYSOURCE, CET, and MTE protections in ELF binaries to enable exploitation.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

defi-attack-patterns

- DeFi attack pattern playbook. Use when analyzing flash loan attacks, price oracle manipulation, MEV sandwich attacks, governance exploits, bridge vulnerabilities, and token standard edge cases in decentralized finance protocols.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

dns-rebinding-attacks

- DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact with internal services from browser context, or when SSRF is not possible server-side but the target has client-side fetch/XHR to attacker-controlled domains.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

graphql-and-hidden-parameters

- GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hidden parameters, schema abuse, and GraphQL authorization gaps.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

heap-exploitation

- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, overflow, off-by-one/null, and leveraging tcache/fastbin/unsortedbin attacks for arbitrary write or code execution.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

http-host-header-attacks

- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generating URLs, routing requests, or access control — enabling password reset poisoning, web cache poisoning, SSRF via routing, and virtual host bypass.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

lattice-crypto-attacks

- Lattice-based cryptanalysis playbook. Use when attacking RSA via Coppersmith small roots, recovering DSA/ECDSA nonces from bias, solving knapsack problems, or applying LLL/BKZ reduction to cryptographic constructions.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

linux-lateral-movement

- Linux lateral movement playbook. Use after gaining initial access to pivot across Linux hosts via SSH hijacking, credential harvesting, internal pivoting, D-Bus exploitation, sudo token reuse, and shared filesystem abuse.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

path-traversal-lfi

- Path traversal and LFI playbook. Use when file paths, download endpoints, include operations, archive extraction, or wrapper behavior may expose filesystem control.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

prototype-pollution

- Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects (query parsers, JSON bodies, deep assign), when configuring libraries via untrusted keys, or when hunting RCE gadgets via polluted Object.prototype in Node or the browser.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

symbolic-execution-tools

- Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, bypassing checks, or automating binary analysis with angr, Z3, or Unicorn Engine.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

windows-av-evasion

- AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-based detection on Windows endpoints.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
yaklang
Społeczność

xxe-xml-external-entity

- XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or internal network resources.

instalacje
2
GitHub Stars
2,4 tys.
Aktualizacja
13 wrz
medusajs
Oficjalne

storefront-best-practices

ALWAYS use this skill when working on ecommerce storefronts, online stores, shopping sites. Use for ANY storefront component including checkout pages, cart, payment flows, product pages, product listings, navigation, homepage, or ANY page/component in a storefront. CRITICAL for adding checkout, implementing cart, integrating Medusa backend, or building any ecommerce functionality. Framework-agnostic (Next.js, SvelteKit, TanStack Start, React, Vue). Provides patterns, decision frameworks, backend

instalacje
2
GitHub Stars
225
Aktualizacja
5 paź
gamedev-skills
Społeczność

visual-novel

Build a visual novel: a branching script, character and background display, a text box with choices, save/load, backlog, and skip/auto. Use for a VN, dating sim, or branching story game.

instalacje
2
GitHub Stars
1,3 tys.
Aktualizacja
27 wrz
apollographql
Oficjalne

graphql-operations

Guide for writing GraphQL operations (queries, mutations, fragments) following best practices. Use this skill when: (1) writing GraphQL queries or mutations, (2) organizing operations with fragments, (3) optimizing data fetching patterns, (4) setting up type generation or linting, (5) reviewing operations for efficiency.

instalacje
2
GitHub Stars
116
Aktualizacja
29 wrz
mapbox
Oficjalne

mapbox-android-patterns

Official integration patterns for Mapbox Maps SDK on Android. Covers installation, adding markers, user location, custom data, styles, camera control, and featureset interactions. Based on official Mapbox documentation.

instalacje
2
GitHub Stars
80
Aktualizacja
1 paź
mapbox
Oficjalne

mapbox-data-visualization-patterns

Patterns for visualizing data on maps including choropleth maps, heat maps, 3D visualizations, data-driven styling, and animated data. Covers layer types, color scales, and performance optimization.

instalacje
2
GitHub Stars
80
Aktualizacja
1 paź