Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
lindy-data-handling
Best practices for handling data with Lindy AI.
Use when managing sensitive data, implementing data privacy,
or ensuring data compliance.
Trigger with phrases like "lindy data", "lindy privacy",
"lindy PII", "lindy data handling", "lindy GDPR".
majiayu000/claude-skill-registry 163
-
performing-security-testing
Test automate security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues.
Use when performing security assessments, penetration tests, or vulnerability scans.
Trigger with phrases like "scan for vulnerabilities", "test security", or "run penetration test".
majiayu000/claude-skill-registry 163
-
pal-secaudit
Comprehensive security audit with OWASP Top 10 analysis, compliance evaluation, and threat modeling using PAL MCP. Use for security reviews, vulnerability assessment, or compliance checks. Triggers on security audit requests, vulnerability scanning, or compliance reviews.
majiayu000/claude-skill-registry 163
-
.claude/skills/nextauth-patterns/SKILL.md
NextAuth.js v5の設定とカスタマイズパターン。
プロバイダー設定、アダプター統合、セッション戦略、
コールバックカスタマイズ、型安全性の確保を提供。
📖 参照書籍:
- 『Web Application Security』(Andrew Hoffman): 脅威モデリング
📚 リソース参照:
- `resources/Level1_basics.md`: レベル1の基礎ガイド
- `resources/Level2_intermediate.md`: レベル2の実務ガイド
- `resources/Level3_advanced.md`: レベル3の応用ガイド
- `resources/Level4_expert.md`: レベル4の専門ガイド
- `resources/legacy-skill.md`: 旧SKILL.mdの全文
- `resources/provider-configurations.md`: NextAuth.js Provider Configurations
- `resources/session-callbacks-guide.md`: NextAuth.js Session Callbacks Guide
- `scripts/log_usage.mjs`: 使用記録・自動評価スクリプト
- `scripts/validate-nextauth-config.mjs`: NextAuth.js設定ファイルの妥当性検証とプロバイダー設定・コールバック実装の検査スクリプト
- `scripts/validate-skill.mjs`: スキル構造検証スクリプト
- `templates/nextauth-config-template.ts`: Google/GitHub OAuth統合・Drizzleアダプター・JWT/Databaseセッション戦略を含むauth.ts設定テンプレート
Use proactively when handling nextauth patterns tasks.
majiayu000/claude-skill-registry 163
-
pop-assessment-security
Validates PopKit security posture using concrete vulnerability patterns, automated secret scanning, and OWASP-aligned checklists
majiayu000/claude-skill-registry 163
-
aqe-v2-v3-migration
Migrate Agentic QE projects from v2 to v3 with zero data loss
majiayu000/claude-skill-registry 163
-
add-authorization-methods
Add authorization methods for a new entity to AuthorizationService. Use after creating a resource service. Triggers on "add permissions", "authorization methods", "entity permissions", "add auth methods".
majiayu000/claude-skill-registry 163
-
threat-model-generator
Creates comprehensive threat models using STRIDE methodology with asset identification, threat enumeration, mitigation strategies, and residual risk assessment. Use for "threat modeling", "security analysis", "STRIDE", or "risk assessment".
majiayu000/claude-skill-registry 163
-
pop-assessment-security
Validates PopKit security posture using concrete vulnerability patterns, automated secret scanning, and OWASP-aligned checklists
majiayu000/claude-skill-registry 163
-
security-review
セキュリティ脆弱性を自動検出する。認証情報のハードコード、コマンドインジェクション、危険なシェル構文などをチェック。
majiayu000/claude-skill-registry 163
-
pal-secaudit
Comprehensive security audit with OWASP Top 10 analysis, compliance evaluation, and threat modeling using PAL MCP. Use for security reviews, vulnerability assessment, or compliance checks. Triggers on security audit requests, vulnerability scanning, or compliance reviews.
majiayu000/claude-skill-registry 163
-
insecure-deserialization-checker
Insecure Deserialization Checker - Auto-activating skill for Security Fundamentals.
Triggers on: insecure deserialization checker, insecure deserialization checker
Part of the Security Fundamentals skill category.
majiayu000/claude-skill-registry 163
-
white-label
Complete WordPress white-labeling using FREE plugins only - ASE, Branda, White Label CMS, Admin Menu Editor. Covers login page branding, admin cleanup, security hardening, and client handoff preparation.
majiayu000/claude-skill-registry 163
-
image_generation
AI图像生成与编辑能力,基于 Nano Banana (Gemini Image) 实现文生图、图生图、图像编辑。适用于创意设计、营销素材、社交媒体内容、演示文稿配图等场景。支持多种风格、高分辨率输出(最高4K)、文字渲染、角色一致性保持。
majiayu000/claude-skill-registry 163
-
aqe-v2-v3-migration
Migrate Agentic QE projects from v2 to v3 with zero data loss
majiayu000/claude-skill-registry 163
-
audit-security-dependencies
Use when adding packages, bumping versions, or responding to security alerts. Enforces supply chain security and vulnerability remediation.
majiayu000/claude-skill-registry 163
-
outline-cli
Allow droids to interact with Outline Wiki via the outlinectl CLI (auth, collections, docs) with automation-friendly JSON output.
majiayu000/claude-skill-registry 163
-
nextauth-patterns
NextAuth.js v5の設定とカスタマイズパターンを専門とするスキル。
OAuth 2.0プロバイダー統合、データベースアダプター、セッション戦略、コールバック実装、型安全なセッション管理を提供する。
Anchors:
• Web Application Security (Andrew Hoffman) / 適用: OAuth脅威モデリングとセッションセキュリティ / 目的: 安全な認証フロー設計
• NextAuth.js v5 Official Docs / 適用: プロバイダー設定とコールバック / 目的: 標準準拠の実装
Trigger:
Use when implementing NextAuth.js authentication, configuring OAuth providers (Google, GitHub),
integrating database adapters (Drizzle), designing session strategies (JWT or database-backed),
customizing authentication callbacks, or adding role-based data to sessions.
Keywords: nextauth, oauth, authentication, session, jwt, drizzle adapter, google oauth, github oauth
majiayu000/claude-skill-registry 163
-
auditing-wallet-security
Audit wallet security by analyzing token approvals, permissions, and transaction patterns.
Use when checking wallet security, reviewing approvals, or assessing risk exposure.
Trigger with phrases like "audit wallet", "check approvals", "security scan", or "revoke tokens".
majiayu000/claude-skill-registry 163
-
security-hardening-checklist
This skill should be used when the user requests to audit, check, or improve application security by analyzing security headers, cookie configuration, RLS policies, input sanitization, rate limiting, and other security measures. It generates a comprehensive security audit report with actionable recommendations. Trigger terms include security audit, security check, harden security, security review, vulnerability check, security headers, secure cookies, input validation, rate limiting, security best practices.
majiayu000/claude-skill-registry 163
-
performing-penetration-testing
Perform security penetration testing to identify vulnerabilities. Use when conducting security assessments. Trigger with 'run pentest', 'security testing', or 'find vulnerabilities'.
majiayu000/claude-skill-registry 163
-
terraform-audit
Audits Terraform code for anti-patterns, security issues, and best practice violations. Use when asked to audit, review, or check terraform code quality. Generates a comprehensive report under reports/YYYY-MM-DD/terraform-audit.md. (project)
majiayu000/claude-skill-registry 163
-
nick-theriot
Talk to Nick Theriot Youtuber about their expertise. Nick Theriot Youtuber provides authentic advice using their mental models, core beliefs, and real-world examples.
majiayu000/claude-skill-registry 163
-
security-protocols
🛡️ Comprehensive security management for festivals including crowd control, threat assessment, emergency response, and staff coordination.
majiayu000/claude-skill-registry 163