Topic: claude
14,433 skills in this topic.
-
ssti-freemarker
Guide Freemarker/Java server-side template injection exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
ssti-jinja2
Guide Jinja2/Python server-side template injection exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
ssti-twig
Guide Twig/PHP server-side template injection exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
tomcat-manager-deploy
Deploy WAR files via Apache Tomcat Manager for remote code execution. Use when Tomcat Manager is accessible with valid credentials (manager-script or manager-gui role). Covers WAR generation, deployment via text API and HTML interface, reverse shell delivery, and cleanup. Common initial access vector after credential discovery via LFI, default creds, or config file exposure.
blacklanternsecurity/red-run 126
-
web-discovery
Discover web application injection points and route to the correct exploitation skill during authorized penetration testing.
blacklanternsecurity/red-run 126
-
xss-reflected
Guide reflected XSS exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
xss-stored
Guide stored (persistent) and blind XSS exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
request-smuggling
Guide HTTP request smuggling exploitation during authorized penetration testing.
blacklanternsecurity/red-run 126
-
debugging
Debug and troubleshoot issues
saadnvd1/aTerm 13
-
release
Cut a new release (build, sign, notarize, publish to GitHub)
saadnvd1/aTerm 13
-
debugger
Systematic debugging methodology for diagnosing failures and root cause analysis. Triggers on: 2+ failed fix attempts, 'ultradebug', 'uld', debugging in circles, complex system failures, intermittent bugs.
TechDufus/oh-my-claude 122
-
git-commit-validator
MUST be used for ANY git workflow that involves committing code. This includes explicit commit requests AND implicit ones like 'ship it', 'wrap it up', or finishing implementation work. Handles staging, message generation, validation, and commit execution with conventional commit format.
TechDufus/oh-my-claude 122
-
init-deep
Initialize or migrate to nested CLAUDE.md structure for progressive disclosure. Claude auto-loads CLAUDE.md from any directory it reads, enabling true contextual guidance. Triggers on: '/init-deep', 'deep init', 'initialize deeply', 'setup claude deeply', 'refactor claude.md', 'migrate claude.md', 'nested claude', 'progressive disclosure'.
TechDufus/oh-my-claude 122
-
pr-creation
MUST be used when creating pull requests. Handles context gathering, title generation (conventional commit format), body formatting, and PR creation via GitHub CLI. Creates PRs as drafts by default. Triggers on: 'create PR', 'open PR', 'ready for review', 'push for PR', 'send for review'.
TechDufus/oh-my-claude 122
-
ralph-loop-init
Transform approved plans into ralph loop infrastructure. Triggers on: '/ralph-loop-init', '/ralph-init', 'setup ralph loop', 'generate ralph loop'. Creates .ralph/ directory with prd.json, loop.py, CLAUDE.md, and supporting files.
TechDufus/oh-my-claude 122
-
ralph-plan
Structured PRD generation with interview, research, and approval workflow. Triggers on: '/ralph-plan <topic>', 'create prd', 'generate prd', 'plan this'. Creates comprehensive Product Requirements Document via interview and research.
TechDufus/oh-my-claude 122
-
receiving-code-review
How to handle code review feedback with technical rigor. Use when receiving review comments from code-reviewer agent, PR reviews, or external feedback. Triggers on: 'review feedback', 'address review', 'fix review comments', 'code review response'.
TechDufus/oh-my-claude 122
-
tdd
Systematic TDD methodology for writing tests first. Use when implementing features or fixes with OMC_TDD_MODE enabled, when unsure how to structure tests, or when test-first discipline needs reinforcement. Triggers on: 'tdd', 'test first', 'test driven', 'red green refactor'.
TechDufus/oh-my-claude 122
-
verification
Evidence-based verification methodology before claiming work is complete. Use when about to claim work is done, before committing, before creating PRs, or when verification-reminder hook fires. Triggers on: 'verify', 'verification', 'is it done', 'complete', 'ready to merge'.
TechDufus/oh-my-claude 122
-
worktree
Git worktree automation for isolated feature development. Triggers on: '/worktree create', '/worktree list', '/worktree remove'. Creates isolated working directories with automatic setup.
TechDufus/oh-my-claude 122
-
writing-skills
Methodology for creating effective skills using TDD principles. Use when creating new skills, editing existing skills, or authoring plugin components. Triggers on: 'create skill', 'write skill', 'new skill', 'skill authoring'.
TechDufus/oh-my-claude 122
-
obsidian
Comprehensive guidelines for Obsidian.md plugin development including all 27 ESLint rules from eslint-plugin-obsidianmd v0.1.9, TypeScript best practices, memory management, API usage (requestUrl vs fetch), UI/UX standards, locale file sentence-case enforcement, and submission requirements. Use when working with Obsidian plugins, main.ts files, manifest.json, Plugin class, MarkdownView, TFile, vault operations, or any Obsidian API development.
gapmiss/obsidian-plugin-skill 119
-
brain-jam-plan
Use when running claudikins-kernel:outline, brainstorming implementation approaches, gathering requirements iteratively, structuring complex technical plans, or facing analysis paralysis with too many options — provides iterative human-in-the-loop planning with explicit checkpoints and trade-off presentation
elb-pr/claudikins-kernel 115
-
git-workflow
Use when running claudikins-kernel:execute, decomposing plans into tasks, setting up two-stage review, deciding batch sizes, or handling stuck agents — enforces isolation, verification, and human checkpoints; prevents runaway parallelization and context death
elb-pr/claudikins-kernel 115