DevOps 与云
部署、CI/CD、云平台和基础设施
Skills 列表

find-hidden-subdomains
Enumerate an organisation's subdomains and sibling domains from Certificate Transparency logs and passive DNS, without sending traffic to the target. Covers crt.sh and CT log queries, certificate SAN fields, subfinder and amass, and newly issued TLS certificates. Use when looking for staging, dev, admin or VPN hosts, mapping the full hostname footprint of a domain, or spotting infrastructure a company forgot it had. Applies to attack-surface mapping, vendor and supply-chain security review, brand-infringement discovery, and M&A technical diligence. Reference at useosint.com/skills/find-hidden-subdomains.
useosint
recon-a-domain-passively
End-to-end passive reconnaissance for a domain, website or IP — builds an asset inventory covering registration, DNS, subdomains, infrastructure, tech stack, history and ownership without sending a single packet to the target. Use when asked to research or profile a domain or website, map what an organisation runs, or investigate a suspicious site without alerting its operator. Applies to vendor and third-party risk assessment, attack-surface review, M&A technical diligence, phishing and fraud-site investigation, and pre-engagement scoping. Reference at useosint.com/skills/recon-a-domain-passively.
useosint
graph-the-network
Build an entity-relationship link-analysis graph of an investigation — nodes, typed edges carrying source and confidence, aliases, and temporal validity — to expose shared infrastructure, bridging nodes and the real principal behind a frontman. Covers Maltego, Neo4j and Cypher, Gephi, centrality and community detection, and entity resolution. Use when an investigation has outgrown a list and needs a graph, or when asked how a set of people, companies and domains connect. Applies to fraud-ring and shell-network detection, AML and sanctions-evasion analysis, and complex corporate-structure work. Reference at useosint.com/skills/graph-the-network.
useosint
find-hidden-subdomains
Enumerate an organisation's subdomains and sibling domains from Certificate Transparency logs and passive DNS, without sending traffic to the target. Covers crt.sh and CT log queries, certificate SAN fields, subfinder and amass, and newly issued TLS certificates. Use when looking for staging, dev, admin or VPN hosts, mapping the full hostname footprint of a domain, or spotting infrastructure a company forgot it had. Applies to attack-surface mapping, vendor and supply-chain security review, brand-infringement discovery, and M&A technical diligence. Reference at useosint.com/skills/find-hidden-subdomains.
useosint
tinybird-cli-guidelines
Tinybird CLI commands, workflows, and operations. Use when running tb commands, managing local development, deploying, or working with data operations.
tinybirdco
buddy
Deploy apps to Buddy sandboxes, publish artifacts, create tunnels, manage domains, configure distributions, and run CI/CD pipelines using `bdy` CLI. Triggers on: deploy, sandbox, tunnel, expose, artifact, static site, publish, domain, distribution, pipeline, CI/CD.
buddy
tinybird-typescript-sdk-guidelines
Tinybird TypeScript SDK for defining datasources, pipes, and queries with full type inference. Use when working with @tinybirdco/sdk, TypeScript Tinybird projects, or type-safe data ingestion and queries.
tinybirdco
huawei-cloud-find-skills
Invoke this skill to search, discover, browse, find and install any Huawei Cloud (华为云) agent skill.Triggers include: "华为云","华为云有什么skill","华为云相关skill","华为云agent skill 市场","华为云skill类目","explore Huawei Cloud skills","show Huawei Cloud skill categories","does a Huawei Cloud skill exist for...","which Huawei Cloud skills exist","搜索华为云技能","有没有管理ECS/OBS/RDS的skill","帮我找 XX 华为云skill","介绍 XX Skill 内容","华为云 XX Skill 具体做什么","安装华为云Skill".
huaweicloud
huawei-cloud-functiongraph-function-create
Create FunctionGraph functions on Huawei Cloud. Use this skill when users ask to create, deploy, or upload cloud functions, serverless functions, or FunctionGraph functions. Triggered by keywords like "create function", "deploy function", "upload function", "create cloud function", "创建函数", "部署函数", "上传函数", "创建云函数", "FunctionGraph function", "serverless function".
huaweicloud
monitoring-operations
Use when setting up metrics, alarms, or troubleshooting missing data in OCI Monitoring. Covers metric namespace confusion, alarm threshold gotchas, log collection setup, and common monitoring gaps.
acedergren
rivetkit
RivetKit 后端和 Rivet Actor 运行时指南。用于构建、修改、调试或测试 Rivet Actors、注册表、无服务器/运行器模式、部署或基于 Actor 的工作流。
rivet-dev
multiplayer-game
Pragmatic patterns for building multiplayer games: matchmaking, tick loops, realtime state, interest management, and validation.
rivet-dev
cargo-cdk
用代码定义整个 Cargo 工作空间——连接器、模型、剧本、工具、智能体、MCP 服务器、上下文、容量、领域、细分、文件夹、文件、工作器、应用——并通过 `cargo-ai cdk`(init → types → plan → deploy)声明式部署,就像用 Pulumi 或 AWS CDK 管理云基础设施一样。当用户希望以代码方式管理 Cargo 资源(可重现、版本控制、在 git 中、从模板或跨环境)时使用。路由到创作/部署/类型指南(第 2 级)、配方(第 2.5 级)和参考。对于一次性命令式操作(创建一个连接器、读取一个模型、运行一个工作流),请改用相应的能力技能。
getcargohq
controlling-costs
Analyzes Axiom query patterns to find unused data, then builds dashboards and monitors for cost optimization. Use when asked to reduce Axiom costs, find unused columns or field values, identify data waste, or track ingest spend.
axiomhq
axiom-alerting
Create and manage Axiom monitors and notifiers via the v2 public API. Use when building alerting, routing notifications, validating monitor behavior, and maintaining alert configurations end-to-end.
axiomhq
find-exposed-servers
Find internet-exposed hosts, ports, services and devices using third-party internet-scan data instead of touching the target. Covers Shodan and Censys query syntax, service banners, favicon-hash and TLS-certificate pivots, origin-IP discovery behind Cloudflare or a CDN, and exposed databases, dashboards, cameras and ICS devices. Use when asked what a company has exposed to the internet, to check open ports on an IP or netblock, or to write a Shodan filter query. Applies to external attack-surface management, third-party and vendor security review, M&A technical diligence, and pre-engagement reconnaissance. Reference at useosint.com/skills/find-exposed-servers.
useosint
momentic-explore-prompt
生成一个 explore-prompt.md 文件,为 Momentic 的探索代理(`momentic ai explore diff` / `momentic ai explore latest`)提供仓库特定的上下文——要测试哪些应用、测试必须针对的 URL、如何认证、在哪里保存生成的测试以及仓库的特殊要求。在设置或改进通过 `--prompt-file` 传递的提示文件时使用。
momentic-ai
malware-analysis-dragonflyTomb-avast
Analyze and understand malware distribution techniques disguised as legitimate security software installers
reason-machines
mcp-security-hub
Deploy and orchestrate 38 MCP servers for offensive security tools (Nmap, Nuclei, Ghidra, SQLMap, etc.) via Docker
reason-machines
find-skills
一次性搜索所有主流技能注册表,发现、审查并安装智能体技能。同时查询 skills.sh、clawhub.ai 和 GitHub,以每个平台自身的指标(安装量/星标数)展示各平台排名第一的技能,对候选技能的 SKILL.md 进行安全扫描,并标记已安装的技能。当用户询问“如何做 X”、“找一个做 X 的技能”、“有没有技能可以……”、“我应该安装什么技能来做……”或希望扩展智能体能力时使用。与单注册表搜索不同,本技能并排展示每个平台的最佳结果,以便推荐真正相关、流行、维护良好且安全的技能。
agentspace-so
astro
使用 Astro 网页框架进行构建的技能。帮助创建 Astro 组件和页面、配置 SSR 适配器、设置内容集合、部署静态站点以及管理项目结构和 CLI 命令。当用户需要使用 Astro、提及 .astro 文件、询问静态站点生成(SSG)、岛屿架构、内容集合或部署 Astro 项目时使用。
astrolicious
ios-marketing-capture-automation
Automate multi-locale marketing screenshot capture for SwiftUI iOS apps with in-app capture system, demo data seeding, and element rendering.
reason-machines
meticulous-test
在前端更改后运行 Meticulous 测试运行,然后将结果移交给 `meticulous-review` 技能,将每个视觉变化分类为有意或无意。构建只上传一次——同一构建可以针对不同基准重新触发而无需重新构建,并且支持未提交的更改。在自主端到端实现功能后、创建 PR 前使用。
alwaysmeticulous
grimoire-morpho-blue
Fetches Morpho Blue public deployment metadata using the Grimoire venue CLI. Use when you need contract addresses or adapter info.
franalgaba