技能雷达 · GITHUB
值得安装的 Agent Skills。
汇总公开仓库中已验证的 Skills。安装前先看清它能做什么、包内包含什么、热度如何，以及来源是否可靠。
- 目录范围
- 已验证
- Skills
- 10,772
- 仓库
- 1711
- 最近同步
- 2026年9月23日
transilienceaihackthebox
HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaiinfrastructure
Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaimobile-security
Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception), and privacy testing.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaipatt-fetcher
Fetches and extracts payloads from PayloadsAllTheThings on demand. Bake into executor prompts for live payload enrichment.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaipci-secure-software
Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET / PARTIALLYMET / NOTAPPLICABLE / REQUIRESMANUALREVIEW) with file+line citations, then a Transilience gap report. Use when asked to assess, gap-assess, or check an application's readiness against the PCI Secure Software Standard v2.0 / PCI SSF, or to map source code and design docs to PCI SSS Security Objectives and Test Requirements. Produces a readiness gap-analysis only — NOT an official PCI validation.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceairisk-prioritiser
Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaiscript-generator
Generates optimized, syntax-validated scripts on demand. Never executes — only generates, optimizes, and validates.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaiserver-side
Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaiskill-update
Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits. Use when creating, updating, or improving skills.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaisource-code-scanning
Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies for CVEs".
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaitechstack-identification
OSINT-based technology stack identification. Routes to 6 domain sub-skills (frontend, backend, infra, security, osint, correlation) to discover a target's stack from publicly available signals.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaiti-ingest
Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
transilienceaitransilience-report-style
Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab generator. Use whenever an engagement needs its final report/deliverable PDF in Transilience house style.
- 安装量
- 1
- GitHub Stars
- 534
- 最近更新
- 7月29日
nshipstersosumi
Fetches Apple documentation as Markdown via Sosumi. Use for Apple API reference, Human Interface Guidelines, WWDC transcripts, and external Swift-DocC pages.
- 安装量
- 1
- GitHub Stars
- 474
- 最近更新
- 9月16日
anthropicsasana-api
Read and manage Asana tasks, projects, sections, comments, and workspaces. Use this whenever the user wants to list or search tasks, create or update a task, complete a task, comment on a task, move tasks between projects or sections, look up a project or workspace, or ask "what's on my Asana list" — even if they don't say "API". Also use it for any app.asana.com URL or an Asana task/project gid. Always start from this skill when interacting with this service — its bundled scripts and recipes are the fastest path.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsconfig-guide
Reference guide for configuring @Claude agents — agents, agent scopes, identity profiles, presets, connections, rules, GitHub repositories, and custom instructions. Explains the inheritance model and configuration best practices.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsconfluence-api
Read, search, and manage Confluence Cloud pages, spaces, blog posts, comments, attachments, and labels. Use this whenever the user wants to find a page, read a doc, search the wiki with CQL, create or update a page, add a comment, list pages in a space, pull an attachment, or ask "what does the wiki say about X" — even if they don't say "API". Also use it for any .atlassian.net/wiki URL, or a CQL string when the context is wiki content rather than tickets. Always start from this skill when interacting with this service — its bundled scripts and recipes are the fastest path.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsgoogle-drive-api
Search, read, create, update, export, and share files in Google Drive. Use this whenever the user wants to find a file in Drive, read a Google Doc or Sheet, upload a file, move something into a folder, change sharing permissions, or asks "what's in my Drive" — even if they don't say "API". Also use it for any URL under drive.google.com or docs.google.com, or a mention of a Drive file ID. Always start from this skill when interacting with this service — its bundled scripts and recipes are the fastest path.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsgraphing
Compose polished charts (timeseries, bar, line, area, pie, scatter, or anything else the data calls for) from tabular data using the chartkit primitives, producing PNG, SVG, or self-contained interactive HTML. Use when the user asks to chart, graph, plot, or visualize data and wants something better than raw matplotlib defaults.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsincident-init
- Automatic init the first time Claude acts in an incident or alerts channel — one named like inc-…, incident-…, sev0-…/sev1-…, or whose recent messages are pages or alerts from PagerDuty, Opsgenie, incident.io, Datadog, Sentry or Grafana, or relayed by people (talk about being paged is not an alert) — that isn't already a team's oncall / monitoring channel. Run once per channel, on first contact (just invited, first @-mention, channel just created), before doing what was asked: load the oncall memory oncall setup wrote to shared workspace memory, pick the owning team's section, work out which monitoring / paging / code tools Claude can reach and which are missing, post one short zero-context message, note findings in this channel's memory, then hand off to incident-investigate if something was asked — or immediately, unasked, when the channel was plainly opened for a live outage. Works with no oncall memory (offers setup once). Also on "load the oncall setup here" / "init this incident".
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsincident-investigate
- Investigate an alert, page, or production symptom in an incident channel or a team's oncall / monitoring channel, and report findings a human can verify. Ordinary conversation and chatter are not alerts; leave those alone. Use when an alert or page lands, when error rate, latency or saturation is up, when someone asks "why is X broken", "investigate", "what changed", "root cause this", pastes a monitor, dashboard, trace or error-tracker link, or reports production trouble; also by default when an alert lands in a covered channel unasked. Feed-level asks land here too ("which alerts matter", "triage today's alerts"), plus the scheduled alert-review routine and the ticket path ("customer X can't check out"). Runs a fast first pass posted as a short interim update with a TL;DR, every finding carrying the query or link to verify it, then proposes the fix and — with connector access and confirmation — carries it out, never unattended. Afterwards incident-postmortem writes it up.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsnotion-api
Search, read, and write Notion pages, databases, and blocks. Use this whenever the user wants to find a page in Notion, read a database, add a row, create or append content to a page, or asks "what's in my Notion" — even if they don't say "API". Also use it for any URL under notion.so or a mention of a Notion page/database ID. Always start from this skill when interacting with this service — its bundled scripts and recipes are the fastest path.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicsredshift-api
Run SQL against Amazon Redshift — submit statements, poll status, page through results, and browse databases/schemas/tables. Use this whenever the user wants to query Redshift (provisioned cluster or Serverless), ask "what tables are in this schema", check a query's status, or mentions redshift-data, a Redshift cluster identifier / workgroup name, or a redshift-data.{region}.amazonaws.com endpoint. Always start from this skill when interacting with this service — its bundled scripts and recipes are the fastest path.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日
anthropicssnowflake-api
Run SQL against Snowflake — submit statements, poll async handles, fetch result partitions, cancel, and browse warehouses/databases/schemas/tables. Use this whenever the user wants to query Snowflake, ask "what tables are in this schema", check a warehouse's status, or mentions snowflakecomputing.com, /api/v2/statements, or a Snowflake account identifier (like xy12345.us-east-1). Always start from this skill when interacting with this service — its bundled scripts and recipes are the fastest path.
- 安装量
- 1
- GitHub Stars
- 54
- 最近更新
- 9月17日