AGENT SKILLS · 任务装备
值得安装的 Agent Skills
汇总公开仓库中已验证的 Skills。安装前先看清它能做什么、包内包含什么、热度如何，以及来源是否可靠。
- 目录范围
- 已验证
- Skills
- 17,329
- 仓库
- 2795
- 最近同步
- 2026年10月19日
giuseppe-trisciuogliounit-test-json-serialization
Provides patterns for unit testing JSON serialization/deserialization with Jackson and @JsonTest. Validates JSON mapping, custom serializers, date formats, and polymorphic types. Use when testing JSON serialization, validating custom serializers, or writing JSON unit tests in Spring Boot applications.
- 安装量
- 2
- GitHub Stars
- 351
- 最近更新
- 9月10日
giuseppe-trisciuogliounit-test-service-layer
Provides patterns for unit testing service layer with Mockito. Creates isolated tests that mock repository calls, verify method invocations, test exception scenarios, and stub external API responses. Use when testing service behaviors and business logic without database or external services.
- 安装量
- 2
- GitHub Stars
- 351
- 最近更新
- 9月10日
marimo-teammarimo-notebook
Write a marimo notebook in a Python file in the right format.
- 安装量
- 2
- GitHub Stars
- 173
- 最近更新
- 8月19日
omer-metincommunity-strategy
Expert in designing community strategies that align with business goals while creating genuine value for members. Covers community-market fit, positioning, culture design, governance models, and long-term roadmapping. Understands that great communities are intentionally designed, not accidentally grown. Use when "community strategy, build a community, community vision, community culture, community roadmap, community-market fit, why community, " mentioned.
- 安装量
- 2
- GitHub Stars
- 157
- 最近更新
- 1月22日
yoanbernabeusupabase-audit-auth-config
Analyze Supabase authentication configuration for security weaknesses and misconfigurations.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-auth-signup
Test if user signup is open and identify potential abuse vectors in the registration process.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-auth-users
Test for user enumeration vulnerabilities through various authentication endpoints.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-authenticated
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-buckets-list
List all storage buckets and their configuration to identify the storage attack surface.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-buckets-public
Identify storage buckets that are publicly accessible and may contain sensitive data.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-buckets-read
Attempt to list and read files from storage buckets to verify access controls.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-functions
Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-realtime
Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-rls
Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-rpc
List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-tables-list
List all tables exposed via the Supabase PostgREST API to identify the attack surface.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-tables-read
Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-detect
Detect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-evidence
Initialize and manage the evidence collection directory for professional security audits with documented proof of findings.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-anon-key
Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-db-string
CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-jwt
Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-service-key
CRITICAL - Detect if the Supabase servicerole key is leaked in client-side code. This is a P0 severity issue.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-url
Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日