sql-injection-testing
sql-injection-testing
Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms.
THE SKILLS DIRECTORY
Explore all skills.
One skill. A whole new possibility. Find your next workflow.
xss-html-injection
xss-html-injection
Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.
onboard-context-matic
onboard-context-matic
Interactive onboarding tour for the context-matic MCP server. Walks the user through what the server does, shows all available APIs, lets them pick one to explore, explains it in their project language, demonstrates model_search and endpoint_search live, and ends with a menu of things the user can ask the agent to do. USE FOR: first-time setup; "what can th…
editor-fluency
editor-fluency
Demonstrate fluency in code editors and IDEs — keybindings, refactoring tools, debugging workflows, and productivity extensions for VS Code, Vim, or JetBrains.
transfer-bridge
transfer-bridge
After the learner demonstrates understanding of a concept, present near-transfer and far-transfer challenges. Use to test whether learning is portable or task-specific — this is what separates understanding from familiarity.
consent-record-keeping
consent-record-keeping
Guide for building a consent record-keeping system to demonstrate valid consent per GDPR Article 7(1). Covers required fields including timestamp, version, purpose, mechanism, and identity. Implements audit-ready consent receipts per the Kantara Initiative Consent Receipt Specification and supervisory authority expectations.
applying-privacy-design-patterns
applying-privacy-design-patterns
Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate. Covers pattern selection methodology per processing activity, mapping to GDPR principles, and practical implementation guidance for privacy-by-design system architecture.
alibabacloud-bailian-managed-agent
alibabacloud-bailian-managed-agent
Explain, evaluate, demonstrate, provision, and integrate Alibaba Cloud Bailian Managed Agent (CMA / ManagedAgents). Use for Bailian Managed Agent product selection, sales pitches, customer solutions, hands-on PoCs, scheduled report agents, managed environments, and Python/Java backend integration. Prefer Bailian CLI (bl) for quick trials and resource provis…
pomodoro
pomodoro
Simple Pomodoro timer for focused work sessions with session tracking and productivity analytics. Use when users request focus timers, ask about productivity patterns, or want to track work sessions over time. Demonstrates the System Skill Pattern (CLI + SKILL.md + Database).
trust-builder
trust-builder
Analyzes web apps for free-value trust-building opportunities — features, tools, and offerings that demonstrate genuine utility before asking for commitment. Use this when the user says "trust builder", "trust audit", "find free offerings", "free value analysis", "trust building opportunities", or "how can I build trust with users". Explores the codebase an…
curating-game-concept-portfolio
curating-game-concept-portfolio
Curates a supplied set of game ideas into a small mechanically diverse portfolio by normalizing prose into mechanism signatures, clustering structural duplicates, excluding demonstrated hard failures, comparing available evidence without treating missing data as zero, and selecting for coverage rather than one subjective score. Use for pitch triage, game-ja…
stress-testing-game-concepts
stress-testing-game-concepts
Audits one or more game concepts, rule specs, or early prototypes adversarially for unreachable goals, dominant simple policies, agency collapse, irrelevant mechanics, reward exploits, and unsupported design claims while separating demonstrated defects from uncertainty. Use to challenge an existing game idea before implementation, review a ruleset, diagnose…
sql-injection-testing
sql-injection-testing
ALWAYS use this when the request matches SQL Injection Testing: Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms.
xss-html-injection
xss-html-injection
ALWAYS use this when the request matches XSS Html Injection: Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.
sprint-security-review
sprint-security-review
Prepares sprint review and retrospective materials that demonstrate security alongside features: green build reports aggregating SAST/DAST/dependency scan results, completed security story summaries, and security metrics trends. Triggers on: "prepare sprint review", "green build report", "security metrics for this sprint", "demo our security work", "sprint …
agentprivacy-understanding-as-key
agentprivacy-understanding-as-key
Understanding-as-authentication for 0xagentprivacy RPP. Activates when discussing proverb-based access control, demonstrated comprehension as credential, the Oracle verification pipeline, viewing key / signing key separation in knowledge verification, or how understanding replaces passwords.
api-fetch-wrapper
api-fetch-wrapper
Wrap a public HTTP API (Open-Meteo weather as the demo) with credential handling, error normalisation, and a single retry on transient network failures. Demonstrates the production-shaped baseline for any "skill that calls an external service" — env-based secrets, structured error output, no leaked API keys in logs, and a deliberate retry policy. The Open-M…
applying-privacy-design-patterns
applying-privacy-design-patterns
Systematic application of the eight privacy design patterns per Hoepman: minimize, hide, separate, abstract, inform, control, enforce, and demonstrate. Covers pattern selection methodology per processing activity, mapping to GDPR principles, and practical implementation guidance for privacy-by-design system architecture.
18 / 121
Direct from traceable public skill sources
An independently imported catalog with original authors, licenses and source links. Classification is not a security audit.
Sources and import coverage