Explore the full catalog
Explore skills, repositories and creators
Search the catalog or browse with filters. Checks are automated signals, not a safety guarantee.
Page 92 · 50 results shown
Skill
browser-automation
zhaoxuya520/reverse-skill · skills/browser-automation
统一自动化入口。覆盖浏览器自动化（Playwright）和 Windows 桌面应用自动化（OpenReverse）。 浏览器场景：打开网页、点击、填表、爬取、截图、自动化登录、渗透页面交互。 桌面场景：操作 IDA/x64dbg 等 GUI 工具、Windows UI Automation、视觉驱动交互、桌面应用网络抓包。 触发关键词：浏览器自动化、桌面自动化、打开网页、填表、爬取、截图、自动化登录、Playwright、agent-browser、headless、OpenReverse、UIA、CUA、桌面操作、Windows 自动化。
Repository stars: 44,280 · Incomplete scan
Skill
competition-supply-chain
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-supply-chain
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for CI/CD, registry, dependency drift, artifact provenance, image build, release pipeline, and runtime consumer challenges. Use when the user asks to trace dependency drift, registry pulls, malicious packages, build or release tampering, CI execution, artifact signing, or which shipped artifact the runtime actually consumes. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
competition-runtime-routing
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-runtime-routing
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for reverse proxies, Host headers, forwarded headers, vhost routing, websocket upgrades, path-prefix rewriting, base-URL derivation, and multi-node route resolution. Use when the user asks which host or container serves a route, why a public-looking domain still belongs to the sandbox, how headers or proxies change behavior, or how a route resolves across proxy, container, and worker boundaries. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
apk-reverse
zhaoxuya520/reverse-skill · skills/apk-reverse
在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook，以及按需切换到 so/native 分析。优先使用本机已安装的 jadx、apktool、frida、adb、ida-reverse、radare2。
Repository stars: 44,280 · Incomplete scan
Skill
go-rust-reverse
zhaoxuya520/reverse-skill · skills/go-rust-reverse
Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.
Repository stars: 44,280 · Incomplete scan
Skill
digital-forensics
zhaoxuya520/reverse-skill · skills/digital-forensics
Use for authorized digital forensics including memory dumps, disk timelines, PCAP investigation, artifact triage, and IR evidence preservation.
Repository stars: 44,280 · Incomplete scan
Skill
competition-file-parser-chain
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-file-parser-chain
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for file uploads, imports, previews, archive extraction, format conversion, parser invocation, and deserialization chains. Use when the user asks to inspect an upload or import path, trace archive extraction, preview or converter behavior, explain how a file reaches a parser or deserializer, or connect one uploaded artifact to the decisive backend effect. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
competition-bundle-sourcemap-recovery
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-bundle-sourcemap-recovery
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for source maps, build manifests, chunk registries, emitted bundles, obfuscated loader flow, and frontend runtime recovery. Use when the user asks to reconstruct served JavaScript structure, inspect source maps or chunk maps, trace bundle loading, recover hidden routes or APIs from emitted assets, or explain runtime behavior from built frontend artifacts. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
identity-federation
zhaoxuya520/reverse-skill · skills/identity-federation
Use for authorized assessment of federated identity systems including SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token confusion issues.
Repository stars: 44,280 · Incomplete scan
Skill
ot-ics
zhaoxuya520/reverse-skill · skills/ot-ics
Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
Repository stars: 44,280 · Incomplete scan
Skill
firmware-pentest
zhaoxuya520/reverse-skill · skills/firmware-pentest
固件 / IoT 渗透链。从拿到一坨 .bin / .img 开始，闭环走完逆向 → 提取 → 模拟 → 利用。 方法论遵循 OWASP FSTM 九阶段；工具链以 binwalk v3、unblob、EMBA、Firmadyne、AFL++ 为主。 适用场景：路由器/摄像头/智能家居固件审计、固件升级包逆向、IoT CVE 复现、嵌入式 0day 挖掘。 触发关键词：固件、firmware、IoT、binwalk、unblob、UART、JTAG、squashfs、UBI、JFFS2、Firmadyne、QEMU 全系统仿真、EMBA、固件渗透、路由器固件、嵌入式漏洞利用、bootloader、NVRAM、FAT、firmware analysis toolkit。
Repository stars: 44,280 · Incomplete scan
Skill
competition-queue-worker-drift
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-queue-worker-drift
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for queues, async workers, cron jobs, delayed tasks, retry behavior, worker-only config drift, and payload-to-side-effect chains. Use when the user asks to trace a queue payload, inspect async job execution, explain worker-only behavior, follow retries or dead-letter handling, or connect an enqueued item to a later file, cache, email, or privilege-bearing side effect. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
competition-crypto-mobile
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-crypto-mobile
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for crypto, encoding, steganography, APK, IPA, and mobile trust-boundary challenges. Use when the user asks to decode a blob, recover a transform chain or key, inspect hidden media payloads, hook an APK or IPA signer, inspect app storage, or replay mobile request-signing logic. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
competition-prompt-injection
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-prompt-injection
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for prompt-injection, retrieval poisoning, memory contamination, planner drift, MCP or tool-boundary abuse, and agent exfiltration challenges. Use when the user asks to analyze prompt injection, retrieval poisoning, memory contamination, planner drift, tool-argument corruption, or secret exposure caused by an agent chain. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
competition-linux-credential-pivot
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-linux-credential-pivot
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Linux credential artifacts, service tokens, SSH material, cloud and container secrets, socket-level trust, and host-to-host pivot chains. Use when the user asks to trace Linux auth artifacts, accepted token or key replay, socket or service-account trust edges, sudo or capability abuse, or explain lateral movement across Linux challenge nodes. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
binary-diff
zhaoxuya520/reverse-skill · skills/binary-diff
跨版本符号迁移与二进制差分。当你有旧版本的符号/逆向结果，需要快速迁移到新版本时使用。 适用场景：内核缺 PDB 用旧版符号推导、程序更新后批量迁移函数名、应用更新后快速定位新偏移。 核心方法：用 LLM 做结构化差异比对，程序化输入输出，成本极低（200 函数 ~1 元）。 触发关键词：符号迁移、bindiff、跨版本、PDB 缺失、函数偏移迁移、symbol migration、binary diff、版本对比。
Repository stars: 44,280 · Incomplete scan
Skill
pentest-tools
zhaoxuya520/reverse-skill · skills/pentest-tools
主动渗透测试工具链。覆盖信息收集、端口扫描、漏洞扫描、Web 渗透、SQL 注入、目录爆破、密码破解等场景。 通过 MCP server（pentestMCP / mcp-security-hub）将 20+ 安全工具暴露给 AI agent。 触发关键词：渗透测试、端口扫描、Nmap、漏洞扫描、Nuclei、SQL 注入、SQLMap、目录爆破、FFUF、密码破解、Hashcat、信息收集、子域名、Web 渗透、ZAP、Burp。
Repository stars: 44,280 · Incomplete scan
Skill
competition-kerberos-delegation
zhaoxuya520/reverse-skill · CTF-Sandbox-Orchestrator/competition-kerberos-delegation
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kerberos delegation, SPN trust edges, S4U abuse, RBCD, constrained or unconstrained delegation, and service-ticket acceptance. Use when the user asks about constrained delegation, unconstrained delegation, RBCD, S4U, SPNs, ticket acceptance, or how a Kerberos trust edge turns into effective privilege under sandbox assumptions. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.
Repository stars: 44,280 · Incomplete scan
Skill
macos-reverse
zhaoxuya520/reverse-skill · skills/macos-reverse
Use for authorized macOS and Mach-O reverse engineering including codesign, Objective-C/Swift recovery, endpoint security surfaces, and Apple platform malware analysis.
Repository stars: 44,280 · Incomplete scan
Skill
market-sizing-analysis
wshobson/agents · plugins/startup-business-analyst/skills/market-sizing-analysis
Calculate TAM/SAM/SOM for market opportunities using top-down, bottom-up, and value theory methodologies. Use this skill when sizing markets, estimating addressable revenue, validating market opportunity for a new venture, or building investor-ready market analysis for a startup pitch or business plan.
Repository stars: 42,290 · Incomplete scan
Skill
hads
wshobson/agents · plugins/documentation-standards/skills/hads
Use when writing technical documentation that needs to be readable by both humans and AI models, converting existing docs to HADS format, validating a HADS document, or optimizing documentation for token-efficient AI consumption.
Repository stars: 42,290 · Incomplete scan
Skill
pptx-reference-deck-analysis
wshobson/agents · plugins/pptx-deck-creation/skills/pptx-reference-deck-analysis
Use when analyzing a reference PPTX for read-only structure, theme, typography, layout rhythm, diagnostics, derived template catalogs, or safe OOXML package inspection.
Repository stars: 42,290 · Incomplete scan
Skill
python-project-structure
wshobson/agents · plugins/python-development/skills/python-project-structure
Python project organization, module architecture, and public API design. Use when setting up new projects, organizing modules, defining public interfaces with __all__, or planning directory layouts.
Repository stars: 42,290 · Incomplete scan
Skill
lora-qlora-recipes
wshobson/agents · plugins/llm-finetuning/skills/lora-qlora-recipes
Configure LoRA and QLoRA supervised fine-tuning with current best-practice hyperparameters. Use when writing or reviewing a LoRA/QLoRA training configuration, choosing rank/alpha/target modules, or deciding between LoRA, QLoRA, and full fine-tuning.
Repository stars: 42,290 · Incomplete scan
Skill
pci-compliance
wshobson/agents · plugins/payment-processing/skills/pci-compliance
Implement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI compliance, or implementing payment card security measures.
Repository stars: 42,290 · Incomplete scan
Skill
database-migration
wshobson/agents · plugins/framework-migration/skills/database-migration
Execute database migrations across ORMs and platforms with zero-downtime strategies, data transformation, and rollback procedures. Use when migrating databases, changing schemas, performing data transformations, or implementing zero-downtime deployment strategies.
Repository stars: 42,290 · Incomplete scan
Skill
python-design-patterns
wshobson/agents · plugins/python-development/skills/python-design-patterns
Python design patterns including KISS, Separation of Concerns, Single Responsibility, and composition over inheritance. Use this skill when designing a new service or component from scratch and choosing how to layer responsibilities, when refactoring a God class or monolithic function that has grown too large, when deciding whether to add a new abstraction or live with duplication, when evaluating a pull request for structural issues like tight coupling or leaking internal types, when choosing between inheritance and composition for a new class hierarchy, or when a codebase is becoming hard to test because of entangled I/O and business logic.
Repository stars: 42,290 · Incomplete scan
Skill
python-observability
wshobson/agents · plugins/python-development/skills/python-observability
Python observability patterns including structured logging, metrics, and distributed tracing. Use when adding logging, implementing metrics collection, setting up tracing, or debugging production systems.
Repository stars: 42,290 · Incomplete scan
Skill
fastapi-templates
wshobson/agents · plugins/api-scaffolding/skills/fastapi-templates
Create production-ready FastAPI projects with async patterns, dependency injection, and comprehensive error handling. Use when building new FastAPI applications or setting up backend API projects.
Repository stars: 42,290 · Incomplete scan
Skill
godot-gdscript-patterns
wshobson/agents · plugins/game-development/skills/godot-gdscript-patterns
Master Godot 4 GDScript patterns including signals, scenes, state machines, and optimization. Use when building Godot games, implementing game systems, or learning GDScript best practices.
Repository stars: 42,290 · Incomplete scan
Skill
before-you-build
wshobson/agents · plugins/before-you-build/skills/before-you-build
Pre-build product and feature risk review for founders, product managers, and AI-assisted builders. Use this skill when the user is about to build a landing page, MVP, SaaS product, internal tool, agent workflow, or major feature and needs to check demand, positioning, monetization, retention, trust, distribution, and adoption risk before implementation starts.
Repository stars: 42,290 · Incomplete scan
Skill
nx-workspace-patterns
wshobson/agents · plugins/developer-essentials/skills/nx-workspace-patterns
Configure and optimize Nx monorepo workspaces. Use when setting up Nx, configuring project boundaries, optimizing build caching, or implementing affected commands.
Repository stars: 42,290 · Incomplete scan
Skill
github-actions-templates
wshobson/agents · plugins/cicd-automation/skills/github-actions-templates
Create production-ready GitHub Actions workflows for automated testing, building, and deploying applications. Use when setting up CI/CD with GitHub Actions, automating development workflows, or creating reusable workflow templates.
Repository stars: 42,290 · Incomplete scan
Skill
paypal-integration
wshobson/agents · plugins/payment-processing/skills/paypal-integration
Integrate PayPal payment processing with support for express checkout, subscriptions, and refund management. Use when implementing PayPal payments, processing online transactions, or building e-commerce checkout flows.
Repository stars: 42,290 · Incomplete scan
Skill
shellcheck-configuration
wshobson/agents · plugins/shell-scripting/skills/shellcheck-configuration
Master ShellCheck static analysis configuration and usage for shell script quality. Use when setting up linting infrastructure, fixing code issues, or ensuring script portability.
Repository stars: 42,290 · Incomplete scan
Skill
angular-migration
wshobson/agents · plugins/framework-migration/skills/angular-migration
Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning framework migrations, or modernizing legacy Angular code.
Repository stars: 42,290 · Incomplete scan
Skill
gitops-workflow
wshobson/agents · plugins/kubernetes-operations/skills/gitops-workflow
Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continuous reconciliation. Use when implementing GitOps practices, automating Kubernetes deployments, or setting up declarative infrastructure management.
Repository stars: 42,290 · Incomplete scan
Skill
istio-traffic-management
wshobson/agents · plugins/cloud-infrastructure/skills/istio-traffic-management
Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments. Use when implementing service mesh traffic policies, progressive delivery, or resilience patterns.
Repository stars: 42,290 · Incomplete scan
Skill
web-component-design
wshobson/agents · plugins/ui-design/skills/web-component-design
Master React, Vue, and Svelte component patterns including CSS-in-JS, composition strategies, and reusable component architecture. Use when building UI component libraries, designing component APIs, or implementing frontend design systems.
Repository stars: 42,290 · Incomplete scan
Skill
nft-standards
wshobson/agents · plugins/blockchain-web3/skills/nft-standards
Implement NFT standards (ERC-721, ERC-1155) with proper metadata handling, minting strategies, and marketplace integration. Use when creating NFT contracts, building NFT marketplaces, or implementing digital asset systems.
Repository stars: 42,290 · Incomplete scan
Skill
spark-training-gotchas
wshobson/agents · plugins/dgx-spark-ops/skills/spark-training-gotchas
Preflight and diagnose the ten known failure modes for ML training on NVIDIA DGX Spark. Use when a training run on DGX Spark fails to start, OOMs below the 128GB limit, slows down mid-run, or before any multi-hour training job on GB10.
Repository stars: 42,290 · Incomplete scan
Skill
checkpoint-promotion
wshobson/agents · plugins/llm-finetuning/skills/checkpoint-promotion
Gate fine-tuned checkpoints with drift budgets, paired comparison, and forgetting checks before promotion. Use after a training run produces a checkpoint, when deciding whether a tuned model ships, or when a promoted model needs re-gating against updated goldens.
Repository stars: 42,290 · Incomplete scan
Skill
changelog-automation
wshobson/agents · plugins/documentation-generation/skills/changelog-automation
Automate changelog generation from commits, PRs, and releases following Keep a Changelog format. Use when setting up release workflows, generating release notes, or standardizing commit conventions.
Repository stars: 42,290 · Incomplete scan
Skill
langchain-architecture
wshobson/agents · plugins/llm-application-dev/skills/langchain-architecture
Design LLM applications using LangChain 1.x and LangGraph for agents, memory, and tool integration. Use when building LangChain applications, implementing AI agents, or creating complex LLM workflows.
Repository stars: 42,290 · Incomplete scan
Skill
typescript-advanced-types
wshobson/agents · plugins/javascript-typescript/skills/typescript-advanced-types
Master TypeScript's advanced type system including generics, conditional types, mapped types, template literals, and utility types for building type-safe applications. Use when implementing complex type logic, creating reusable type utilities, or ensuring compile-time type safety in TypeScript projects.
Repository stars: 42,290 · Incomplete scan
Skill
pptx-deck-context
wshobson/agents · plugins/pptx-deck-creation/skills/pptx-deck-context
Use when preparing the narrative, sources, and design context for a new editable PPTX deck.
Repository stars: 42,290 · Incomplete scan
Skill
pptx-visual-assets
wshobson/agents · plugins/pptx-deck-creation/skills/pptx-visual-assets
Use when selecting and placing approved supporting icons, images, SVGs, diagrams, or infographics in an editable PPTX deck.
Repository stars: 42,290 · Incomplete scan
Skill
k8s-security-policies
wshobson/agents · plugins/kubernetes-operations/skills/k8s-security-policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Repository stars: 42,290 · Incomplete scan
Skill
airflow-dag-patterns
wshobson/agents · plugins/data-engineering/skills/airflow-dag-patterns
Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.
Repository stars: 42,290 · Incomplete scan
Skill
python-code-style
wshobson/agents · plugins/python-development/skills/python-code-style
Python code style, linting, formatting, naming conventions, and documentation standards. Use when writing new code, reviewing style, configuring linters, writing docstrings, or establishing project standards.
Repository stars: 42,290 · Incomplete scan
Automated signals, not a guarantee. How the checks work.
