Loading...
Loading...
Found 3,128 Skills
AD Certificate Services attack playbook. Use when targeting misconfigured AD CS for privilege escalation via ESC1-ESC13 template abuse, NTLM relay to enrollment, CA officer abuse, and certificate-based persistence.
AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-based detection on Windows endpoints.
Image media downloader App & Browser Extension for downloading any type of image files from any website
Apply when defining, validating, or consuming VTEX IO app settings. Covers settingsSchema, app-level configuration boundaries, and how backend or frontend code should depend on settings safely. Use for merchant-configurable behavior, settings forms, or reviewing whether settings belong in app configuration rather than hardcoded logic or custom data entities.
Skill for working with the BlueHammer vulnerability proof-of-concept repository, covering build, usage, and code patterns.
Investigates completed flash-loan and atomic DeFi incidents across EVM and Solana from public txs—borrow-execute-repay fingerprints, oracle/pool/governance vectors, full trace reconstruction, impact quantification, and mitigations. Use when the user asks for flash loan exploit analysis, atomic attack post-mortems, large-borrow suspicious tx triage, or evidence-structured case studies from explorer data and read-only simulation—not for designing new attacks on live protocols.
System exploitation testing - Active Directory attacks, privilege escalation (Linux/Windows), and exploit development.
Meme Trench Scanner v1.0 — Agentic Wallet TEE signing automated trading bot. onchainos CLI driven (no API Key needed), full coverage of 11 Solana Launchpads, 5m/15m B/S precision signal detection, price position filter (TOP_ZONE 85%), TP2 100% exit (no moon bag), TraderSoul AI observation system, FAST_DUMP 10-second crash detection, 3-check position protection. Triggers when the user mentions meme trench scanner, meme scanner, chain scanner, memepump scan, Tranches scan, pump.fun chain scan, safety filter chain scan, dev rug detection, bundler filter, on-chain scanning strategy, 扫链, Meme 扫链, or wants to automatically scan and trade pump.fun migrated tokens based on memepump.
Add policy enforcement, zero-trust identity, and execution sandboxing to AI agents with Microsoft's Agent Governance Toolkit
Interacts with Google Cloud services using the gcloud CLI safely and efficiently. Covers command validation, data reduction, safety guardrails with a denylist, and workflows for discovery and investigation. You MUST read this skill before invoking any gcloud command. Use when managing cloud resources, querying configurations, or troubleshooting issues via gcloud. Don't use when writing or debugging Google Cloud client library code or raw REST/gRPC API interactions.
Use when protecting PHP API endpoints with JWT Bearer token validation or scope checks. Integrates auth0/auth0-php in API mode for stateless APIs receiving access tokens.
3D HUD rendering with Three.js and TresJS for JARVIS AI Assistant