技能雷达 · GITHUB

值得安装的 Agent Skills。

汇总公开仓库中已验证的 Skills。安装前先看清它能做什么、包内包含什么、热度如何，以及来源是否可靠。

目录范围: 已验证
Skills: 10,772
仓库: 1711
最近同步: 2026年9月23日

10,772 Skills

github-ops

- Operates GitHub through gh CLI and the REST/GraphQL APIs with explicit target, authorization, impact preview, and independent readback. Use for pull requests, issues, Actions, repositories, collaborators, teams, organization member privileges, base permissions, 2FA enforcement, repository settings, API automation, parallel or superseded PR convergence, and public or enterprise GitHub. Also use when a GitHub write returned success but the requested state did not change, or when deciding whether a setting is writable through CLI, REST, GraphQL, or only the GitHub UI.

安装量: 1
GitHub Stars: 1411
最近更新: 9月20日

查看详情 →

btca-local

Invoke this skill when the user says "use btca"

安装量: 1
GitHub Stars: 1153
最近更新: 4月12日

查看详情 →

binance

Use binance-cli for Binance Spot, Futures (USD-S), and Convert. Requires auth.

安装量: 1
GitHub Stars: 1036
最近更新: 9月11日

查看详情 →

binance-onchain-copy-trader

Scaffold for assembling on-chain copy-trading strategies on Binance Agentic Wallet. Wires the existing capabilities — address monitoring, signal subscription, address scoring, token audit, order placement, on-chain take-profit/stop-loss — into one runnable pipeline, and exposes every strategy decision as a hook. Ships no strategy of its own. Trigger on: copy trade, copy trading, follow smart money, follow a wallet, mirror trades, copy-trade bot, auto-buy on signal, monitor a wallet and trade, smart money copy trading, signal-driven trading, pick addresses to copy, copy-trade strategy, copy-trade status, copy-trade post-mortem. NOT for: single manual trades (use binance-agentic-wallet), signal queries alone (binance-trading-signal), address analysis alone (binance-wallet-tracker / binance-leaderboard).

安装量: 1
GitHub Stars: 1036
最近更新: 9月11日

查看详情 →

binance-wallet-tracker

Wallet tracking and monitoring on Binance Web3. Monitor token/trade activity for private groups or public Smart Money/KOL data. Four domains: (A) Discovery — consensus, pioneer, leaderboard diff, token buyer lookup, time-window summaries, similar wallets; (B) Evaluation — token risk (tokenRiskLevel ≥ 3), group rhythm, follow list assessment, token heat; (C) Replay — 4h summary, Accumulation/Distribution, sector rotation, anomaly orders, round-trip, first-mover/leader-follower, wake-up, bot-like; (D) Management — group create/rename, batch import, label update, link, follow list; (E) Real-time — WebSocket push for Smart Money, KOL, wallet-level, and address-level trade events. Trigger on: wallet tracker, monitoring, consensus, pioneer, accumulation, Distribution, Sector Rotation, Anomaly Large Order, round-trip, first-mover, wake-up, bot-like, token risk, token heat, group profile, similar wallets, group management, address import, follow list, real-time push, WebSocket — even without "tracker" explicitly.

安装量: 1
GitHub Stars: 1036
最近更新: 9月11日

查看详情 →

agentforce-observe

Analyze production Agentforce agent behavior using session traces and Data Cloud, and manage Agent Health Monitoring (AHM) alerts. TRIGGER when: user queries STDM session data or Data Cloud trace records; investigates production agent failures, regressions, or performance issues; asks about session traces, conversation logs, or agent metrics; wants to reproduce a reported production issue in preview; runs findSessions or trace analysis queries; creates, lists, updates, or deletes an AHM data alert on an agent metric (escalation rate, deflection, etc.); asks why an alert is not firing or wants to check whether alerts have fired (notification counts, or the per-alert Incidents view). DO NOT TRIGGER when: user creates, modifies, or debugs .agent files during development (use agentforce-generate); writes or runs test specs (use agentforce-test); uses sf agent preview for local development iteration; deploys or publishes agents.

安装量: 1
GitHub Stars: 1023
最近更新: 9月18日

Apache-2.09 文件

查看详情 →

agentforce-test

Write, run, and analyze structured test suites for Agentforce agents — functional AND security. TRIGGER when: user writes or modifies test spec YAML (AiEvaluationDefinition); runs sf agent test create, run, run-eval, or results commands; asks about test coverage strategy, metric selection, or custom evaluations; interprets test results or diagnoses test failures; asks about batch testing, regression suites, or CI/CD test integration; requests security testing, OWASP LLM Top 10, red-teaming, penetration testing, prompt-injection tests, a security grade, or a vulnerability assessment of an agent. DO NOT TRIGGER when: user creates, modifies, previews, or debugs .agent files (use agentforce-generate); deploys or publishes agents; writes Agent Script code; uses sf agent preview for development iteration; analyzes production session traces (use agentforce-observe); performs a static safety review of .agent file content (use agentforce-generate Section 15).

安装量: 1
GitHub Stars: 1023
最近更新: 9月18日

Apache-2.021 文件

查看详情 →

external-diagram-mermaid-generate

Salesforce architecture diagrams using Mermaid with ASCII fallback. Use this skill when generating text-based diagrams for Salesforce architecture, OAuth flows, ERDs, integration sequences, or Agentforce structure. TRIGGER when: user says \"diagram\", \"visualize\", \"ERD\", or asks for sequence diagrams, flowcharts, class diagrams, or architecture visualizations in Mermaid. DO NOT TRIGGER when: user asks about non-Salesforce systems.

安装量: 1
GitHub Stars: 1023
最近更新: 9月18日

Apache-2.037 文件

查看详情 →

json-canvas

Create and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections. Use when working with .canvas files, creating visual canvases, mind maps, flowcharts, or when the user mentions Canvas files in Obsidian.

安装量: 1
GitHub Stars: 974
最近更新: 3月15日

查看详情 →

music-caption-rewriter

Turn a brief music description and optional tagged lyrics into a professional MiniMax Music 3 structured caption with Global Metadata, Vocal Details, and a section-aware Arrangement. Use when users ask to enhance a music-generation prompt, preserve lyric-section directives, retrieve a similar style from bundled templates, fuse styles, or produce JSON or JSONL caption output.

安装量: 1
GitHub Stars: 898
最近更新: 8月14日

查看详情 →

eide

- EIDE (Embedded IDE) 工程构建工具，用于扫描 .eide/eide.yml 工程、枚举构建配置 (ConfigName)、执行 build/rebuild/clean 并解析构建日志，返回可供 jlink/openocd 复用的产物路径。当用户提到 EIDE、Embedded IDE、eide.yml、 unifybuilder、VS Code EIDE 扩展、Cl.eide 时自动触发，也兼容 /eide 显式调用。即使用户只是说"用 EIDE 编译一下"或"EIDE 烧录到板子上"，只要上下文涉及 EIDE 嵌入式工程就应触发此 skill。

安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

gcc

- GCC 嵌入式工程构建工具（CMake + arm-none-eabi-gcc），用于扫描 CMake 型嵌入式工程、列出预设、配置、编译、重建、清理和分析 ELF 大小。当用户提到 GCC、arm-none-eabi、 CMake 嵌入式编译、Ninja 构建、ELF 大小分析、arm-gcc、交叉编译、cmake --build、 cmake --preset 时自动触发，也兼容 /gcc 显式调用。即使用户只是说"编译一下"或 "看看固件多大"，只要上下文涉及 CMake 嵌入式 GCC 工程就应触发此 skill。

安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

jlink

- J-Link 下载与在线调试工具，用于探测设备、烧录固件、读写内存、查看寄存器、复位目标、读取 RTT/SWO 日志，以及在线调试（暂停/恢复/单步/断点运行/调用栈/变量查看）。当用户提到 J-Link、JLink、RTT、烧录固件、写内存、读内存、寄存器查看、目标复位、探针连通性检查、在线调试、单步、断点、调用栈时自动触发，也兼容 /jlink 显式调用。即使用户只是说"烧录一下"、"看看 RTT 输出"或"调试一下"，只要上下文涉及 J-Link 探针就应触发此 skill。

安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

net

- 嵌入式网络调试工具，用于发现接口、抓包、分析 pcap/pcapng、做连通性测试、端口扫描和流量统计。当用户提到 Wireshark、tshark、Npcap、抓包、网络联调、端口扫描、连通性排查、pcap 分析、网络接口、ping 测试、traceroute、流量统计、Modbus TCP、EtherNet/IP 等网络协议调试时自动触发，也兼容 /net 显式调用。即使用户只是说"抓个包看看"、"扫一下端口"、"网络通不通"或"分析一下这个 pcap"，只要上下文中出现具体工具名（tshark、Wireshark、Npcap）、协议名（Modbus TCP、EtherNet/IP、ICMP 等）、调试动作（抓包、端口扫描、连通性测试、ping、traceroute、流量统计、pcap 分析）或网络接口操作，就应触发此 skill。

安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

ssh

SSH/服务器操作助手。用于远程服务器、user@host、SSH 配置、上传下载、部署、跳板机、隧道、端口转发、服务器命令执行等任务；以 ~/.ssh/config 的 Host 别名为唯一服务器清单，优先密钥认证，通过本 skill 的 Python 脚本封装 OpenSSH 操作。

安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

workflow

- embeddedskills 的薄编排层，用于在当前 workspace 中发现工程、选择 build/flash/debug/observe 后端、串联 .embeddedskills/state.json，并聚合底层 skill 的结果。当用户明确输入以下命令之一："一键构建烧录"、"自动诊断"、"串起 build - flash - debug - observe" 或显式调用 /workflow 时触发。

安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

mastra-factory

Operate and supervise Mastra Factory through mastra api factory. Use for Factory status or queue summaries, project and work-item inspection, metrics, health, decisions, attention, supervisor sessions, and user-authorized autonomous or interactive Factory operations on hosted, local, remote, or self-hosted servers.

安装量: 1
GitHub Stars: 85
最近更新: 9月18日

Apache-2.02 文件

查看详情 →

create-sound

- Generate a SoundDefinition for @web-kits/audio from any input - a natural-language prompt, an audio file the user shares, or both. Use when the user says "create a sound", "/create-sound", "design a sound for X", shares a WAV/MP3/sprite, or asks to reverse-engineer a sample. Optionally renders a WAV preview and round-trip-validates the result.

安装量: 1
GitHub Stars: 574
最近更新: 9月5日

查看详情 →

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the engagement.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

blockchain-security

Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testing smart contract security.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

coordination

Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

cve-risk-score

Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is mentioned to display CVSS score, severity, CWE, and description.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

dfir

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.

安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →