AGENT SKILLS · WYPOSAŻENIE MISJI
Przydatne Agent Skills ocenione według realnego użycia
Porównuj zweryfikowane Skills: ich zastosowanie, zawartość pakietu, liczbę instalacji i wiarygodność źródła.
- ZAKRES KATALOGU
- ZWERYFIKOWANE
- Skills
- 23 248
- repozytoria
- 3589
- ostatnia synchronizacja
- 4 lis 2026
zhinkgitssh
SSH/服务器操作助手。用于远程服务器、user@host、SSH 配置、上传下载、部署、跳板机、隧道、端口转发、服务器命令执行等任务；以 ~/.ssh/config 的 Host 别名为唯一服务器清单，优先密钥认证，通过本 skill 的 Python 脚本封装 OpenSSH 操作。
- Instalacje / 1h
- 1
- GitHub Stars
- 696
- Aktualizacja
- 3 wrz
zhinkgitworkflow
- embeddedskills 的薄编排层，用于在当前 workspace 中发现工程、选择 build/flash/debug/observe 后端、串联 .embeddedskills/state.json，并聚合底层 skill 的结果。 当用户明确输入以下命令之一："一键构建烧录"、"自动诊断"、"串起 build - flash - debug - observe" 或显式调用 /workflow 时触发。
- Instalacje / 1h
- 1
- GitHub Stars
- 696
- Aktualizacja
- 3 wrz
raphaelsalajacreate-sound
- Generate a SoundDefinition for @web-kits/audio from any input - a natural-language prompt, an audio file the user shares, or both. Use when the user says "create a sound", "/create-sound", "design a sound for X", shares a WAV/MP3/sprite, or asks to reverse-engineer a sample. Optionally renders a WAV preview and round-trip-validates the result.
- Instalacje / 1h
- 1
- GitHub Stars
- 574
- Aktualizacja
- 5 wrz
transilienceaiauthenticated-session-acquisition
Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaiclient-side
Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaicoordination
Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaicve-risk-score
Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is mentioned to display CVSS score, severity, CWE, and description.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaidfir
Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaihackthebox
HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaiinfrastructure
Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaimobile-security
Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception), and privacy testing.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaipatt-fetcher
Fetches and extracts payloads from PayloadsAllTheThings on demand. Bake into executor prompts for live payload enrichment.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaipci-secure-software
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET / PARTIALLYMET / NOTAPPLICABLE / REQUIRESMANUALREVIEW) with file+line citations, then a Transilience gap report. Use when asked to assess, gap-assess, or check an application's readiness
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceairisk-prioritiser
Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaiscript-generator
Generates optimized, syntax-validated scripts on demand. Never executes — only generates, optimizes, and validates.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaiserver-side
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaiskill-update
Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits. Use when creating, updating, or improving skills.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaisource-code-scanning
Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies for CVEs".
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaitechstack-identification
OSINT-based technology stack identification. Routes to 6 domain sub-skills (frontend, backend, infra, security, osint, correlation) to discover a target's stack from publicly available signals.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaiti-ingest
Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
transilienceaitransilience-report-style
Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab generator. Use whenever an engagement needs its final report/deliverable PDF in Transilience house style.
- Instalacje / 1h
- 1
- GitHub Stars
- 534
- Aktualizacja
- 29 lip
anthropicsasana-api
Read and manage Asana tasks, projects, sections, comments, and workspaces. Use this whenever the user wants to list or search tasks, create or update a task, complete a task, comment on a task, move tasks between projects or sections, look up a project or workspace, or ask "what's on my Asana list" — even if they don't say "API". Also use it for any app.asana.com URL or an Asana task/project gid. Always start from this skill when interacting with this service — its bundled scripts and recipes ar
- Instalacje / 1h
- 1
- GitHub Stars
- 54
- Aktualizacja
- 17 wrz
anthropicsconfig-guide
Reference guide for configuring @Claude agents — agents, agent scopes, identity profiles, presets, connections, rules, GitHub repositories, and custom instructions. Explains the inheritance model and configuration best practices.
- Instalacje / 1h
- 1
- GitHub Stars
- 54
- Aktualizacja
- 17 wrz
anthropicsconfluence-api
Read, search, and manage Confluence Cloud pages, spaces, blog posts, comments, attachments, and labels. Use this whenever the user wants to find a page, read a doc, search the wiki with CQL, create or update a page, add a comment, list pages in a space, pull an attachment, or ask "what does the wiki say about X" — even if they don't say "API". Also use it for any .atlassian.net/wiki URL, or a CQL string when the context is wiki content rather than tickets. Always start from this skill when inter
- Instalacje / 1h
- 1
- GitHub Stars
- 54
- Aktualizacja
- 17 wrz