Packs

7 packs

PRD to Implementation Plan

Transform a raw product idea into a structured PRD and then into a technical implementation plan with issues.

11 skills · pack

Common base skills including documentation generators, implementation planning, and utility tools

7 skills · pack

Component Spec and Pattern Library

Document component anatomy, variants, and usage patterns for consistent implementation.

5 skills · pack

Growth Loop Implementation

Identify the right growth loop mechanism, then build the acquisition and expansion motions to drive it.

3 skills · pack

Implement Plan with Git Workflow

Execute a predefined implementation plan step by step using isolated git worktrees and structured version control.

6 skills · pack

Planning skills for the Han suite: specifying, planning, sequencing, breaking down, and stress-testing work before implementation. Home of plan-a-feature, plan-implementation, plan-a-phased-build, plan-work-items, and iterative-plan-review, plus the discussion-facilitator agent. Depends on han-communication and han-core; bundled by the han meta-plugin.

5 skills · pack

Reporting and summary skills for the Han suite. Turns feature specifications into plain-language stakeholder summaries (also called executive or business summaries) with diagrams, for sharing with non-technical stakeholders before implementation kicks off.

2 skills · pack

Results for “implementation”

9 skills

testing-oauth2-implementation-flaws

Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass.

24.6k · bundle

testing-websocket-api-security

Tests WebSocket API implementations for security vulnerabilities including missing authentication, Cross-Site WebSocket Hijacking, injection attacks, and denial-of-service.

24.6k · bundle

exploiting-websocket-vulnerabilities

Test WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.

24.6k · bundle

testing-jwt-token-security

Assess JSON Web Token implementations for cryptographic weaknesses, algorithm confusion attacks, and authorization bypass vulnerabilities during security engagements.

24.6k · bundle

More results

exploiting-ms17-010-eternalblue-vulnerability

Exploits the MS17-010 (EternalBlue) vulnerability in Microsoft's SMBv1 implementation for authorized security testing, red team exercises, and penetration testing engagements.

24.6k · bundle

performing-content-security-policy-bypass

Analyze and bypass Content Security Policy implementations to achieve cross-site scripting by exploiting misconfigurations, JSONP endpoints, unsafe directives, and policy injection techniques.

24.6k · bundle

performing-api-rate-limiting-bypass

Tests API rate limiting implementations for bypass vulnerabilities by manipulating request headers, IP addresses, HTTP methods, API versions, and encoding schemes to circumvent request throttling controls.

24.6k · bundle

testing-for-json-web-token-vulnerabilities

Test JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypass and privilege escalation.

24.6k · bundle

Reverse-engineers EDR, Defender, and AV hook tables, ETW providers, and AMSI implementations to build targeted bypasses including unhooking, indirect syscalls, ETW patching, and call stack spoofing for authorized red team operations.

12.8k · bundle