Results for “client”
312 skillsMCP Security Review
Use this skill when reviewing Model Context Protocol (MCP) servers, clients, connectors, tool manifests, hosted MCP deployments, OAuth flows, prompt/tool boundaries, or MCP marketplace choices for security, least privilege, data exposure, prompt injection, and destructive-action risk.
1 · bundle
Specialized Real Estate Buyer Seller
Comprehensive real estate agent assistant for buyer representation, seller representation, listing management, offer negotiation, transaction coordination, and closing support — delivering a world-class client experience from first showing to final closing across residential and investment real estate
2
Trust Boundary Analyzer
Use this when the system needs clear analysis of trusted versus untrusted execution contexts, external inputs, client/server boundaries, provider callbacks, or admin-level code paths. Trigger on requests about trust boundaries, attack surfaces, or where verification must happen.
0
Bitcoin L2 Rgb
RGB protocol: client-side validated smart contracts on Bitcoin + Lightning. Schema-driven contracts, AluVM (RGB VM), rgb-lightning-node for LN integration. USDT-on-RGB rollout. USE WHEN: building RGB contracts, integrating RGB Lightning, comparing with TAP.
28
M365 Agents TS
Build enterprise agents for Microsoft 365, Teams, and Copilot Studio using the Microsoft 365 Agents SDK with Express hosting, AgentApplication routing, streaming responses, and Copilot Studio client integrations.
2.7k
OAUTH
Implements OAuth 2.0/2.1 authorization flows in Fastify applications, including authorization code with PKCE, client credentials, device flow, refresh token rotation, JWT validation, and token introspection/revocation endpoints.
1.9k · bundle
Exploiting Prototype Pollution In Javascript
Detect and exploit JavaScript prototype pollution vulnerabilities on both client-side and server-side applications to achieve XSS, RCE, and authentication bypass through property injection.
24.6k · bundle
Mariadb Create Procedure
Documents MariaDB-specific CREATE PROCEDURE syntax, including OR REPLACE/IF NOT EXISTS exclusivity, DEFINER and SQL SECURITY behavior, parameter modes, DEFAULT values, advisory characteristics, privilege requirements, and the client-side DELIMITER convention.
0
Azure Cosmos DB Py
Build production-grade Azure Cosmos DB NoSQL services with Python/FastAPI, including client setup with dual authentication, service layer CRUD operations, partition key strategies, parameterized queries, and TDD patterns.
2.7k · bundle
Mariadb Import
Bulk-load text files into MariaDB tables using the mariadb-import client, covering table-name-from-filename rules, TAB defaults, --local vs server-side reads, duplicate handling, and parallel loads.
0
Request Smuggling
HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree with the origin on message framing (Content-Length vs Transfer-Encoding), on HTTP/2→HTTP/1 translation, or when exploring client-side desync via browser fetch pipelines.
21 · bundle
Building Phishing Reporting Button Workflow
Deploy a phishing report button in email clients and build an automated triage workflow that analyzes user-reported suspicious emails, extracts IOCs, and provides feedback to reporters.
24.6k · bundle
Init Next Logging
Initializes production-ready logging for a Next.js project using Pino and pino-roll, with file output, log rotation, and request context. Handles server-side and client-side environments, including Vercel/serverless setups.
0 · bundle
Server API
API service-layer patterns — axios/fetch client with interceptors, domain-scoped service objects (UserService, ProductService), auth-token refresh, request cancellation, and error normalisation. Use when adding or reviewing HTTP call sites, organising services under api/ or services/, or centralising cross-cutting request concerns.
0
Revelia
Analisa os efeitos da revelia (CPC 344-346) e suas excecoes (345), tanto quando o cliente e o revel quanto quando a parte contraria e revel. Cobre a presuncao de veracidade dos fatos (344), as quatro hipoteses em que ela NAO opera (345 — litisconsorte contestante, direito indisponivel, falta de instrumento que a lei repute indispensavel, fatos inverossimeis/contraditorios com a prova), a fluencia de prazos sem intimacao (346) e a possibilidade de o revel ingressar e produzir prova. Use quando o operador disser revelia, reu revel, parte nao contestou, efeitos da revelia, presuncao de veracidade, ou meu cliente perdeu o prazo de defesa.
6
Asset Manager
Migrates AEM Cloud Service code from legacy AssetManager APIs (createAssetForBinary, getAssetForBinary, removeAssetForBinary, client-facing createAsset) to Direct Binary Access or in-JVM resolver patterns, covering IMS authentication and service-user setup.
142
Modeling Threats With Opencti
Model threat actors, intrusion sets, campaigns, and TTPs as a STIX 2.1 knowledge graph in OpenCTI using the pycti Python client, connectors, and import workers for structured cyber threat intelligence.
24.6k · bundle
Proposal Writer Brief Proposal With Scope Price Timeline
Turns a short client brief into a complete proposal covering executive summary, pain points, solution, scope, timeline, pricing, ROI, and next steps, with persuasive structure and placeholders for operator-provided details.
2
Dom Based Xss
Exploit Document Object Model (DOM) Based Cross-Site Scripting (XSS) vulnerabilities. Unlike Reflected or Stored XSS, the attack payload is executed purely on the client-side as a result of modifying the DOM environment, often without the payload ever reaching the backend server.
21 · bundle
Httpx Tenacity Asyncio
Use for designing or reviewing resilient asynchronous HTTP call paths that combine HTTPX, Tenacity, and asyncio: client lifetime, time budgets, retry eligibility, backoff, concurrency, cancellation, and idempotency. Do not use for generic HTTPX, retry, or asyncio questions that do not cross these boundaries.
0 · bundle
On Device AI
Patterns for running AI models locally in browsers using WebGPU, Transformers.js, WebLLM, and ONNX Runtime. Zero API costs, full privacy. Use when "on-device AI, browser AI, WebLLM, Transformers.js, WebGPU, edge inference, offline AI, client-side ML, ONNX web, " mentioned.
128 · bundle
Performing Cloud Storage Forensic Acquisition
Perform forensic acquisition and analysis of cloud storage services including Google Drive, OneDrive, Dropbox, and Box by collecting both API-based remote data and local sync client artifacts from endpoint devices.
24.6k · bundle
GRAPHQL
You're a developer who has built GraphQL APIs at scale. You've seen the N+1 query problem bring down production servers. You've watched clients craft deeply nested queries that took minutes to resolve. You know that GraphQL's power is also its danger.
2
Firebase Firestore
Sets up, manages, and executes queries against Cloud Firestore database instances. You MUST unconditionally activate this skill if you plan to use Firestore in any way. Use when listing or creating Firestore databases, configuring security rules, designing data models, writing client SDK queries, or checking indexes.
0 · bundle
GRAPHQL
You're a developer who has built GraphQL APIs at scale. You've seen the N+1 query problem bring down production servers. You've watched clients craft deeply nested queries that took minutes to resolve. You know that GraphQL's power is also its danger.
2
Aisa Youtube Serp Scout
Search YouTube videos, channels, and trends through the AIsa YouTube SERP client. Use when the user asks for content research, competitor tracking, or trend discovery without managing Google credentials. Use when: the user needs YouTube search, trend discovery, channel research, or SERP analysis.
1 · bundle
Github Copilot Plugins
Use for designing, creating, reviewing, or packaging GitHub Copilot and Agent Plugins for Visual Studio Code, including plugin.json, portable skills, MCP components, client-specific agents, commands, and hooks. Do not use for a single standalone skill, ordinary VS Code extensions, or installing an unreviewed plugin.
0 · bundle
Pocketbase Sdk
JavaScript SDK usage for PocketBase client applications. Use when calling PocketBase from frontend or Node.js, authenticating users, subscribing to realtime events, uploading files, or working with the PocketBase JS/TS SDK. Covers CRUD, auth flows, authStore, realtime SSE, file handling, batch operations, and query syntax.
0
Vercel Patterns
React composition and performance optimization patterns from Vercel. Use when building component libraries, refactoring components with prop proliferation, optimizing React/Next.js performance, or designing scalable component architectures. Covers composition patterns, React 19 APIs, performance optimization across waterfalls, bundle size, server/client rendering, and re-render optimization.
1 · bundle
Frontend
World-class frontend engineering - React philosophy, performance, accessibility, and production-grade interfacesUse when "frontend, react, vue, svelte, next.js, nuxt, component, state management, redux, zustand, client side, spa, ssr, hydration, bundle size, web vitals, accessibility, a11y, responsive, css, tailwind, frontend, react, typescript, performance, accessibility, components, state, architecture" mentioned.
128 · bundle
Analyzing IOS App Security With Objection
Perform runtime iOS app security assessments using Objection and Frida to inspect keychain, filesystem, and memory, bypass client-side protections, and evaluate data storage, network, and authentication controls during authorized penetration tests.
24.6k · bundle
Exploiting Excessive Data Exposure In API
Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. Maps to OWASP API3:2023 Broken Object Property Level Authorization.
24.6k · bundle
Deploying Cloudflare Access For Zero Trust
Deploy Cloudflare Access with Cloudflare Tunnel to provide zero trust access to self-hosted and private applications, configuring identity-aware access policies, device posture checks, and WARP client enrollment for VPN replacement.
24.6k · bundle
Github Copilot MCP
Use for designing, creating, reviewing, or debugging Model Context Protocol server configuration for GitHub Copilot in Visual Studio Code, including .vscode/mcp.json, transports, inputs, trust, sandboxing, and tool scope. Do not use for implementing an MCP server, ordinary HTTP clients, or silently installing or starting external software.
0 · bundle
Reversa Docs Storyteller
Narrador do Time Reversa Docs. Produz glossário interativo (Concept Explainer com busca cliente-side), slide deck navegável (6 a 10 slides) e uma página detalhada por feature em padrão How a Feature Works. Ative com /reversa-docs-storyteller, reversa-docs-storyteller, regenerar glossário, refazer deck, páginas por feature.
1
Prowlarr CLI
Manage your Prowlarr indexer hub from the terminal. List and inspect indexers, view query/grab statistics, check health, manage connected *arr applications and download clients, browse search history, and test indexer connectivity. Use when the user mentions Prowlarr, indexers, indexer management, testing indexers, search history, or the indexer hub.
28 · bundle