Loading...
Loading...
Found 4,083 Skills
Agent skill for java-tron — TRON Protocol Java implementation (FullNode, build, run, APIs, modular architecture, custom actuators).
This skill should be used when the user asks to "run PASTA analysis", "PASTA threat model", "risk-centric threat analysis", or invokes /appsec:pasta. Dispatches 7 stages SEQUENTIALLY -- each stage's output feeds the next. This is the ONLY framework that runs sequentially.
Anti-debugging detection and bypass playbook. Use when reversing protected binaries that detect debuggers via ptrace, PEB flags, timing checks, or signal/exception handlers on Linux and Windows.
NtWarden is a Windows Analysis and Research Toolkit providing GUI-based inspection of processes, kernel internals, services, network, ETW, and more via ImGui + DirectX 11 with optional kernel driver support.
Use when user asks about 1 Staat, State - Constitutional Law, Bundesverfassung, BV, constitutional, Bürgerrecht, citizenship, Staatsrecht, Behörden, authorities, Parlament, Bundesrat, Bundesgericht, SR 1xx. Covers SR category 1 of the Systematische Rechtssammlung.
Printing Press CLI for Nvd. The NVD is the U.S. government repository of standards-based vulnerability management data. Search CVEs by keyword,...
[QianWen] Configure authentication (API keys, endpoints). TRIGGER when: setting up QIANWEN_API_KEY, troubleshooting 401/auth errors, when another skill reports missing credentials, or user explicitly invokes this skill by name (e.g. use qianwen-ops-auth). DO NOT TRIGGER when: non-auth Qwen tasks, general API usage questions.
Draw a testable attack surface from one authorized target URL or one application. Use when the user says 攻击面, 供给面, 画攻击面, map the surface, application recon, find the business host, JS inventory, or when the only visible page is login. Derive hosts, APIs, keys, and the object graph from what the app already exposes. Do not open with directory brute or payload spray. Use when the user runs /attack-surface-mapping.
Use when inspecting or changing anything in a Cloudflare account as an agent - DNS records, WAF custom rules, bot settings, redirect, transform, cache or page rules, zone settings, tunnels, Workers, Pages, R2 or analytics. Reads go through a local read-only API token that the agent never sees. Changes are proposed for the human to make in the dashboard, or applied through an approval step when the user has deliberately stored a write token.
Use when a repo stores tool config, API keys, registry URLs, environment variables, or component registry settings in SOPS-encrypted files such as components.sops.json or secrets/*.sops.json.
Usar para construir un modelo de amenazas chico y acotado sobre el trabajo actual o sobre código nuevo — una feature, un servicio, una API o los cambios de la rama actual. Descompone el sistema en activos, puntos de entrada y fronteras de confianza, enumera amenazas con STRIDE y registra mitigaciones y riesgo residual en un informe trazable con un diagrama de flujo de datos. Se invoca por separado para modelar un componente, o desde otro flujo (fmway-dev después del PRD o el plan, fmway-bugs para una corrección con impacto de seguridad) para exponer amenazas antes de escribir o entregar el código. Especialmente importante para superficies externas nuevas, flujos de autenticación, pagos o datos personales, y cambios en las fronteras de confianza.
Erklärt einer Person ohne Vorwissen den SSH-Schlüssel mit dem Bild von Hausschlüssel und Schloss, erzeugt das Schlüsselpaar lokal auf ihrem Computer, hinterlegt nur den öffentlichen Teil bei Albatros und testet den ersten Besuch auf dem Server. Nutze den Skill bei «SSH-Schlüssel», «ssh-keygen», «ich komme nicht auf meinen Server», «Permission denied (publickey)», «was ist ein public key», «neuer Computer», und als Schritt 4 von /albatros:start.