AGENT SKILLS · 任务装备
值得安装的 Agent Skills
汇总公开仓库中已验证的 Skills。安装前先看清它能做什么、包内包含什么、热度如何，以及来源是否可靠。
- 目录范围
- 已验证
- Skills
- 20,982
- 仓库
- 3214
- 最近同步
- 2026年10月21日
awsagents-optimize
Use when measuring or improving agent quality and performance — set up evaluators, online monitoring, CI/CD quality gates, observability, or cost optimization. Triggers on: "evaluate my agent", "add evaluator", "measure quality", "quality gate", "run evals", "agent too slow", "why is it slow", "reduce latency", "set up observability", "CloudWatch dashboard", "how much does my agent cost", "cost optimization", "logs not showing up", "logs missing", "spans not found", "eval failing", "eval error",
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awsanalyzing-release-readiness
- Trigger a pre-merge release readiness review on a GitHub PR, GitLab MR, or local branch. Use when the user wants to analyze code changes for risk, correctness, and potential rollback issues before merging. Trigger words include release readiness, analyze PR, analyze MR, review PR, risk analysis, pre-merge, safe to ship, ready to merge, ready to commit, any risks, before merging, validate changes, release management.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awsaws-secrets-manager
Secret safety for AWS Secrets Manager, secret management, credentials, API keys, tokens, and passwords. Prevents AI agents from directly fetching secret values and teaches runtime dynamic references with asm-exec so plaintext never enters the LLM context window.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awschatting-with-aws-devops-agent
- Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge / runbook discovery, security audits, dependency questions, and quick diagnostics — anything that needs a 5-30 second answer rather than a 5-8 minute deep investigation. Trigger words include cost, optimize, review, architecture, topology, what runbooks, show me, compare, audit, what if.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awscoordinating-multi-space-devops-agent
Coordinate the AWS DevOps Agent across multiple AgentSpaces from one Claude Code session — route questions to the right space (prod vs staging vs knowledge), query several spaces in parallel and synthesize, or compare findings across accounts. Use whenever the user has more than one AgentSpace configured, mentions multiple AWS accounts, or asks something like "check both prod and staging", "compare across accounts", or "ask the knowledge space".
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awsdiff-scanning-with-aws-security-agent
Run a fast AWS Security Agent diff scan on only the changed code since a git ref. Use when the user asks to scan changes, run a diff scan, check what changed for security issues, scan before committing, scan before PR, or any pre-commit/pre-push security check.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awsinvestigating-incidents-with-aws-devops-agent
Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike", "deployment failure", "rollback", "sev1", "investigate", "root cause", "debug", "alarm fired", "service down". Polls and streams progress, then surfaces recommendations.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awspentesting-with-aws-security-agent
Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain, exercises the supplied endpoints with the managed Security Agent service, and returns verified runtime findings. Use when the user asks to pentest, run a penetration test, test their app's attack surface, find runtime vulnerabilities, register or verify a target domain, or check pentest status / findings.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awsremediating-with-aws-security-agent
- Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation. Use this whenever the user mentions Security Agent, security findings, pentest or penetration test results, code review findings, vulnerabilities found in their AWS account, "what did the security scan find", remediating or triaging security risks, or wants to start fixing reported vulnerabilities — even if they don't name the service explicitly. Trigger it for phrases like "get my security findings",
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awsrunning-release-tests
- Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile. Use when the user wants to validate multi-step workflows, verify features, check for regressions, or test API endpoints. Trigger words include run tests, UAT, test my app, test profile, UI test, API test, automated testing, regression test, QA, end-to-end test, run the QA agent.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
awssetup-security-agent
Configure AWS Security Agent for the current workspace — provision or reuse an agent space, IAM service role, and S3 bucket. Use when the user asks to "set up security agent", "configure security scanner", "is security agent configured", or on first-time use before any scan or pentest.
- 安装量
- 2
- GitHub Stars
- 2806
- 最近更新
- 10月5日
yaklangbinary-protection-bypass
- Binary protection bypass playbook. Use when identifying and bypassing ASLR, PIE, NX/DEP, stack canary, RELRO, FORTIFYSOURCE, CET, and MTE protections in ELF binaries to enable exploitation.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklangdefi-attack-patterns
- DeFi attack pattern playbook. Use when analyzing flash loan attacks, price oracle manipulation, MEV sandwich attacks, governance exploits, bridge vulnerabilities, and token standard edge cases in decentralized finance protocols.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklangdns-rebinding-attacks
- DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact with internal services from browser context, or when SSRF is not possible server-side but the target has client-side fetch/XHR to attacker-controlled domains.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklanggraphql-and-hidden-parameters
- GraphQL and hidden parameter testing playbook. Use when exploring introspection, batching, undocumented fields, hidden parameters, schema abuse, and GraphQL authorization gaps.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklangheap-exploitation
- Heap exploitation playbook. Use when targeting ptmalloc2/glibc heap vulnerabilities including UAF, double free, overflow, off-by-one/null, and leveraging tcache/fastbin/unsortedbin attacks for arbitrary write or code execution.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklanghttp-host-header-attacks
- HTTP Host header injection and routing abuse playbook. Use when the application trusts the Host header for generating URLs, routing requests, or access control — enabling password reset poisoning, web cache poisoning, SSRF via routing, and virtual host bypass.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklanglattice-crypto-attacks
- Lattice-based cryptanalysis playbook. Use when attacking RSA via Coppersmith small roots, recovering DSA/ECDSA nonces from bias, solving knapsack problems, or applying LLL/BKZ reduction to cryptographic constructions.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklanglinux-lateral-movement
- Linux lateral movement playbook. Use after gaining initial access to pivot across Linux hosts via SSH hijacking, credential harvesting, internal pivoting, D-Bus exploitation, sudo token reuse, and shared filesystem abuse.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklangpath-traversal-lfi
- Path traversal and LFI playbook. Use when file paths, download endpoints, include operations, archive extraction, or wrapper behavior may expose filesystem control.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklangprototype-pollution
- Prototype pollution testing for JavaScript stacks. Use when user input is merged into objects (query parsers, JSON bodies, deep assign), when configuring libraries via untrusted keys, or when hunting RCE gadgets via polluted Object.prototype in Node or the browser.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklangsymbolic-execution-tools
- Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, bypassing checks, or automating binary analysis with angr, Z3, or Unicorn Engine.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
yaklangxxe-xml-external-entity
- XXE playbook. Use when XML, SVG, OOXML, SOAP, or parser-driven imports may resolve external entities, files, or internal network resources.
- 安装量
- 2
- GitHub Stars
- 2372
- 最近更新
- 9月13日
apollographqlgraphql-operations
Guide for writing GraphQL operations (queries, mutations, fragments) following best practices. Use this skill when: (1) writing GraphQL queries or mutations, (2) organizing operations with fragments, (3) optimizing data fetching patterns, (4) setting up type generation or linting, (5) reviewing operations for efficiency.
- 安装量
- 2
- GitHub Stars
- 116
- 最近更新
- 9月29日