Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
Security Auditing
Audit security with vulnerability scanning, input validation checks, and auth/authz review against OWASP Top 10. Use when implementing authentication, reviewing security-sensitive code, or conducting security audits.
majiayu000/claude-skill-registry 163
-
attacking-wireless-networks
Attack WiFi networks using WPA/WPA2 cracking, WPS exploitation, Evil Twin attacks, deauthentication, and wireless reconnaissance. Use when pentesting wireless networks or performing WiFi security assessments.
majiayu000/claude-skill-registry 163
-
windsurf-dependency-management
Analyze and update dependencies with vulnerability scanning. Activate when users mention
"update dependencies", "security audit", "npm audit", "vulnerability scan",
or "dependency updates". Handles dependency analysis and updates. Use when working with windsurf dependency management functionality. Trigger with phrases like "windsurf dependency management", "windsurf management", "windsurf".
majiayu000/claude-skill-registry 163
-
sr-cardoso-backend
Backend Cloud Run/Express/Firestore do Sr Cardoso. Use quando criar ou alterar endpoints, auth JWT, regras de agenda, financeiro, branding, WhatsApp, cron jobs, ou modelagem Firestore.
majiayu000/claude-skill-registry 163
-
crack-hashcat
Advanced password recovery and hash cracking tool supporting multiple algorithms and attack modes. Use when: (1) Performing authorized password auditing and security assessments, (2) Recovering passwords from captured hashes in forensic investigations, (3) Testing password policy strength and complexity, (4) Validating encryption implementations, (5) Conducting security research on cryptographic hash functions, (6) Demonstrating password weakness in penetration testing reports.
majiayu000/claude-skill-registry 163
-
SSH Penetration Testing
This skill should be used when the user asks to "pentest SSH services", "enumerate SSH configurations", "brute force SSH credentials", "exploit SSH vulnerabilities", "perform SSH tunneling", or "audit SSH security". It provides comprehensive SSH penetration testing methodologies and techniques.
majiayu000/claude-skill-registry 163
-
WordPress Penetration Testing
This skill should be used when the user asks to "pentest WordPress sites", "scan WordPress for vulnerabilities", "enumerate WordPress users, themes, or plugins", "exploit WordPress vulnerabilities", or "use WPScan". It provides comprehensive WordPress security assessment methodologies.
majiayu000/claude-skill-registry 163
-
audit-style
Audit and refactor CSS to comply with Game Loopers design system and BEM methodology
majiayu000/claude-skill-registry 163
-
dependency-audit-assistant
Reviews package dependencies for security vulnerabilities, outdated versions, and license compliance. Use when user asks about dependencies, security audits, or before releases.
majiayu000/claude-skill-registry 163
-
dokploy-security-hardening
Security best practices for Dokploy templates: secrets management, network isolation, least privilege, image security, and hardening recommendations.
majiayu000/claude-skill-registry 163
-
cryptographic-practices
暗号化・ハッシュ・CSPRNG・鍵管理の実装を安全に進めるためのスキル。
要件整理から設計、実装、監査までの一連フローを提供する。
Anchors:
• Applied Cryptography / 適用: アルゴリズム選定と強度判断 / 目的: 標準準拠の基礎固め
• Web Application Security / 適用: 脅威モデリング / 目的: 実装リスクの明確化
• NIST SP 800-57 / 適用: 鍵管理 / 目的: ライフサイクル設計
Trigger:
Use when implementing cryptographic functions, selecting algorithms, generating secure random values, managing encryption keys, or auditing crypto implementations.
cryptographic practices, crypto implementation, key management, csprng, algorithm selection
majiayu000/claude-skill-registry 163
-
input-validation
Input-Validation standards for input validation in Security environments.
majiayu000/claude-skill-registry 163
-
security-protocols
🛡️ Comprehensive security management for festivals including crowd control, threat assessment, emergency response, and staff coordination.
majiayu000/claude-skill-registry 163
-
eufy
Manage Eufy Security (HomeBase S380 + SoloCam S340/E340) from the `eufy` CLI—capture snapshots, forward alarms to the Tuya hub, and change guard/alarm modes through eufy-security-ws.
majiayu000/claude-skill-registry 163
-
performing-security-audits
Analyze code, infrastructure, and configurations by conducting comprehensive security audits. It leverages tools within the security-pro-pack plugin, including vulnerability scanning, compliance checking, and cryptography review. Use when assessing security or running audits. Trigger with phrases like 'security scan', 'audit', or 'vulnerability'.
majiayu000/claude-skill-registry 163
-
security-prompts-auth
Authentication and authorization prompt templates for RBAC implementation, permissions systems, ownership verification, and authorization testing. Use when setting up roles, implementing access control, or testing authorization logic. Triggers include "RBAC", "role-based access", "permissions", "ownership", "authorization", "access control", "user roles", "auth testing".
majiayu000/claude-skill-registry 163
-
encrypting-and-decrypting-data
Validate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.
majiayu000/claude-skill-registry 163
-
authentication-docs
API認証ドキュメント（OAuth 2.0/PKCE、API Key、JWT、トークン管理）の作成と図解を支援するスキル。
認証フローの説明、トークン取得手順、セキュリティ注意点をわかりやすく整理します。
Anchors:
• OAuth 2.0 Simplified / 適用: フロー図解 / 目的: 正確な説明と用語整理
• Web Application Security / 適用: セキュリティ注意点 / 目的: 安全な認証ドキュメント
• API Documentation Best Practices / 適用: ドキュメント構成 / 目的: 読みやすさの担保
Trigger:
Use when writing authentication docs, creating OAuth flow diagrams, documenting token management, or preparing quickstart guides for API auth.
majiayu000/claude-skill-registry 163
-
google-docs-sheets
Export Google Docs and Google Sheets (spreadsheets) to Markdown files or stdout. Use when asked to fetch, download, or ingest Google Docs/Sheets content for summarization, analysis, or context loading. Tries gcloud ADC first with browser OAuth fallback.
majiayu000/claude-skill-registry 163
-
auditing-access-control
Audit access control implementations for security vulnerabilities and misconfigurations. Use when reviewing authentication and authorization. Trigger with 'audit access control', 'check permissions', or 'validate authorization'.
majiayu000/claude-skill-registry 163
-
bir-tax-filing
Automate Philippine BIR (Bureau of Internal Revenue) tax form generation and filing. Handles 1601-C (withholding tax), 2550Q (quarterly VAT), 1702-RT/EX (annual income tax), and ATP (Authorization to Print) validation. Ensures 100% compliance with BIR regulations.
majiayu000/claude-skill-registry 163
-
cybersecurity-analyst
Analyzes events through cybersecurity lens using threat modeling, attack surface analysis, defense-in-depth,
zero-trust architecture, and risk-based frameworks (CIA triad, STRIDE, MITRE ATT&CK).
Provides insights on vulnerabilities, attack vectors, defense strategies, incident response, and security posture.
Use when: Security incidents, vulnerability assessments, threat analysis, security architecture, compliance.
Evaluates: Confidentiality, integrity, availability, threat actors, attack patterns, controls, residual risk.
majiayu000/claude-skill-registry 163
-
audit-skill
Comprehensive audit capabilities for security, code quality, module structure, compliance, and performance analysis. Use this skill when performing security audits, code reviews, vulnerability assessments, module structure validation, or generating audit reports.
majiayu000/claude-skill-registry 163
-
session-management-ssg-ssr
Expert skill for implementing session management in SSG (Static Site Generation) and SSR (Server-Side Rendering) contexts. Covers stateless authentication with JWT, database session management, client-side session handling, and security best practices for different rendering strategies. Use when implementing session management in static sites (SSG), handling authentication in server-side rendered applications (SSR), or implementing stateless authentication with JWT tokens.
majiayu000/claude-skill-registry 163