Plugins

12 plugins

Script authoring templates

4 skills · plugin

Build Blazor Web App with Auth

Install this pack to build a Blazor Web App with authentication and interactive components.

4 skills · plugin

Deploy Azure Infrastructure

Creates databases, caches, and configures authentication, monitoring, and backup.

3 skills · plugin

Skills for Blazor development: component authoring, interactivity, and web application patterns.

9 skills · plugin

Skill Authoring Toolkit

For developers creating and maintaining skills for AI coding agents.

17 skills · plugin

Dotnet Template Engine

.NET Template Engine skills: template discovery, project scaffolding, and template authoring.

6 skills · plugin

Build TypeSpec API for Copilot

Generate TypeSpec API plugin files with REST operations, authentication, and Adaptive Cards.

3 skills · plugin

Azure Identity and Storage with Python

For Python developers building secure Azure applications with authentication and blob storage.

4 skills · plugin

Document Coauthoring Pack

For teams that need to co-author, review, and polish technical documents, proposals, and specs.

11 skills · plugin

Office productivity skills for patent applications, PRD generation, video generation, Remotion programmatic video authoring, and AI writing trope detection

5 skills · plugin

@brycewang-stanford

Twelve-skill bundle covering the Cell manuscript lifecycle: workflow router, scope/significance fit, single-narrative framing, the Highlights + eTOC + Graphical Abstract trio, the ≤150-word Summary, main-text writing, display items, STAR Methods + Key Resources Table, data/code availability, Cell Press author–date references, submission preflight + cover letter, and reviewer rebuttal.

9 skills · plugin

Han Plugin Builder

Guidance for building Claude Code skills, agents, and plugins. The guidance skill answers authoring questions and, run with init, vendors the full guidance set into a repo as a path-scoped rule index so the right guidance surfaces while editing skill and agent files. Opt-in and dependency-free: installed on its own, not pulled in by the han meta-plugin.

3 skills · plugin

Results for “auth”

307 skills

Testing For Xxe Injection Vulnerabilities

Discover and exploit XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.

24.6k · bundle

DAX performance optimization for semantic models. Automatically invoke when the user asks to "optimize DAX", "fix slow DAX", "DAX performance", "tune a measure", "debug a measure", "DAX anti-patterns", or mentions slow queries, server timings, or DAX authoring.

Gitnexus Exploring

Use when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. Examples: "How does X work?", "What calls this function?", "Show me the auth flow"

Matlab Write Audio Plugin

Guide authoring of Audio Toolbox plugins (audioPlugin, audioPluginSource) that pass validateAudioPlugin and generate deployable VST/AU code. Use when creating audio effect or generator plugins, writing classdef files inheriting from audioPlugin, or troubleshooting validateAudioPlugin failures.

construct-ai-primary

Escalation Management

Use when encountering blockers, unresolved issues, or problems beyond your authority or capability. This skill provides a structured escalation process ensuring issues are escalated to the right level with proper context, and tracked through resolution.

Supabase Edge Function Builder

Use when building or planning a Supabase Edge Function for authenticated server logic, webhooks, background triggers, third-party integrations, or privileged operations. Trigger on requests to create or review edge functions in a Supabase system.

Exploiting Template Injection Vulnerabilities

Detect and exploit Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution during authorized penetration tests.

24.6k · bundle

Performing Open Source Intelligence Gathering

Collects publicly available information about a target organization to identify attack surfaces, social engineering targets, technology stacks, and credential exposures for authorized security testing.

24.6k · bundle

Use the GitHub CLI (gh) to perform core GitHub operations: auth status, repo create/clone/fork, issues, pull requests, releases, and basic repo management. Trigger for requests to use gh, manage GitHub repos, PRs, or issues from the CLI.

Jetson Set Target

Switch the active Jetson target-platform pointer to an existing profile YAML. Use before customize/build/flash to change target; not for authoring profiles — use jetson-init-target instead.

Fastify Best Practices

Guides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript, covering routes, plugins, validation, error handling, authentication, testing, performance, logging, deployment, and more.

Implementing Saml Sso With Okta

Configure Okta as a SAML 2.0 Identity Provider and implement SP-initiated and IdP-initiated SSO flows with attribute mapping, assertion encryption, and security hardening.

24.6k · bundle

Conducting Pass The Ticket Attack

Extract Kerberos tickets from LSASS memory, inject them into an attacker session, and perform lateral movement to access remote systems as the impersonated user.

24.6k · bundle

Model complex UI behavior as finite state machines with states, events, and transitions to eliminate impossible states and make behavior predictable.

M365 Agents Dotnet

Build enterprise agents for Microsoft 365, Teams, and Copilot Studio using the Microsoft.Agents SDK with ASP.NET Core hosting, agent routing, and MSAL-based authentication.

Detecting Pass The Hash Attacks

Hunt for Pass-the-Hash attacks by analyzing NTLM authentication patterns, identifying Type 3 logons where Kerberos is expected, and correlating with credential dumping indicators.

24.6k · bundle

Implementing Siem Correlation Rules For Apt

Detect APT lateral movement by chaining Windows authentication events, process execution telemetry, and network connection logs across hosts using Splunk SPL and Sigma rule format.

24.6k · bundle

ai-builder-club

Sets up a reliable end-to-end test suite as a per-PR gate, with real flows, layered assertions, reusable auth helpers, and video evidence.

Atomic-design guidance for Molecules — functional groups of atoms (SearchBar = input + button + icon; FormField = label + input + error) with a single cohesive purpose. Use when authoring or reviewing components under ui/molecules, composing atoms, or deciding atom vs molecule vs organism.

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Covers Node.js/Express/Fastify development, PostgreSQL optimization, API security, and backend architecture patterns.

20.4k · bundle

Abusing Shadow Credentials For Privesc

Take over Active Directory user and computer accounts by writing alternate certificate keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, and Certipy, then authenticate via PKINIT.

24.6k · bundle

Atomic-design guidance for Organisms — complex feature-level sections (Header, ProductGrid, CommentSection) that compose molecules, connect to state, handle loading/error/empty states, and own responsive layout decisions. Use when authoring components under ui/organisms or deciding molecule vs organism boundaries.

Atomic-design guidance for Templates — page-level wireframes that arrange organisms into layout slots (hero/main/sidebar/footer) without fetching data. Use when authoring components under ui/templates, defining reusable page skeletons, or keeping layout decisions out of pages and organisms.

Azure Cosmos DB Py

Build production-grade Azure Cosmos DB NoSQL services with Python/FastAPI, including client setup with dual authentication, service layer CRUD operations, partition key strategies, parameterized queries, and TDD patterns.

Authoring Analysis

Analyze content sequences from page structure to determine whether each should be default content or a specific block, and validate block selection for AEM Edge Delivery Services imports.

X Tweet Search By Query

Searches X (Twitter) for tweets matching an advanced query and returns structured data including text, author profile, engagement metrics, media, hashtags, mentions, and pagination cursors.

Performing Credential Access With Lazagne

Extract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red team operations.

24.6k · bundle

Executing Active Directory Attack Simulation

Executes authorized attack simulations against Active Directory environments to identify misconfigurations, weak credentials, dangerous privilege paths, and exploitable trust relationships that could lead to domain compromise.

24.6k · bundle

Performing Dns Enumeration And Zone Transfer

Enumerate DNS records, attempt zone transfers, brute-force subdomains, and map DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.

24.6k · bundle

Performing Active Directory Compromise Investigation

Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.

24.6k · bundle

Spring Boot Engineer

Generates Spring Boot 3.x configurations, REST controllers, Spring Security 6 authentication flows, Spring Data JPA repositories, and reactive WebFlux endpoints for building microservices and reactive Java applications.

10.4k · bundle

Firecrawl Interact

Controls a live browser session on scraped pages to click, fill forms, navigate flows, and extract data using natural language prompts or code, including support for authenticated sessions via profiles.

API Test Suite Builder

Scans API route definitions across frameworks (Next.js, Express, FastAPI, Django REST) and auto-generates comprehensive test suites covering auth, input validation, error codes, pagination, file uploads, and rate limiting.

20.4k · bundle

X Tweet By Conversation

Collects every tweet in an X (Twitter) conversation thread given a conversation id, returning normalized per-tweet data with text, author, engagement counts, media, hashtags, mentions, and reply mapping.

Analyzing Network Traffic With Wireshark

Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns, diagnose protocol issues, extract artifacts, and support incident response investigations on authorized network segments.

24.6k · bundle

Security Review

Scans codebases for security vulnerabilities by reasoning about code context, data flow, and component interactions, covering injection flaws, secrets exposure, authentication issues, and weak cryptography across multiple languages.

36.2k · bundle