openakita/skills@apify-scraper

905

openakita

Web data extraction using 55+ verified Apify Actors for AI-driven scraping. Supports Instagram, Facebook, TikTok, YouTube, Google (SERP, Maps, Reviews) and more. Automatically selects the best Actor for each task and returns structured JSON/CSV output. Features include pagination and incremental crawling, rate limiting and retry strategies, proxy and authentication support (requires APIFY_TOKEN), scheduling and page-change monitoring, and guidance for ethical scraping and ban mitigation.

JWT Security Testing

14

zebbern

This skill should be used when the user asks to "test JWT security", "hack JWT tokens", "bypass JWT authentication", "crack JWT secrets", or "exploit JWT vulnerabilities". It provides comprehensive JSON Web Token attack techniques and security assessment methodologies.

jwt-handler

9

TerminalSkills

When the user needs to generate, validate, refresh, or debug JSON Web Tokens. Use when the user mentions "JWT," "access token," "refresh token," "token rotation," "token expiration," "token validation," "bearer token," or "decode JWT." Handles secure token lifecycle including signing, verification, refresh rotation, and revocation. For full auth system design, see auth-system-setup.

cloudflare-mcp-server

9

jackspace

Use this skill when building Model Context Protocol (MCP) servers on Cloudflare Workers. This skill should be used when deploying remote MCP servers with TypeScript, implementing OAuth authentication (GitHub, Google, Azure, etc.), using Durable Objects for stateful MCP servers, implementing WebSocket hibernation for cost optimization, or configuring dual transport methods (SSE + Streamable HTTP). The skill prevents 15+ common errors including McpAgent class export issues, OAuth redirect URI mismatches, WebSocket state loss, Durable Objects binding errors, and CORS configuration mistakes. Includes production-tested templates for basic MCP servers, OAuth proxy integration, stateful servers with Durable Objects, and complete wrangler.jsonc configurations. Covers all 4 authentication patterns: token validation, remote OAuth with DCR, OAuth proxy (workers-oauth-provider), and full OAuth provider implementation. Self-contained with Worker and Durable Objects basics. Token efficiency: ~87% savings (40k → 5k tokens). Production tested on Cloudflare's official MCP servers. Keywords: MCP server, Model Context Protocol, cloudflare mcp, mcp workers, remote mcp server, mcp typescript, @modelcontextprotocol/sdk, mcp oauth, mcp authentication, github oauth mcp, durable objects mcp, websocket hibernation, mcp sse, streamable http, McpAgent class, mcp tools, mcp resources, mcp prompts, oauth proxy, workers-oauth-provider, mcp deployment, McpAgent export error, OAuth redirect URI, WebSocket state loss, mcp cors, mcp dcr

change_setting

5

ericwang915

Modify pythonclaw.json configuration at runtime. Use when the user wants to set API keys, tokens, change LLM provider, adjust web port, or update any configuration value.

better-auth-jwt-jwks

5

MuhammedSuhaib

Expert skill for implementing Better Auth with JWT tokens and JWKS (JSON Web Key Set) for secure authentication between Next.js frontend and FastAPI backend. Handles JWT token generation, verification, JWKS endpoint setup, and secure API communication. Includes setup for database integration, session management, and user isolation. Use when implementing authentication between frontend (Next.js) and backend (FastAPI) services with JWT tokens and JWKS.

performing-jwt-none-algorithm-attack

2

mukul975

Execute and test the JWT none algorithm attack to bypass signature verification by manipulating the alg header field in JSON Web Tokens.

testing-jwt-token-security

2

mukul975

Assessing JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.

implementing-jwt-signing-and-verification

2

mukul975

JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications. This skill covers implementing secure JWT signing with HMAC-SHA256

testing-for-json-web-token-vulnerabilities

2

mukul975

Test JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypass and privilege escalation.

JWT Security

sharp-skills

Creates, validates, and securely manages JSON Web Tokens for stateless authentication, covering common vulnerabilities and secure implementation patterns. Triggers on: JWT, JSON Web Token, token-based auth, Bearer token, token validation, token expiry, refresh token, alg:none, JWT secret.

hive-blockchain-agent

dfevh

Use this skill whenever an agent needs to interact with the HIVE blockchain ecosystem. Covers posting content, voting and curation, HBD savings management, Resource Credit (RC) monitoring and delegation, HP power-up/power-down, token transfers, custom_json operations, account queries, streaming live blockchain data, and Lightning Network bridging via v4vapp. Trigger on any mention of HIVE, HBD, Hive Power, RC credits, Peakd, Ecency, Keychain, v4vapp, or any HIVE-native dApp interaction.

generating-tailwind-brand-config

marchatton

Transforms Brand DNA artefacts (docs/02-guidelines/inspiration/brand_guidelines.md, design_tokens.json, prompt_library.json) into Tailwind-ready design system config (CSS variables + Tailwind preset) for a web app and a marketing site. Use when wiring tokens into Tailwind, setting up light/dark mode, or generating reusable presets and component recipes.

jwt-management

engineers-hub-ltd-in-house-project

JWT（JSON Web Token）の生成・検証・管理パターン。アクセストークンとリフレッシュトークンの 設計、クレーム構造、署名アルゴリズム（RS256 vs HS256）の選定、有効期限戦略、 トークンローテーション、失効管理を含む。ステートレス認証基盤を構築する場面で使用する。