标记「credential_access」的 Skills
与 credential_access 相关的 Agent Skills,可查看 SKILL.md 并下载 zip。
244 skills
-
claude-api
★ 5.0Reference for the Claude API / Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration. TRIGGER …
编程 anthropics/skillsRating 5.0 (154273) -
pdf
★ 5.0Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple …
文档 anthropics/skillsRating 5.0 (154273) -
browser-testing-with-devtools
★ 5.0Tests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browser. Use when you need to inspect the DOM, capture c…
编程 addyosmani/agent-skillsRating 5.0 (65820) -
context-engineering
★ 5.0Optimizes agent context setup. Use when starting a new session, when agent output quality degrades, when switching between tasks, or when you need to configure…
通用 addyosmani/agent-skillsRating 5.0 (65820) -
git-workflow-and-versioning
★ 5.0Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, or when you need to organize work acro…
编程 addyosmani/agent-skillsRating 5.0 (65820) -
security-and-hardening
★ 5.0Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that …
编程 addyosmani/agent-skillsRating 5.0 (65820) -
ad-creative
★ 5.0When the user wants to generate, iterate, or scale ad creative — headlines, descriptions, primary text, or full ad variations — for any paid advertising platfo…
编程 coreyhaines31/marketingskillsRating 5.0 (34712) -
analytics
★ 5.0When the user wants to set up, improve, or audit analytics tracking and measurement. Also use when the user mentions "set up tracking," "GA4," "Google Analytic…
编程 coreyhaines31/marketingskillsRating 5.0 (34712) -
directory-submissions
★ 5.0When the user wants to submit their product to startup, SaaS, AI, agent, MCP, no-code, or review directories for backlinks, domain rating, and discovery. Also …
编程 coreyhaines31/marketingskillsRating 5.0 (34712) -
offers
★ 5.0When the user wants to design, construct, or improve an offer — the thing they actually sell — including value framing, bonus stacking, guarantee design, scarc…
设计 coreyhaines31/marketingskillsRating 5.0 (34712) -
popups
★ 5.0When the user wants to create or optimize popups, modals, overlays, slide-ins, or banners for conversion purposes. Also use when the user mentions "exit intent…
沟通协作 coreyhaines31/marketingskillsRating 5.0 (34712) -
signup
★ 5.0When the user wants to optimize signup, registration, account creation, or trial activation flows. Also use when the user mentions "signup conversions," "regis…
通用 coreyhaines31/marketingskillsRating 5.0 (34712) -
configure
★ 5.0Set up the Discord channel — save the bot token and review access policy. Use when the user pastes a Discord bot token, asks to configure Discord, asks "how do…
编程 anthropics/claude-plugins-officialRating 5.0 (30750) -
configure
★ 5.0Set up the Telegram channel — save the bot token and review access policy. Use when the user pastes a Telegram bot token, asks to configure Telegram, asks "how…
编程 anthropics/claude-plugins-officialRating 5.0 (30750) -
m5-onboard
★ 5.0End-to-end onboarding for a freshly-plugged-in M5Stack ESP32 device (Cardputer, Cardputer-Adv, Core, CoreS3, Stick) — detect on USB, flash UIFlow 2.0 firmware,…
设计 anthropics/claude-plugins-officialRating 5.0 (30750) -
offensive-active-directory
★ 4.8Active Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound, PowerView, ADExplorer), credential abuse (Ker…
通用 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: AI Pentest
★ 4.8AI/LLM security offensive checklist: prompt injection, jailbreaking, model extraction, training data poisoning, adversarial inputs, LLM-assisted attack automat…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-jwt
★ 4.8JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret brute force, kid parameter injection (SQLi…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: OAuth Security Testing
★ 4.8OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter abuse, open redirector chaining, token le…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-cloud
★ 4.8Cloud security attack methodology covering AWS, Azure, and GCP. Includes credential harvesting (IMDS, ~/.aws, env vars, leaked CI secrets, instance roles), enu…
数据 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Week 5: Basic Exploitation (Linux with Mitigations Disabled)
★ 4.8Week 5 exploit development curriculum. Foundational exploitation techniques: controlling EIP/RIP, ROP chain construction, ret2libc, shellcode injection, heap s…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Week 4: Crash Analysis and Exploitability Assessment
★ 4.8Week 4 exploit development curriculum. Crash triage and analysis methodology: WinDbg/GDB analysis, ASAN/MSAN output interpretation, exploitability assessment, …
通用 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Exploit Development
★ 4.8Full exploit development course roadmap and syllabus: weekly topics, recommended reading, lab setup, and learning path from vulnerability classes through advan…
通用 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Exploit Development
★ 4.8Exploit development operational guide: environment setup, debugging workflow, PoC development lifecycle, writing reliable exploits, using pwntools/pwndbg, heap…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Modern Kernel Exploit Mitigations
★ 4.8Security mitigation reference and bypass catalog: ASLR, DEP/NX, RELRO, stack canaries, CFI, sandboxing, seccomp. Covers both detection of enabled mitigations a…
通用 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Week 2: Finding Vulnerabilities Through Fuzzing
★ 4.8Week 2 of the exploit development curriculum. Covers fuzzing methodology: target selection, corpus generation, coverage-guided fuzzing with AFL++/libFuzzer, st…
设计 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Week 1: Vulnerability Classes with Real-World Examples
★ 4.8Exploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer overflows, use-after-free, integer overf…
设计 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Advanced Redteam Ops
★ 4.8Practical advanced red team operations guide: OPSEC discipline, C2 infrastructure design, living-off-the-land techniques, lateral movement, persistence, data e…
设计 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Endpoint Detection and Response
★ 4.8EDR evasion offensive checklist: hook unhooking (user/kernel), direct syscalls, PPID spoofing, process injection variants, AMSI bypass, ETW patching, memory en…
通用 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Modern Initial Access
★ 4.8Initial access techniques checklist: phishing (spear/smishing), credential stuffing, exposed service exploitation, supply chain attacks, watering hole, VPN/RDP…
通用 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Week 7: Defeating Windows Security Boundaries
★ 4.8Windows security boundary taxonomy and attack surface enumeration: kernel/user boundary, sandbox boundaries (LPAC, AppContainer), COM/RPC boundaries, hyperviso…
通用 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Week 6: Understanding Windows Mitigations
★ 4.8Deep-dive on Windows exploit mitigations: ASLR, DEP/NX, CFG, CET/Shadow Stack, SEHOP, Heap Guard, ACG, Arbitrary Code Guard. Covers both the protection mechani…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-iot
★ 4.8IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C EEPROM, eMMC chip-off), firmware acquisit…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-mobile
★ 4.8Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android, class-dump/Hopper/IDA for iOS), dynamic i…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: OSINT Methodology
★ 4.8Structured OSINT methodology framework: target definition, source selection, collection workflows, data correlation, timeline reconstruction, and reporting. Us…
设计 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-osint
★ 4.8Comprehensive OSINT methodology skill for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harves…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Fast Testing Checklist
★ 4.8Speed-optimized offensive checklist for rapid assessment: quick-win vulnerability patterns, fast recon shortcuts, automated scanner configurations, and triage …
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-reporting
★ 4.8Penetration test and red team report writing methodology. Covers executive summary structuring (risk-led narrative for non-technical readers), technical findin…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-business-logic
★ 4.8Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations, multi-step process abuse, price/quantity…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: File Upload Vulnerabilities
★ 4.8File upload vulnerability checklist: MIME type bypass, extension bypass, magic byte manipulation, path traversal in filenames, stored XSS via SVG/HTML upload, …
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: GraphQL Vulnerabilities
★ 4.8GraphQL security testing checklist: introspection abuse, batching attacks, query depth/complexity DoS, field suggestion enumeration, IDOR via GraphQL, injectio…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Insecure Direct Object References (IDOR)
★ 4.8IDOR (Insecure Direct Object Reference) testing checklist: object ID enumeration, horizontal/vertical privilege escalation, GUID predictability, indirect refer…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Open Redirect Vulnerabilities
★ 4.8Open redirect vulnerability checklist: parameter identification, bypass techniques (URL encoding, double slashes, CRLF injection, protocol handlers), chaining …
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: HTTP Parameter Pollution (HPP)
★ 4.8HTTP parameter pollution (HPP) checklist: duplicate parameter injection, backend vs frontend parsing differences, WAF bypass via HPP, server-side vs client-sid…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Race Conditions
★ 4.8Race condition (TOCTOU) testing checklist: identifying timing windows, Burp Suite Turbo Intruder, Last-Byte sync technique, rate limit bypass, double-spend att…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: HTTP Request Smuggling
★ 4.8HTTP request smuggling checklist: CL.TE, TE.CL, TE.TE variants, detection with timing and differential responses, WAF bypass, cache poisoning, credential hijac…
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
offensive-sqli
★ 4.8SQL injection testing skill for offensive security assessments and bug bounty hunting. Covers error-based, UNION-based, boolean/time-based blind, out-of-band, …
编程 SnailSploit/Claude-RedRating 4.8 (2382) -
SKILL: Server-Side Request Forgery (SSRF)
★ 4.8Server-Side Request Forgery testing checklist: SSRF discovery, blind SSRF with out-of-band, cloud metadata endpoints (AWS/GCP/Azure), SSRF filter bypass techni…
编程 SnailSploit/Claude-RedRating 4.8 (2382)
全部
- claude-api
- browser-testing-with-devtools
- context-engineering
- git-workflow-and-versioning
- security-and-hardening
- ad-creative
- analytics
- directory-submissions
- offers
- popups
- signup
- configure
- configure
- m5-onboard
- offensive-active-directory
- SKILL: AI Pentest
- offensive-jwt
- SKILL: OAuth Security Testing
- offensive-cloud
- SKILL: Week 5: Basic Exploitation (Linux with Mitigations Disabled)
- SKILL: Week 4: Crash Analysis and Exploitability Assessment
- SKILL: Exploit Development
- SKILL: Exploit Development
- SKILL: Modern Kernel Exploit Mitigations
- SKILL: Week 2: Finding Vulnerabilities Through Fuzzing
- SKILL: Week 1: Vulnerability Classes with Real-World Examples
- SKILL: Advanced Redteam Ops
- SKILL: Endpoint Detection and Response
- SKILL: Modern Initial Access
- SKILL: Week 7: Defeating Windows Security Boundaries
- SKILL: Week 6: Understanding Windows Mitigations
- offensive-iot
- offensive-mobile
- SKILL: OSINT Methodology
- offensive-osint
- SKILL: Fast Testing Checklist
- offensive-reporting
- offensive-business-logic
- SKILL: File Upload Vulnerabilities
- SKILL: GraphQL Vulnerabilities
- SKILL: Insecure Direct Object References (IDOR)
- SKILL: Open Redirect Vulnerabilities
- SKILL: HTTP Parameter Pollution (HPP)
- SKILL: Race Conditions
- SKILL: HTTP Request Smuggling
- offensive-sqli
- SKILL: Server-Side Request Forgery (SSRF)
- SKILL: WAF Bypass Techniques
- SKILL: Cross-Site Scripting (XSS)
- SKILL: XML External Entity (XXE) Injection
- offensive-bluetooth-ble
- offensive-evil-twin
- offensive-krack-fragattacks
- offensive-wifi
- offensive-wpa-enterprise
- offensive-wpa3-sae
- offensive-z-wave
- offensive-zigbee-thread-matter
- offensive-osint
- osint-methodology
- contagious
- drive-motivation
- made-to-stick
- microinteractions
- negotiation
- ux-heuristics
- cicd-playbook
- engineering-hiring-rubric
- load-testing-plan
- local-dev-setup
- runbook-writer
- security-threat-model
- test-strategy-doc
- founder-market-fit
- media-pitch
- privacy-policy-drafter
- instagram-post-downloader
- cicd-playbook
- engineering-hiring-rubric
- founder-market-fit
- instagram-post-downloader
- load-testing-plan
- local-dev-setup
- media-pitch
- privacy-policy-drafter
- runbook-writer
- security-threat-model
- test-strategy-doc
- opencli-adapter-author
- opencli-browser
- opencli-usage
- xquik-twitter
- docker-ros2-development
- robot-bringup
- robotics-security
- venice-api-keys
- venice-api-overview
- venice-augment
- venice-auth
- venice-billing
- venice-crypto-rpc
- venice-errors
- venice-responses
- venice-x402
- 3proxy
- accessibility-auditor
- act
- activepieces
- adonisjs
- agent-sandbox
- ai-content-detection
- ai-eval-ci
- ai-video-generator
- airflow
- amass
- analytics-tracking
- ansible
- appium
- appwrite
- argocd
- atuin
- auth-system-setup
- authjs
- aws-cli
- aws-cognito
- aws-ecs
- aws-rds
- azure-cosmos-db
- azure-openai
- better-auth
- bitbucket
- bolt
- braintrust
- breach-data
- bruno
- bun
- burp-suite
- caddy
- calendar-integration
- caprover
- ccpa-compliance
- censys
- centrifugo
- cert-manager
- chatwoot
- checkly
- clerk-auth
- clickhouse
- clickup
- cloudflare-workers
- cookie-consent
- crawl4ai
- crossplane
- cucumber
- d1-database
- dagger
- dalle-api
- data-masking
- datadog
- dbt
- detox
- directus
- django
- dokku
- dokploy
- doppler
- elixir
- elysia
- academy-clause-library-explainer
- academy-team-bio-lookup
- community-bar-association-co-host-webinar
- connector-calendar
- connector-companies-house-uk
- connector-firecrawl
- connector-legifrance
- connector-stripe
- conversation-intake-data-privacy-assessment
- conversation-intake-nda
- conversation-intake-will
- docs-cookie-policy-summary
- docs-data-residency-mena
- docs-dev-hub-api-reference
- docs-mobile-app-onboarding
- docs-security-overview
- docs-sso-saml-setup
- draft-agency-agreement
- draft-cease-and-desist
- draft-cookie-policy
- draft-ip-assignment
- draft-ip-licensing
- draft-licensing-agreement
- draft-nda-mutual
- draft-nda-unilateral
- draft-privacy-policy
- draft-terms-of-service
- efirm-finance-ewallet-balance-checker
- efirm-finance-invoice-generator-from-time-entries
- eng-supabase-edge-functions-patterns
- import-docx-processing-anthropic
- import-meeting-briefing-anthropic
- import-nda-review-jamie-tso
- import-pdf-processing-anthropic
- import-politique-confidentialite-fr
- import-politique-cookies-fr
- import-vscode-extension-builder-lawvable
- import-xlsx-processing-anthropic
- justice-intent-support
- kb-advertising-marketing-law
- kb-banking-regulation-cbuae
- kb-banking-regulation-sama
- kb-crypto-adgm
- kb-employment-law-lb
- kb-ip-mena
- output-pdf-export-style
- pa-workflow-ip-patent-prioritization
- pa-workflow-litigation-expert-witness-prep-memo
- pa-workflow-litigation-motion-template-library
- pa-workflow-transactional-nda-triage-red-yellow-green
- persona-sme-founder
- prompt-pack-cookie-policy
- prompt-pack-cross-border-data-transfer-assessment
- prompt-pack-cross-border-payment-compliance-review
- prompt-pack-cryptocurrency-exchange-terms
- prompt-pack-data-breach-response-plan
- prompt-pack-data-processing-agreement
- prompt-pack-data-retention-policy
- prompt-pack-data-subject-access-request-procedure
- prompt-pack-digital-wallet-terms
- prompt-pack-e-money-license-application-memo
- prompt-pack-embedded-finance-partnership-agreement
- prompt-pack-employee-handbook
- prompt-pack-ip-due-diligence-checklist
- prompt-pack-lending-platform-terms
- prompt-pack-nda-strength-check
- prompt-pack-open-banking-api-terms
- prompt-pack-privacy-policy
- eterdis-protoloop
- gh-security-hardening
- security-risk
- AI Thumbnail Factory
- Content Idea Brainstormer
- Long-Form Script System
- Viral Hook Generator