Plugins

12 plugins

Script authoring templates

4 skills · plugin

Build Blazor Web App with Auth

Install this pack to build a Blazor Web App with authentication and interactive components.

4 skills · plugin

Deploy Azure Infrastructure

Creates databases, caches, and configures authentication, monitoring, and backup.

3 skills · plugin

Skills for Blazor development: component authoring, interactivity, and web application patterns.

9 skills · plugin

Skill Authoring Toolkit

For developers creating and maintaining skills for AI coding agents.

17 skills · plugin

Dotnet Template Engine

.NET Template Engine skills: template discovery, project scaffolding, and template authoring.

6 skills · plugin

Build TypeSpec API for Copilot

Generate TypeSpec API plugin files with REST operations, authentication, and Adaptive Cards.

3 skills · plugin

Azure Identity and Storage with Python

For Python developers building secure Azure applications with authentication and blob storage.

4 skills · plugin

Document Coauthoring Pack

For teams that need to co-author, review, and polish technical documents, proposals, and specs.

11 skills · plugin

Office productivity skills for patent applications, PRD generation, video generation, Remotion programmatic video authoring, and AI writing trope detection

5 skills · plugin

@brycewang-stanford

Twelve-skill bundle covering the Cell manuscript lifecycle: workflow router, scope/significance fit, single-narrative framing, the Highlights + eTOC + Graphical Abstract trio, the ≤150-word Summary, main-text writing, display items, STAR Methods + Key Resources Table, data/code availability, Cell Press author–date references, submission preflight + cover letter, and reviewer rebuttal.

9 skills · plugin

Han Plugin Builder

Guidance for building Claude Code skills, agents, and plugins. The guidance skill answers authoring questions and, run with init, vendors the full guidance set into a repo as a path-scoped rule index so the right guidance surfaces while editing skill and agent files. Opt-in and dependency-free: installed on its own, not pulled in by the han meta-plugin.

3 skills · plugin

Results for “auth”

1,112 skills

Orchestrates multi-stage attack-path planning and execution across reconnaissance, initial access, privilege escalation, lateral movement, and impact assessment for authorized penetration testing.

12.8k · bundle

Provides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.

12.8k · bundle

Diagnose intermittent Wi-Fi issues like buffering, lag, packet loss, and weak coverage through read-only analysis, then safely optimize authorized router settings when evidence supports a change.

Distills the current conversation or a plain-language prompt into a production-ready, self-healing Claude Code skill with pre-flight checks, validation gates, self-review, and learnings capture.

nimoqup046-collab

Optimize content to be cited by AI search systems and LLMs, including AI Overviews, ChatGPT, Perplexity, Claude, and Gemini, through structure, authority, and presence improvements.

kiro-local-account-importer

Imports local Kiro CLI accounts into StaticFlow/llm-access by reading SQLite auth files and calling the local admin API, with proxy assignment and validation.

api-data-sources

Researches authoritative APIs and data sources for a project, producing per-API docs, a data catalog, and an integration blueprint for a React + Supabase + Vercel + AI stack.

Verifies every bibliographic entry in a paper for existence, metadata accuracy, and contextual support using web/DBLP/arXiv lookups, flagging hallucinated authors, wrong years, fabricated venues, and misattributed citations.

lucaspmarie-a11y

Analyze and optimize content for visibility in AI Overviews, ChatGPT, Perplexity, and other AI search systems by evaluating citability, structure, authority, and technical accessibility.

Provides comprehensive NestJS framework patterns with Drizzle ORM integration. Use when building NestJS applications, setting up APIs, implementing authentication, working with databases, or integrating Drizzle ORM. Covers controllers, providers, modules, middleware, guards, interceptors, testing, microservices, GraphQL, and database patterns.

Use the GitHub CLI (gh) to perform core GitHub operations: auth status, repo create/clone/fork, issues, pull requests, releases, and basic repo management. Trigger for requests to use gh, manage GitHub repos, PRs, or issues from the CLI.

Atomic-design guidance for UI Atoms — the smallest single-purpose building blocks (buttons, inputs, icons, labels). Use when authoring or reviewing components under ui/atoms, components/atoms, or when deciding whether a component belongs at the atom level.

supabase-rls-policy-designer

Use when a Supabase app needs Row Level Security policies for multi-tenant access, ownership checks, roles, service paths, or safe data exposure. Trigger on requests to design or review Supabase RLS and SQL authorization logic.

Build multichannel agents for Microsoft 365, Teams, and Copilot Studio using the Microsoft Agents SDK with aiohttp hosting, AgentApplication routing, streaming responses, and MSAL-based authentication.

jetson-set-target

Switch the active Jetson target-platform pointer to an existing profile YAML. Use before customize/build/flash to change target; not for authoring profiles — use jetson-init-target instead.

Fetch any X/Twitter post as clean LLM-friendly JSON, converting x.com, twitter.com, or adhx.com links into structured data with full article content, author info, and engagement metrics.

Provides authoritative, current guidance from OpenAI developer docs using the developers.openai.com MCP server, including model selection, API migration, and prompt-upgrade guidance.

23.3k · bundle

yara-rule-authoring

Write high-quality YARA-X detection rules for malware identification, covering naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction.

Scrapes tweets from X (Twitter) by search query, user handle, or direct URL, returning structured data including text, author info, engagement metrics, media, and hashtags.

fastify-best-practices

Guides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript, covering routes, plugins, validation, error handling, authentication, testing, performance, logging, deployment, and more.

testing-cors-misconfiguration

Identify and exploit Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-domain data access and credential theft during authorized security assessments.

24.6k · bundle

implementing-saml-sso-with-okta

Configure Okta as a SAML 2.0 Identity Provider and implement SP-initiated and IdP-initiated SSO flows with attribute mapping, assertion encryption, and security hardening.

24.6k · bundle

conducting-pass-the-ticket-attack

Extract Kerberos tickets from LSASS memory, inject them into an attacker session, and perform lateral movement to access remote systems as the impersonated user.

24.6k · bundle

implementing-bgp-security-with-rpki

Create Route Origin Authorizations (ROAs) at RIRs, deploy RPKI validator software, and configure Route Origin Validation (ROV) on Cisco and Juniper routers to prevent BGP route hijacking.

24.6k · bundle

analyzing-network-packets-with-scapy

Craft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security testing.

24.6k · bundle

performing-hash-cracking-with-hashcat

Crack password hashes using Hashcat for authorized penetration testing and password policy assessment, supporting dictionary, brute-force, rule-based, and hybrid attacks.

24.6k · bundle

executing-phishing-simulation-campaign

Executes authorized phishing simulation campaigns to assess an organization's susceptibility to email-based social engineering attacks, including scenario design, infrastructure setup, and metric tracking.

24.6k · bundle

Model complex UI behavior as finite state machines with states, events, and transitions to eliminate impossible states and make behavior predictable.

nimoqup046-collab

Optimizes content for AI search systems like AI Overviews, ChatGPT, and Perplexity by analyzing citability, structure, authority, and technical accessibility, and producing a GEO analysis report.

tw-codebase-doctrine

Compile deep repository evidence into artifact-bound correctness doctrine, including authority/law/proof maps, owned invariants, failure archaeology, and knowledge routing, with an optional minimal repository-specific skill portfolio.

Reference for the WooCommerce REST API v4 (namespace wc/v4, since WC 10.2), covering the verified route catalog, v3 vs v4 selection guidance, authentication, and behavior changes.

threat-modeling

Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests. Use when designing new features, reviewing architecture changes, handling sensitive data, or hardening auth/payment/multi-tenant flows.

A CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.

srednoff888-art

backend-engineer-agent

Agent profile for design and implement backend services, API logic, data access, jobs, auth boundaries, and error handling. Use when Codex needs a specialist agent perspective for planning, implementation, review, debugging, validation, or handoff in this domain.

Static OWASP review of app code (injection, headers, deps). Use when "review security" or "check vulnerabilities". Session/route×gate/getSession → audit-auth-flows. Plan-only burndown → plan-security-audit. Table RLS → plan-rls-audit. LLM attacks → audit-llm-security.

theheavenlyd3mon

Discover trending, anticipated, and popular movies and TV shows via the Trakt.tv API from the terminal. No authentication required for read-only discovery. Use when the user asks about what to watch, trending movies, popular shows, or media discovery.