AGENT SKILLS · 任务装备

值得安装的 Agent Skills

汇总公开仓库中已验证的 Skills。安装前先看清它能做什么、包内包含什么、热度如何，以及来源是否可靠。

目录范围: 已验证
Skills: 23,248
仓库: 3589
最近同步: 2026年11月4日

23,248 Skills

ssh

SSH/服务器操作助手。用于远程服务器、user@host、SSH 配置、上传下载、部署、跳板机、隧道、端口转发、服务器命令执行等任务；以 ~/.ssh/config 的 Host 别名为唯一服务器清单，优先密钥认证，通过本 skill 的 Python 脚本封装 OpenSSH 操作。

1小时安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

workflow

- embeddedskills 的薄编排层，用于在当前 workspace 中发现工程、选择 build/flash/debug/observe 后端、串联 .embeddedskills/state.json，并聚合底层 skill 的结果。当用户明确输入以下命令之一："一键构建烧录"、"自动诊断"、"串起 build - flash - debug - observe" 或显式调用 /workflow 时触发。

1小时安装量: 1
GitHub Stars: 696
最近更新: 9月3日

查看详情 →

create-sound

- Generate a SoundDefinition for @web-kits/audio from any input - a natural-language prompt, an audio file the user shares, or both. Use when the user says "create a sound", "/create-sound", "design a sound for X", shares a WAV/MP3/sprite, or asks to reverse-engineer a sample. Optionally renders a WAV preview and round-trip-validates the result.

1小时安装量: 1
GitHub Stars: 574
最近更新: 9月5日

查看详情 →

authenticated-session-acquisition

Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data APIs) are blocked because login is gated by SMS-OTP or TOTP MFA. Distinct from the authentication skill (which ATTACKS auth); this one legitimately authenticates and hands the session to the rest of the

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

coordination

Pentest coordination — orchestrates executor and validator agents with context-controlled spawning. Entry point for all engagements.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

cve-risk-score

Retrieve CVE risk scores from NVD. Auto-invoked whenever a CVE ID is mentioned to display CVSS score, severity, CWE, and description.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

dfir

Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation. Use when investigating security incidents, analyzing Sherlocks, or performing threat hunting on provided evidence files.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

hackthebox

HackTheBox platform operations and automations to solve challenges, machines and capture the flags hacking competitions

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

infrastructure

Network infrastructure testing - port scanning, DNS attacks, MITM, VLAN hopping, IPv6, SMB/NetBIOS, sniffing, and DoS assessment.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

mobile-security

Mobile application security testing (Android + iOS) mapped to OWASP MASVS/MASTG — static reversing (Flutter AOT, Unity IL2CPP, React Native/Hermes, native ARM64, Mach-O/Swift), SAST (manifest/IPC, storage, crypto, signing), dynamic analysis (Frida/objection, TLS-pinning + root/jailbreak bypass, traffic interception), and privacy testing.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

patt-fetcher

Fetches and extracts payloads from PayloadsAllTheThings on demand. Bake into executor prompts for live payload enrichment.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

pci-secure-software

Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation. Deterministically enumerates every applicable Test Requirement from a pinned catalog, gathers source/doc evidence, and emits an evidence-bound per-requirement verdict (MET / NOTMET / PARTIALLYMET / NOTAPPLICABLE / REQUIRESMANUALREVIEW) with file+line citations, then a Transilience gap report. Use when asked to assess, gap-assess, or check an application's readiness

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

risk-prioritiser

Risk-based prioritisation of confirmed attack paths. Combines exploit feasibility, technical CVSS severity, and asset business impact into a single ranked list driving remediation roadmaps.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

script-generator

Generates optimized, syntax-validated scripts on demand. Never executes — only generates, optimizes, and validates.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

server-side

Server-side vulnerability testing - SSRF, HTTP Request Smuggling, Path Traversal, File Upload, Insecure Deserialization, and Host Header injection.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

skill-update

Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits. Use when creating, updating, or improving skills.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

source-code-scanning

Security-focused source code review and SAST. Scans for vulnerabilities (OWASP Top 10, CWE Top 25), CVEs in third-party dependencies/packages, hardcoded secrets, malicious code, and insecure patterns. Use when given source code, a repo path, or asked to "audit", "scan", "review" code security, or "check dependencies for CVEs".

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

techstack-identification

OSINT-based technology stack identification. Routes to 6 domain sub-skills (frontend, backend, infra, security, osint, correlation) to discover a target's stack from publicly available signals.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

ti-ingest

Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

transilience-report-style

Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab generator. Use whenever an engagement needs its final report/deliverable PDF in Transilience house style.

1小时安装量: 1
GitHub Stars: 534
最近更新: 7月29日

查看详情 →

asana-api

Read and manage Asana tasks, projects, sections, comments, and workspaces. Use this whenever the user wants to list or search tasks, create or update a task, complete a task, comment on a task, move tasks between projects or sections, look up a project or workspace, or ask "what's on my Asana list" — even if they don't say "API". Also use it for any app.asana.com URL or an Asana task/project gid. Always start from this skill when interacting with this service — its bundled scripts and recipes ar

1小时安装量: 1
GitHub Stars: 54
最近更新: 9月17日

Apache-2.03 文件

查看详情 →

config-guide

Reference guide for configuring @Claude agents — agents, agent scopes, identity profiles, presets, connections, rules, GitHub repositories, and custom instructions. Explains the inheritance model and configuration best practices.

1小时安装量: 1
GitHub Stars: 54
最近更新: 9月17日

Apache-2.06 文件

查看详情 →

confluence-api

Read, search, and manage Confluence Cloud pages, spaces, blog posts, comments, attachments, and labels. Use this whenever the user wants to find a page, read a doc, search the wiki with CQL, create or update a page, add a comment, list pages in a space, pull an attachment, or ask "what does the wiki say about X" — even if they don't say "API". Also use it for any .atlassian.net/wiki URL, or a CQL string when the context is wiki content rather than tickets. Always start from this skill when inter

1小时安装量: 1
GitHub Stars: 54
最近更新: 9月17日

Apache-2.05 文件

查看详情 →