Plugins

12 plugins

Script authoring templates

4 skills · plugin

Build Blazor Web App with Auth

Install this pack to build a Blazor Web App with authentication and interactive components.

4 skills · plugin

Deploy Azure Infrastructure

Creates databases, caches, and configures authentication, monitoring, and backup.

3 skills · plugin

Skills for Blazor development: component authoring, interactivity, and web application patterns.

9 skills · plugin

Skill Authoring Toolkit

For developers creating and maintaining skills for AI coding agents.

17 skills · plugin

Dotnet Template Engine

.NET Template Engine skills: template discovery, project scaffolding, and template authoring.

6 skills · plugin

Build TypeSpec API for Copilot

Generate TypeSpec API plugin files with REST operations, authentication, and Adaptive Cards.

3 skills · plugin

Azure Identity and Storage with Python

For Python developers building secure Azure applications with authentication and blob storage.

4 skills · plugin

Document Coauthoring Pack

For teams that need to co-author, review, and polish technical documents, proposals, and specs.

11 skills · plugin

Office productivity skills for patent applications, PRD generation, video generation, Remotion programmatic video authoring, and AI writing trope detection

5 skills · plugin

@brycewang-stanford

Twelve-skill bundle covering the Cell manuscript lifecycle: workflow router, scope/significance fit, single-narrative framing, the Highlights + eTOC + Graphical Abstract trio, the ≤150-word Summary, main-text writing, display items, STAR Methods + Key Resources Table, data/code availability, Cell Press author–date references, submission preflight + cover letter, and reviewer rebuttal.

9 skills · plugin

Han Plugin Builder

Guidance for building Claude Code skills, agents, and plugins. The guidance skill answers authoring questions and, run with init, vendors the full guidance set into a repo as a path-scoped rule index so the right guidance surfaces while editing skill and agent files. Opt-in and dependency-free: installed on its own, not pulled in by the han meta-plugin.

3 skills · plugin

Results for “auth”

1,112 skills

testing-for-xxe-injection-vulnerabilities

Discover and exploit XML External Entity injection vulnerabilities to read server files, perform SSRF, and exfiltrate data during authorized penetration tests.

24.6k · bundle

building-red-team-c2-infrastructure-with-havoc

Deploy and configure the Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations.

24.6k · bundle

hyperframes-cli

Run the HyperFrames CLI to scaffold, author, lint, preview, render, and publish video compositions locally or on HeyGen Cloud, AWS Lambda, and Google Cloud Run.

Guides authorized Wi-Fi security assessments including handshake capture, PMKID collection, rogue AP detection, and offline password policy evaluation using aircrack-ng, hashcat, and Wireshark.

12.8k · bundle

commerce-order-api

Submits, retrieves, and manages headless B2C Commerce storefront orders via SCAPI ShopAPI Orders or legacy OCAPI, including SLAS authentication, order amendment, status retrieval, and notifications.

sakamoto-family-smile

Interact with the X (Twitter) API to post tweets and threads, read timelines, search content, and track analytics using OAuth authentication and rate-limit handling.

google-workspace

Manages Gmail, Calendar, Drive, Contacts, Sheets, and Docs through OAuth-authenticated CLI commands, with setup and usage instructions for the gws tool or a Python fallback.

Interact with X (Twitter) programmatically: post tweets and threads, read timelines, search, upload media, and track engagement using OAuth 1.0a or Bearer token authentication.

pussy-riot-expert

Embody the collective voice and methodology of the Russian feminist punk protest group Pussy Riot, using spectacular transgression, collective identity, and punk politics to challenge authoritarian power.

cloudthinker-ai

Structures a Request for Comments (RFC) document for proposing significant technical changes that require cross-team input and approval, guiding authors through problem definition, proposed solution, alternatives analysis, and rollout planning.

DAX performance optimization for semantic models. Automatically invoke when the user asks to "optimize DAX", "fix slow DAX", "DAX performance", "tune a measure", "debug a measure", "DAX anti-patterns", or mentions slow queries, server timings, or DAX authoring.

Access Google's most advanced AI models using the Gemini API in Agent Platform (formerly Vertex AI) with SDK installation, authentication, and code examples.

Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.

gitnexus-exploring

Use when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. Examples: "How does X work?", "What calls this function?", "Show me the auth flow"

Expert patterns for Plaid API integration including Link token flows, transactions sync, identity verification, Auth for ACH, balance checks, webhook handling, and fintech compliance best practices. Use when: plaid, bank account linking, bank connection, ach, account aggregation.

Expert patterns for Plaid API integration including Link token flows, transactions sync, identity verification, Auth for ACH, balance checks, webhook handling, and fintech compliance best practices. Use when: plaid, bank account linking, bank connection, ach, account aggregation.

Search and retrieve academic papers from arXiv using their free REST API. No API key needed. Search by keyword, author, category, or ID. Combine with web_extract or the ocr-and-documents skill to read full paper content.

Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.

srednoff888-art

api-platform-agent

Agent profile for review API platform contracts, versioning, auth, rate limits, SDK clients, and developer experience. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.

matlab-write-audio-plugin

Guide authoring of Audio Toolbox plugins (audioPlugin, audioPluginSource) that pass validateAudioPlugin and generate deployable VST/AU code. Use when creating audio effect or generator plugins, writing classdef files inheriting from audioPlugin, or troubleshooting validateAudioPlugin failures.

construct-ai-primary

escalation-management

Use when encountering blockers, unresolved issues, or problems beyond your authority or capability. This skill provides a structured escalation process ensuring issues are escalated to the right level with proper context, and tracked through resolution.

supabase-edge-function-builder

Use when building or planning a Supabase Edge Function for authenticated server logic, webhooks, background triggers, third-party integrations, or privileged operations. Trigger on requests to create or review edge functions in a Supabase system.

Search and retrieve academic papers from arXiv using their free REST API. No API key needed. Search by keyword, author, category, or ID. Combine with web_extract or the ocr-and-documents skill to read full paper content.

gemini-interactions-api

Authenticate, initialize, and use the stateful Gemini Interactions API for multi-turn conversations, streaming, structured output, and function calling on the Gemini Enterprise Agent Platform.

Manage Hugging Face Hub resources: download/upload models, datasets, spaces; manage repos, buckets, collections, discussions, and cache; run SQL queries on datasets; authenticate and manage tokens.

huggingface-papers

Look up and read Hugging Face paper pages in markdown, and use the papers API for structured metadata such as authors, linked models/datasets/spaces, Github repo and project page.

azure-postgres-ts

Connect to Azure Database for PostgreSQL Flexible Server from Node.js/TypeScript using the pg package with support for password and Microsoft Entra ID authentication.

api-connector-builder

Adds a new API connector or provider to a repository by matching its existing integration pattern exactly, including layout, config, auth, error handling, tests, and wiring.

performing-user-behavior-analytics

Detect anomalous user activities including impossible travel, unusual access patterns, privilege abuse, and insider threats using SIEM-based behavioral baselines and statistical analysis.

24.6k · bundle

performing-ios-app-security-assessment

Conduct authorized iOS application security assessments using Frida, Objection, and static analysis to evaluate app security posture against OWASP MASTG standards.

24.6k · bundle

performing-binary-exploitation-analysis

Analyze ELF binaries for exploitation vectors using checksec, ROPgadget, and pwntools for buffer overflow and ROP chain development during authorized security testing and CTF challenges.

24.6k · bundle

conducting-wireless-network-penetration-test

Assess the security of WiFi infrastructure through authorized penetration testing, including weak encryption detection, handshake capture, evil twin attacks, and network segmentation validation.

24.6k · bundle

exploiting-template-injection-vulnerabilities

Detect and exploit Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution during authorized penetration tests.

24.6k · bundle

performing-open-source-intelligence-gathering

Collects publicly available information about a target organization to identify attack surfaces, social engineering targets, technology stacks, and credential exposures for authorized security testing.

24.6k · bundle

testing-for-xss-vulnerabilities-with-burpsuite

Identify and validate cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.

24.6k · bundle

analyzing-email-headers-for-phishing-investigation

Parse and analyze email headers to trace the origin of phishing emails, verify sender authenticity, and identify spoofing through SPF, DKIM, and DMARC validation.

24.6k · bundle