AGENT SKILLS · 任务装备
值得安装的 Agent Skills
汇总公开仓库中已验证的 Skills。安装前先看清它能做什么、包内包含什么、热度如何，以及来源是否可靠。
- 目录范围
- 已验证
- Skills
- 22,662
- 仓库
- 3481
- 最近同步
- 2026年10月31日
nexscope-aiamazon-return-reduction
Return rate reduction — root cause analysis, listing accuracy, packaging improvements, size guides
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
nexscope-aiamazon-search-optimization
Amazon search ranking optimization and A9 algorithm mastery. Comprehensive SEO strategy, indexing optimization, keyword ranking improvement, and search visibility enhancement. Use when the user asks about Amazon SEO, A9 algorithm, search ranking, or product discoverability.
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
nexscope-aiamazon-seasonal-planning
Seasonal sales calendar — Prime Day, Black Friday, Q4 prep, inventory planning, promotion scheduling
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
nexscope-aiamazon-storefront-design
Amazon Store builder — page layouts, brand story, shoppable images, traffic driving, conversion optimization
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
nexscope-aiamazon-subscribe-save
Subscribe & Save optimization — enrollment, discount tiers, frequency optimization, retention analysis
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
nexscope-aiamazon-trending-products
Trending products and rising categories discovery for Amazon sellers. Analyzes Best Seller Rank patterns, seasonal trends, new release momentum, and emerging niches. Identifies product opportunities before they peak. Use when the user asks about what's trending on Amazon, hot products, rising categories, seasonal opportunities, viral products, what to sell next, emerging niches, or early-mover opportunities. Also trigger for questions like 'what should I sell now?', 'what products are doing well
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
nexscope-aiamazon-variation-strategy
Parent-child variation planning — when to merge/split, color/size variations, ranking benefits
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
nexscope-aiamazon-vine-program
Vine review program strategy — enrollment, product selection, timing, review quality maximization
- 1小时安装量
- 1
- GitHub Stars
- 759
- 最近更新
- 8月26日
cosmicstack-labsvideo-downloader
Video Downloader: Using yt-dlp to download videos from YouTube, Bilibili, Twitter, and thousands of other sites
- 1小时安装量
- 1
- GitHub Stars
- 480
- 最近更新
- 8月25日
aiskillstoreaccessibility-wcag
Enforce WCAG 2.2 accessibility standards. Use when creating UI components, reviewing frontend code, or when accessibility issues are detected. Covers semantic HTML, ARIA, keyboard navigation, and color contrast.
- 1小时安装量
- 1
- GitHub Stars
- 433
- 最近更新
- 10月13日
anomalycoterminal-control
Drive and verify terminal applications with the termctrl CLI in a real PTY - read visible screens, run named live sessions, send typed keyboard input, wait for text, save evidence, record timelines, and export edited videos. Use when an agent must operate or test a TUI, REPL, interactive CLI, shell process, or OpenTUI application.
- 1小时安装量
- 1
- GitHub Stars
- 432
- 最近更新
- 9月4日
briiirussellcloud-audit
Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps. Use when the user mentions 'cloud security,' 'cloud audit,' 'AWS security,' 'GCP security,' 'Azure security,' 'IAM audit,' 'S3 bucket,' 'cloud misconfiguration,' 'cloud hardening,' or needs to review cloud infrastructure security.
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellcontainer-audit
Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks. Use when the user mentions 'container security,' 'Docker security,' 'Dockerfile audit,' 'Kubernetes security,' 'K8s security,' 'pod security,' 'container hardening,' 'kubectl audit,' 'image scanning,' 'distroless,' 'rootless containers,' 'pod security policy,' 'pod security standards,' 'PSS,' 'network policy,' 'OPA Gatekeeper,' 'Kyverno,' 'runtime securit
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellcrypto-audit
Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation. Deeper than owasp-audit A02. Use when the user mentions 'crypto review,' 'cryptography audit,' 'encryption review,' 'KDF,' 'PBKDF2,' 'Argon2,' 'bcrypt cost,' 'IV reuse,' 'nonce reuse,' 'AES mode,' 'AES-GCM,' 'AES-ECB,' 'signature verification,' 'TLS configuration,' 'cipher suites,' 'key rotation,' 'libsodium,' 'BoringSSL,' or
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellcsf-mapping
Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover). Produce a gap analysis, current/target tier assessment, and roadmap in the governance language that boards, auditors, and CISOs actually use. Use when the user mentions 'NIST CSF,' 'CSF 2.0,' 'cybersecurity framework,' 'security posture,' 'governance mapping,' 'CSF gap analysis,' 'CSF tiers,' 'cybersecurity maturity,' 'security roadmap,' 'CISO report,' 'board reporting,'
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirusselldisk-forensics
Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and CTF challenges. Use when the user mentions 'disk forensics,' 'forensic analysis,' 'disk image,' 'file carving,' 'deleted files,' 'evidence recovery,' 'timeline analysis,' 'memory forensics,' 'volatility,' 'autopsy,' 'sleuthkit,' 'plaso,' 'log2timeline,' 'artifact analysis,' 'chain of custody,' or needs to examine a forensic image.
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellfinding-triage
Triage a single security finding — from a scanner, audit, advisory, or report — to a defensible disposition with a mitigation plan, false-positive justification, or accepted-risk writeup. Use when the user mentions 'triage this finding,' 'is this a real vulnerability,' 'mitigation plan,' 'false positive,' 'accept this risk,' 'compensating controls,' 'risk justification,' 'security ticket,' 'CVSS this,' 'should we fix this,' 'disposition,' 'sign off on,' or has a single security finding and needs
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirusselliam-audit
Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization (RBAC, ABAC, ReBAC), and federated identity. Use when the user mentions 'IAM,' 'identity,' 'access management,' 'least privilege,' 'role design,' 'SSO,' 'SAML,' 'OIDC,' 'OAuth,' 'JIT access,' 'just-in-time access,' 'break-glass,' 'service accounts,' 'RBAC,' 'ABAC,' 'privilege creep,' 'role explosion,'
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellincident-triage
Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology. Use when the user mentions 'incident response,' 'security incident,' 'triage,' 'we've been hacked,' 'breach,' 'compromised,' 'malware detected,' 'suspicious activity,' 'IOC,' 'indicators of compromise,' or needs help handling a security event.
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellmobile-audit
Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, reverse-engineering resistance. Use when the user mentions 'mobile security,' 'iOS security,' 'Android security,' 'mobile audit,' 'mobile pentest,' 'MASVS,' 'MASTG,' 'certificate pinning,' 'jailbreak detection,' 'root detection,' 'deeplink,' 'URL scheme,' 'app transport security,' 'keychain,' 'keystore,' 'mobile reverse engineering,
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellpci-audit
Audit applications and infrastructure handling payment card data against PCI DSS v4.0. Heavy emphasis on scope determination (the single most-leveraged variable) plus the engineering-relevant requirements — Req 3 (storage of CHD), Req 4 (transmission), Req 6 (secure SDLC), Req 7-8 (access), Req 10 (logging), Req 11 (testing), Req 12 (program). Use when the user mentions 'PCI,' 'PCI DSS,' 'PCI DSS 4.0,' 'payment card,' 'cardholder data,' 'CHD,' 'PAN,' 'PCI scope,' 'PCI compliance,' 'SAQ,' 'AoC,'
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellred-team-engagement
Plan, scope, and execute an authorized red-team engagement — distinct from a penetration test. Covers engagement methodology, assumed-breach scenarios, ATT&CK emulation plans, rules of engagement, deconfliction with the blue team, post-engagement debriefs, and the program-level work that makes red teams actually improve defenses. Use when the user mentions 'red team,' 'red team engagement,' 'red teaming,' 'adversary emulation,' 'ATT&CK emulation,' 'assumed breach,' 'purple team exercise,' 'table
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellsecrets-audit
Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks. Use when the user mentions 'secrets audit,' 'secret scanning,' 'leaked credentials,' 'API key in code,' 'gitleaks,' 'trufflehog,' 'git history scan,' 'secrets management,' 'vault audit,' 'rotation policy,' 'AWS Secrets Manager,' 'HashiCorp Vault,' 'Doppler,' '1Password Secrets Automation,' 'sealed-secrets,' 'External Secrets Operator,' or needs
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日
briiirussellsecurity-comms
Translate technical security work into the language of non-security audiences — board, executives, engineering, customer success, customers, legal, procurement, sales. Covers incident communication, post-mortem narrative, audit-findings-for-stakeholders, risk justification, security spend justification, and customer-facing breach disclosure. Use when the user mentions 'security comms,' 'communicate this finding,' 'explain to my boss,' 'board update,' 'executive summary,' 'incident communication,
- 1小时安装量
- 1
- GitHub Stars
- 420
- 最近更新
- 5月27日