Plugins

12 plugins

Privacy Data Protection Skills

Privacy Data Protection Skills from mukul975/Privacy-Data-Protection-Skills.

100 skills · plugin

@snoodleboot-io

Prompticorn from snoodleboot-io/prompticorn.

2 skills · plugin

Produkthaftung und Produktrecht: Produktsicherheit, GPSR, ProdHaftG, deliktische Produzentenhaftung, Right to Repair, Software-/OTA-Updates, digitale Produktlebenszyklen, Rückruf, Marktüberwachung und Launch-Review.

3 skills · plugin

Planning & Product

PRDs, roadmaps, OKRs, discovery and product strategy.

23 skills · plugin

Product Idea to PRD

For product managers to structure and validate a new product concept.

11 skills · plugin

Product Manager Skills

Product Manager Skills from deanpeters/Product-Manager-Skills.

56 skills · plugin

Praxis from ConcertoNotes/codex-plugins.

7 skills · plugin

@alirezarezvani

13 product skills with 17 Python tools: product manager toolkit (RICE, PRDs), agile product owner, product strategist, UX researcher, UI design system, competitive teardown, landing page generator, SaaS scaffolder, product analytics, experiment designer, product discovery, roadmap communicator, code-to-prd, research summarizer, apple-hig-expert.

10 skills · plugin

Launch on Product Hunt

Launch a product on Product Hunt by researching, preparing assets, and executing the launch playbook.

3 skills · plugin

Presets from amplifthq/oh-my-dsh.

4 skills · plugin

Execution and product management skills: PRDs, OKRs, roadmaps, sprints, pre-mortems, stakeholder maps, user stories, prioritization frameworks, and more.

16 skills · plugin

Prediction Market Arbitrage

Compare Polymarket probabilities with options-implied probabilities to find arbitrage opportunities.

4 skills · plugin

Results for “pr”

12,050 skills

Aeon Vuln Scanner

Audits trending open-source repos for exploitable vulnerabilities using Semgrep, TruffleHog, osv-scanner, and Slither, then routes findings to responsible disclosure channels (PVR for code flaws, public PRs for dependency CVEs).

Business Contact Social Links Skill

Extract official websites and social media profiles (LinkedIn, Facebook, X/Twitter, Instagram, YouTube, TikTok) from a company name or website URL using automated browser scripts.

Mapping Mitre Attack Techniques

Maps observed adversary behaviors, security alerts, and detection rules to MITRE ATT&CK techniques and sub-techniques to quantify detection coverage and guide control prioritization.

24.6k · bundle

Performing Ioc Enrichment Automation

Automates multi-source enrichment of IPs, domains, URLs, and file hashes using VirusTotal, AbuseIPDB, Shodan, GreyNoise, URLScan.io, and MISP to provide contextual risk scoring and disposition recommendations for SOC analysts.

24.6k · bundle

Building Soc Metrics And Kpi Tracking

Builds SOC performance metrics and KPI tracking dashboards measuring Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), alert quality ratios, analyst productivity, and detection coverage using SIEM data.

24.6k · bundle

Analyzing Network Traffic With Wireshark

Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns, diagnose protocol issues, extract artifacts, and support incident response investigations on authorized network segments.

24.6k · bundle

Conducting Post Incident Lessons Learned

Facilitate structured post-incident reviews to identify root causes, document what worked and failed, and produce actionable recommendations to improve future incident response.

24.6k · bundle

Performing Red Team Phishing With Gophish

Automates GoPhish phishing simulation campaigns using the Python gophish library to create email templates, configure SMTP profiles, import targets, launch campaigns, and analyze results for security awareness assessment.

24.6k · bundle

Building Role Mining For Rbac Optimization

Apply bottom-up and top-down role mining techniques to discover optimal RBAC roles from existing user-permission assignments, reducing role explosion and enforcing least privilege.

24.6k · bundle

Detecting Modbus Command Injection Attacks

Detect command injection attacks against Modbus TCP/RTU protocol in ICS environments by monitoring for unauthorized write operations, anomalous function codes, malformed frames, and deviations from established communication baselines.

24.6k · bundle

Building Phishing Reporting Button Workflow

Deploy a phishing report button in email clients and build an automated triage workflow that analyzes user-reported suspicious emails, extracts IOCs, and provides feedback to reporters.

24.6k · bundle

Reverse Engineering Android Malware With Jadx

Reverse engineer malicious Android APK files using JADX decompiler to analyze Java/Kotlin source code, identify malicious functionality including data theft, C2 communication, privilege escalation, and overlay attacks.

24.6k · bundle

Detecting Qr Code Phishing With Email Security

Detect and prevent QR code phishing (quishing) attacks that bypass traditional email security by embedding malicious URLs in QR code images within emails.

24.6k · bundle

Analyzing Threat Actor Ttps With Mitre Navigator

Map advanced persistent threat (APT) group tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework using the ATT&CK Navigator and attackcti Python library.

24.6k · bundle

Performing Windows Artifact Analysis With Eric Zimmerman Too

Parse and analyze Windows forensic artifacts including MFT, registry hives, prefetch files, event logs, LNK files, and jump lists using Eric Zimmerman's EZ Tools suite and KAPE.

24.6k · bundle

Pitch Deck Visuals

Create investor-ready pitch deck visuals using the inference.sh CLI, with a 12-slide framework, typography and color rules, and slide-by-slide design guidance.

Muapi Chibi Collage Effect

Transforms a lifestyle photo into a polished chibi clone sticker diary image, preserving the original person photorealistically while adding 5-8 kawaii mini-clones, scrapbook doodles, and handwritten-style captions.

Muapi Interior Design Visualizer

Generates interior design visualizations by creating an empty room image and furnishing it with AI, or by redesigning a user-provided room photo.

Provides a catalog of cinematic transition techniques (zoom-through, cut-the-curve, waterfall cut, etc.) with GSAP parameters for velocity-matched seams and in-scene motion.

Wired Inspired Design Analysis

Analyzes and recreates Wired magazine's editorial design language: a strict black-and-white duet, proprietary serif/sans typographic system, square buttons, magazine-style story grid, and hairline borders.

50.9k · bundle

Provides a structured CLI workflow for Android APK reverse engineering, covering decompilation with jadx and apktool, smali modification, repackaging, signing, and Frida dynamic hooking, with optional native .so analysis via IDA or radare2.

12.8k · bundle

agentskillexchange

Mdn Web Docs Fetcher

Fetches MDN Web Docs content via the Yari API and search index, including browser compatibility data, Web API references, and CSS property documentation, with offline lookups using the BCD npm package.

agentskillexchange

Owasp Zap API Fuzzer

Automates REST API security testing using the OWASP ZAP Python SDK, running active scans, SQL injection probes, and XSS tests against OpenAPI specs with structured vulnerability reports.

Guides AI agents through Test-Driven Development with 42 prioritized rules covering the red-green-refactor cycle, test design, isolation, data management, assertions, organization, performance, and strategy.

Explains Solana's architecture and protocol internals, covering the SVM execution engine, account model, consensus, transactions, validator economics, data layer, development tooling, and token extensions using Helius blog posts, SIMDs, and Agave/Firedancer source code.

High-performance DataFrame library for Python ETL, analytics, and pandas migration. Use for expression-based data manipulation with lazy query optimization, parallel execution, streaming out-of-core processing, Arrow interoperability, and optional GPU execution.

Explains Solana's architecture and protocol internals, covering the SVM execution engine, account model, consensus, transactions, validator economics, data layer, development tooling, and token extensions using Helius blog posts, SIMDs, and Agave/Firedancer source code.

mariadb-corporation

Mariadb Create Trigger

Covers MariaDB-specific CREATE TRIGGER syntax and behavior, including OR REPLACE, DEFINER, multiple trigger events, FOLLOWS/PRECEDES ordering, OLD/NEW rules, and restrictions. Use when writing, generating, or reviewing CREATE TRIGGER statements for MariaDB.

cloudthinker-ai

Manages and monitors dbt projects, model runs, and test results via dbt CLI and dbt Cloud API, covering run status, test failures, source freshness, and manifest analysis.

Wp Admin Codemirror

Integrates WordPress's bundled CodeMirror editor into admin pages using wp_enqueue_code_editor() and wp.codeEditor.initialize(), covering MIME selection, linter handles, settings filters, and programmatic control for syntax-highlighted textareas.

Evaluates image captions by converting them into scene graphs and computing an F-score over semantic propositions, measuring how well a generated caption captures the meaning of an image compared to human references.

Paper Quick Reader

AI 论文速读 Skill：三档深度（裸读 / 引导 / 精读）+ 页码级 Provenance 防幻觉 + 多篇对比。触发词：论文速读、读这篇论文、抓核心观点、论文对比、多篇对比、与我研究方向的关联、第几页提到 X、这篇论文的数据集怎么构造的、论文精读、 paper summary、summarize this paper、compare these papers、literature skim、extract methodology。不做：论文检索、文献管理、论文翻译、扫描件 OCR、论文写作 / 降重。

brycewang-stanford

Use to convert references to Cell Press author–date style — in-text "(Smith et al., 2021)", an alphabetical reference list by first author with full author lists, journal names spelled out. This is the OPPOSITE of Science's numbered-by-appearance style.

Ad Pass The Hash

Exploit Active Directory environments using Pass-the-Hash (PtH). This skill details how to authenticate to remote systems using the NTLM hash of a user's password instead of the plaintext password, enabling lateral movement and privilege escalation without cracking hashes.

Verificar o status atual do projeto Railway para este diretório. Use quando o usuário perguntar "status railway", "está rodando", "o que está deployado", "status de deployment" ou sobre uptime. NÃO para queries de variáveis ou configuração - use a skill railway-environment para isso.

When the user wants to optimize, improve, or increase conversions on any marketing page or form — including homepage, landing pages, pricing pages, feature pages, lead capture forms, or contact forms. Also use when the user says 'CRO,' 'conversion rate optimization,' 'this page isn't...