Active Directory Attacks

21.8k
davila7davila7

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing.

192 days ago

hypogenic

21.8k
davila7davila7

Automated hypothesis generation and testing using large language models. Use this skill when generating scientific hypotheses from datasets, combining literature insights with empirical data, testing hypotheses against observational data, or conducting systematic hypothesis exploration for research discovery in domains like deception detection, AI content detection, mental health analysis, or other empirical research tasks.

192 days ago

V3 Core Implementation

17.8k
ruvnetruvnet

Core module implementation for claude-flow v3. Implements DDD domains, clean architecture patterns, dependency injection, and modular TypeScript codebase with comprehensive testing.

192 days ago

Active Directory Attacks

3.5k
zebbernzebbern

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing.

192 days ago

moai-workflow-ddd

776
modu-aimodu-ai

Domain-Driven Development workflow specialist using ANALYZE-PRESERVE-IMPROVE cycle for behavior-preserving code transformation. Use when refactoring legacy code, improving code structure without functional changes, reducing technical debt, or performing API migration with behavior preservation. Do NOT use for writing new tests (use moai-workflow-testing instead) or creating new features from scratch (use expert-backend or expert-frontend instead).

192 days ago

front-end-testing

547
citypaulcitypaul

DOM Testing Library patterns for behavior-driven UI testing. Framework-agnostic patterns for testing user interfaces. Use when testing any front-end application.

192 days ago

prompt-factory

544
alirezarezvanialirezarezvani

World-class prompt powerhouse that generates production-ready mega-prompts for any role, industry, and task through intelligent 7-question flow, 69 comprehensive presets across 15 professional domains (technical, business, creative, legal, finance, HR, design, customer, executive, manufacturing, R&D, regulatory, specialized-technical, research, creative-media), multiple output formats (XML/Claude/ChatGPT/Gemini), quality validation gates, and contextual best practices from OpenAI/Anthropic/Google. Supports both core and advanced modes with testing scenarios and prompt variations.

192 days ago

xss-testing

253
Anshumanbh Securevibes Xss TestingAnshumanbh Securevibes Xss Testing

Validate Cross-Site Scripting (XSS) vulnerabilities including Reflected, Stored, and DOM-based XSS. Test by injecting script payloads into user-controlled inputs and observing if they execute in browser context. Use when testing CWE-79 (XSS), CWE-80 (Basic XSS), CWE-81 (Error Message XSS), CWE-83 (Attribute XSS), CWE-84 (URI Scheme XSS), CWE-85 (Doubled Character XSS), CWE-86 (Invalid Character XSS), CWE-87 (Alternate XSS Syntax), or related XSS findings.

192 days ago

V3 DDD Architecture

215
proffesor-for-testingproffesor-for-testing

Domain-Driven Design architecture for claude-flow v3. Implements modular, bounded context architecture with clean separation of concerns and microkernel pattern.

192 days ago

V3 QE DDD Architecture

215
proffesor-for-testingproffesor-for-testing

Domain-Driven Design architecture for Agentic QE v3. Implements modular, bounded context architecture with clean separation of concerns for quality engineering domains.

192 days ago

V3 Swarm Coordination

215
proffesor-for-testingproffesor-for-testing

15-agent hierarchical mesh coordination for v3 implementation. Orchestrates parallel execution across security, core, and integration domains following 10 ADRs with 14-week timeline.

192 days ago

V3 Core Implementation

215
proffesor-for-testingproffesor-for-testing

Core module implementation for claude-flow v3. Implements DDD domains, clean architecture patterns, dependency injection, and modular TypeScript codebase with comprehensive testing.

192 days ago

architecture-patterns

188
aiskillstoreaiskillstore

AI-friendly architecture patterns for TypeScript projects including Domain-Driven Design, Clean Architecture, Hexagonal Architecture, and Page Object Model testing patterns

192 days ago

unit-test-mapper-converter

128
giuseppe-trisciuogliogiuseppe-trisciuoglio

Provides patterns for unit testing mappers and converters (MapStruct, custom mappers). Validates object transformation logic in isolation. Use when ensuring correct data transformation between DTOs and domain objects.

192 days ago

ring:production-readiness-audit

122
LerianStudioLerianStudio

Comprehensive Ring-standards-aligned 44-dimension production readiness audit. Detects project stack, loads Ring standards via WebFetch, and runs in batches of 10 explorers appending incrementally to a single report file. Categories - Structure (pagination, errors, routes, bootstrap, runtime, core deps, naming, domain modeling, nil-safety, api-versioning, resource-leaks), Security (auth, IDOR, SQL, validation, secret-scanning, data-encryption, multi-tenant, rate-limiting, cors), Operations (telemetry, health, config, connections, logging, resilience, graceful-degradation), Quality (idempotency, docs, debt, testing, dependencies, performance, concurrency, migrations, linting, caching), Infrastructure (containers, hardening, cicd, async, makefile, license). Produces scored report (0-430, max 440 with multi-tenant) with severity ratings and standards cross-reference.

192 days ago

XSS Testing Patterns

71
PramodDuttaPramodDutta

Cross-site scripting vulnerability testing covering reflected, stored, and DOM-based XSS with sanitization validation and CSP bypass detection.

xsssecurityweb-security+2
192 days ago

Boundary Value Generator

71
PramodDuttaPramodDutta

Generate boundary value test cases for numeric ranges, string lengths, date ranges, collection sizes, and domain-specific constraints using systematic analysis techniques

boundary-valuebvaequivalence-partitioning+4
192 days ago

JavaScript Testing Patterns

71
PramodDuttaPramodDutta

Modern JavaScript testing strategies with Jest, Mocha, and testing best practices covering unit testing, integration testing, mocking, async patterns, and DOM testing.

javascriptjestmocha+4
192 days ago

Cookie & Session Testing

71
PramodDuttaPramodDutta

Testing cookie and session management including secure flags, SameSite policy, session fixation, timeout behavior, and cross-domain cookie handling.

cookiesessionsecure-flag+2
192 days ago

skill-documentarian

43
Erichowens Some Claude Skills Skill DocumentarianErichowens Some Claude Skills Skill Documentarian

Documentation expert for Claude Skills showcase website. Maintains skill-to-website sync, manages tag taxonomy and badges, creates blog-style artifacts, and preserves multi-skill collaborations for posterity. Activate on 'document', 'sync skills', 'create artifact', 'validate skills', 'add tags', 'tag management', 'badge', 'metadata'. NOT for code implementation (use domain skills), design creation (use web-design-expert), testing (use test-automator), or project planning (use orchestrator).

documentationskillssync+2
192 days ago

rails-audit-thoughtbot

37
thoughtbotthoughtbot

Perform comprehensive code audits of Ruby on Rails applications based on thoughtbot best practices. Use this skill when the user requests a code audit, code review, quality assessment, or analysis of a Rails application. The skill analyzes the entire codebase focusing on testing practices (RSpec), security vulnerabilities, code design (skinny controllers, domain models, PORO with ActiveModel), Rails conventions, database optimization, and Ruby best practices. Outputs a detailed markdown audit report grouped by category (Testing, Security, Models, Controllers, Code Design, Views) with severity levels (Critical, High, Medium, Low) within each category.

192 days ago

symmetry-discovery-questionnaire

31
lyndonkllyndonkl

Use when ML engineers need to identify symmetries in their data but don't know where to start. Invoke when the user mentions data symmetry, invariance discovery, which transformations matter, or needs help recognizing patterns their model should respect. Works collaboratively through domain analysis, transformation testing, and identification of physical constraints.

192 days ago

synthesis-and-analogy

31
lyndonkllyndonkl

Use when synthesizing information from multiple sources (literature review, stakeholder feedback, research findings, data from different systems), creating or evaluating analogies for explanation or problem-solving (cross-domain transfer, "X is like Y", structural mapping), combining conflicting viewpoints into unified framework, identifying patterns across disparate sources, finding creative solutions by transferring principles from one domain to another, testing whether analogies hold (surface vs deep similarities), or when user mentions "synthesize", "combine sources", "analogy", "like", "similar to", "transfer from", "integrate findings", "what's it analogous to".

192 days ago

testing

27
cosmixcosmix

Comprehensive test implementation across all domains including unit, integration, e2e, security, infrastructure, data pipelines, and ML models. Covers TDD/BDD workflows, test architecture, flaky test debugging, and coverage analysis.

192 days ago

blazemeter-troubleshooting

24
BlazemeterBlazemeter

Comprehensive troubleshooting guide for BlazeMeter, covering API Monitoring, Performance Testing, general issues, integrations, and security. Use when troubleshooting for (1) API Monitoring issues (Radar Agent auth, SSL certificates, debug tests), (2) Performance Testing issues (high response time, 500 errors, partial load, tests not starting), (3) General issues (delete non-empty project, forbidden domains, Chrome Extension export failures), (4) Integration issues (New Relic reporting), (5) Security issues (Apache Log4j2 vulnerability), (6) Support requests and tickets, or any other troubleshooting tasks.

192 days ago

winning-tactic-to-strategy

19
samarvsamarv

A framework for breaking through market noise by testing multiple high-variance tactics to discover a sustainable winning strategy. Use it when launching a new product category, repositioning against a dominant competitor, or driving a major technological pivot.

192 days ago

banana-skill-finder

14
TreyDongTreyDong

Automatically discover and recommend relevant Claude skills when users encounter tasks that could benefit from specialized capabilities. Use this skill proactively when detecting any of these patterns: (1) User mentions working with specific file formats (PDF, DOCX, Excel, images, etc.), (2) User describes repetitive or specialized tasks (data analysis, code review, deployment, testing, document processing), (3) User asks if there's a tool or capability for something, (4) User struggles with domain-specific work (React development, SQL queries, DevOps, content writing), (5) User mentions needing best practices or patterns for a technology, (6) Any situation where a specialized skill could save time or improve quality. Search using SkillsMP API (if configured), skills.sh leaderboard, or GitHub as fallback. Recommend 1-3 most relevant skills and offer to install via npx skills add.

191 days ago

testing

14
SludgingSludging

Guide for live game extraction testing, writing domain tests, and validating calculations

191 days ago

frontend-testing

14
mintuzmintuz

WHEN testing any front-end UI with DOM Testing Library; behavior-first queries, userEvent flows, async patterns.

191 days ago

Active Directory Attacks

14
zebbernzebbern

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing.

active-directorykerberoswindows+3
192 days ago

chrome-devtools

12
samhvw8samhvw8

Browser automation via Puppeteer CLI scripts (JSON output). Capabilities: screenshots, PDF generation, web scraping, form automation, network monitoring, performance profiling, JavaScript debugging, headless browsing. Actions: screenshot, scrape, automate, test, profile, monitor, debug browser. Keywords: Puppeteer, headless Chrome, screenshot, PDF, web scraping, form fill, click, navigate, network traffic, performance audit, Lighthouse, console logs, DOM manipulation, element selector, wait, scroll, automation script. Use when: taking screenshots, generating PDFs from web, scraping websites, automating form submissions, monitoring network requests, profiling page performance, debugging JavaScript, testing web UIs.

191 days ago

symfony-json-path

10
krzysztofsurdykrzysztofsurdy

Query and extract data from JSON structures using RFC 9535 JSONPath standard. Provides a DomCrawler-like interface for JSON with fluent query building and PHPUnit testing assertions.

192 days ago

symfony-css-selector

10
krzysztofsurdykrzysztofsurdy

Convert CSS selectors to XPath expressions for parsing HTML/XML documents. Use familiar CSS selector syntax with XPath-based tools like DOMXPath and SimpleXMLElement, or integrate with DomCrawler for jQuery-like selector queries. Essential for web scraping, DOM manipulation testing, and document parsing.

192 days ago

symfony-json-path

10
krzysztofsurdykrzysztofsurdy

Query and extract data from JSON structures using RFC 9535 JSONPath standard. Provides a DomCrawler-like interface for JSON with fluent query building and PHPUnit testing assertions.

192 days ago

symfony-dom-crawler

10
krzysztofsurdykrzysztofsurdy

Query, traverse, and extract data from HTML and XML documents programmatically. Use DomCrawler for web scraping, DOM navigation, form automation, testing, and parsing structured data from web pages without DOM manipulation capabilities.

192 days ago

verdex-playwright-complete

10
verdexhqverdexhq

Complete Playwright test authoring workflow with Verdex MCP tools. Three phases - explore apps interactively to map user journeys, build stable role-first selectors via progressive DOM exploration, write idiomatic Playwright tests. Includes workflow discovery, selector patterns, and testing best practices.

192 days ago

using-skillpack-maintenance

10
tachyon-beeptachyon-beep

Use when maintaining, enhancing, or modifying existing Claude Code plugins — handles skills, commands, agents, hooks, and reference sheets through systematic domain analysis, structure review, behavioral testing, and quality improvements

192 days ago

symfony-css-selector

10
krzysztofsurdykrzysztofsurdy

Convert CSS selectors to XPath expressions for parsing HTML/XML documents. Use familiar CSS selector syntax with XPath-based tools like DOMXPath and SimpleXMLElement, or integrate with DomCrawler for jQuery-like selector queries. Essential for web scraping, DOM manipulation testing, and document parsing.

192 days ago

symfony-dom-crawler

10
krzysztofsurdykrzysztofsurdy

Query, traverse, and extract data from HTML and XML documents programmatically. Use DomCrawler for web scraping, DOM navigation, form automation, testing, and parsing structured data from web pages without DOM manipulation capabilities.

192 days ago

hypogenic

9
jackspacejackspace

Automated hypothesis generation and testing using large language models. Use this skill when generating scientific hypotheses from datasets, combining literature insights with empirical data, testing hypotheses against observational data, or conducting systematic hypothesis exploration for research discovery in domains like deception detection, AI content detection, mental health analysis, or other empirical research tasks.

192 days ago

cloudflare-browser-rendering

9
jackspacejackspace

Complete knowledge domain for Cloudflare Browser Rendering - Headless Chrome automation with Puppeteer and Playwright on Cloudflare Workers for screenshots, PDFs, web scraping, and browser automation workflows. Use when: taking screenshots, generating PDFs from HTML or URLs, web scraping content, crawling websites, browser automation tasks, testing web applications, managing browser sessions, performing batch browser operations, integrating with AI for content extraction, or encountering browser rendering errors, XPath selector errors, browser timeout issues, concurrency limits, memory exceeded errors, or "Cannot read properties of undefined (reading 'fetch')" errors. Keywords: browser rendering cloudflare, @cloudflare/puppeteer, @cloudflare/playwright, puppeteer workers, playwright workers, screenshot cloudflare, pdf generation workers, web scraping cloudflare, headless chrome workers, browser automation, puppeteer.launch, playwright.chromium.launch, browser binding, session management, puppeteer.sessions, puppeteer.connect, browser.close, browser.disconnect, XPath not supported, browser timeout, concurrency limit, keep_alive, page.screenshot, page.pdf, page.goto, page.evaluate, incognito context, session reuse, batch scraping, crawling websites

192 days ago

tester

9
DomainLangDomainLang

Use for testing tasks including test strategy design, writing Vitest unit/integration tests, ensuring coverage, and exploring edge cases. Activate when creating tests, reviewing test coverage, or designing test strategies.

192 days ago

Cloudflare Cron Triggers

9
jackspacejackspace

Complete knowledge domain for Cloudflare Cron Triggers - scheduled execution of Workers using cron expressions for periodic tasks, maintenance jobs, and automated workflows. Use when: scheduling Workers to run periodically, adding cron triggers to Workers, configuring scheduled tasks, testing cron handlers, combining crons with Workflows, enabling Green Compute, handling multiple schedules, or encountering "scheduled handler not found", "cron expression invalid", "changes not propagating", "handler does not export", "timezone issues" errors. Keywords: cloudflare cron, cron triggers, scheduled workers, scheduled handler, periodic tasks, background jobs, scheduled tasks, cron expression, wrangler crons, scheduled event, green compute, workflow triggers, maintenance tasks, scheduled() handler, ScheduledController, UTC timezone

192 days ago

happy-dom

9
TerminalSkillsTerminalSkills

Run DOM tests without a browser using Happy DOM — fast JavaScript DOM implementation. Use when someone asks to "test without a browser", "Happy DOM", "fast DOM environment for tests", "replace jsdom", "Vitest DOM environment", or "server-side DOM". Covers test environment setup, Vitest/Jest integration, SSR testing, and performance comparison with jsdom.

192 days ago

preferences-rust-development

8
cameronraysmithcameronraysmith

Rust development conventions covering domain modeling, error handling, API design, testing, performance, and type-level programming. Load when working with .rs files or Rust projects.

192 days ago

browser-devtools

8
vukhanhtruongvukhanhtruong

Browser debugging and automation using Playwright. Use for web debugging, console monitoring, network analysis, screenshot capture, DOM inspection, and UI testing during development.

192 days ago

Spring Boot Modulith

6
joaquimscostajoaquimscosta

Spring Modulith 2.0 implementation for bounded contexts in Spring Boot 4. Use it when structuring application modules, implementing @ApplicationModuleListener for event-driven communication, testing with the Scenario API, enforcing module boundaries, or externalizing events to Kafka/AMQP. For decisions about modular monolith architecture, see the domain-driven-design skill.

192 days ago

repository-test

6
nikolayk812nikolayk812

Go repository testing with SQLC integration following hexagonal architecture. Use when writing integration tests for repository layer, testing database operations, and validating domain model persistence. Focuses on testcontainers, table-driven tests, and comprehensive error coverage.

192 days ago