安全

Automated penetration testing toolkit for security assessment, vulnerability scanning, and automated security reporting

malware-detection-awareness

Understanding security risks in software distribution and recognizing illegitimate software packages

report-malicious-repository

Identify and report potentially malicious software repositories masquerading as legitimate security tools

wxmini-security-audit

Automated WeChat mini-program security auditing framework using Claude Code Agent Teams with 7 specialized agents for comprehensive static analysis

security-awareness-malicious-repository-detection

Detect and analyze potentially malicious repositories disguising as legitimate software cracks or pirated tools

avast-security-analysis

Analyze and understand Avast antivirus security mechanisms, behavior shields, and protection components for security research

qqmusic

10security

QQ Music — search songs, albums, playlists, music videos, artists; daily recommendations; music charts & rankings; AI-powered playlists; personalized listening reports & music insights. QQ音乐助手：搜索、每日推荐、排行榜、AI歌单、听歌报告、AI解读。

tencentmusic

ai-music

8security

通过 `runcomfy` CLI 在 RunComfy 上生成 AI 音乐——一个智能路由到音乐模型目录的工具。路由到 ElevenLabs AI Music Generation（高级 44.1 kHz 立体声人声曲目，5 秒–5 分钟，$0.0083/秒）和 ACE Step / ACE Step 1.5（StepFun-AI 开放权重，标签驱动作曲，多语言歌词，$0.0002–0.0003/秒，约便宜 27 倍），以及 ACE Step 音频修补（在现有曲目内重新生成时间范围）和 ACE Step 音频扩展（在曲目前或后扩展）。根据用户的实际意图选择正确的模型——高级人声片段、廉价背景音乐库、多语言流行歌曲、修复糟糕的副歌、将 30 秒草稿延长为 2 分钟剪辑——并提供每个模型文档化的提示模式以及最小的 `runcomfy run` 调用。触发词包括“生成音乐”、“制作歌曲”、“AI 音乐”、“背景音乐”、“器乐曲目”、“配乐”、“广告曲”、“主题音乐”、“免版税音乐”、“作曲”、“带歌词的音乐”、“扩展音乐”、“修复这首歌”、“修补音乐”或任何明确的生成或编辑音乐的请求。

skills-collective

emblem-ai-agent-wallet

7security

Connect to EmblemVault and manage crypto wallets via EmblemAI. Supports Solana, Ethereum, Base, BSC, Polygon, Hedera, and Bitcoin. Use when the user wants to trade crypto, check balances, swap tokens, interact with blockchain wallets, or create and use profile-scoped agent wallets.

emblemcompany

meticulous-cli-update

7security

检查 Meticulous CLI（@alwaysmeticulous/cli）是否已安装且为最新版本，若未安装或不是最新则进行安装/更新。该技能在每个其他 Meticulous 技能开始时调用，因为 CLI 正在积极开发中，频繁发布变更和改进。

alwaysmeticulous

grimoire-polymarket

6security

通过 Grimoire 场所 CLI 包装器（基于官方 Polymarket CLI）查询 Polymarket 市场数据和 CLOB 状态，并管理 CLOB 订单。

franalgaba

integration-privy

6security

Add Privy authentication to a Solana Expo Android app on top of Mobile Wallet Adapter, using Sign-In-With-Solana. Use when installing @privy-io/expo, mounting PrivyProvider, logging a user in with useLoginWithSiws, linking a wallet to an existing Privy account, reading the Privy access token from a backend, or debugging a Privy plus MWA setup.

solana-mobile

dependencies-audit

MUST be used whenever fixing dependency issues in a Flows app. This skill finds AND fixes vulnerabilities, outdated packages, deprecated dependencies, and license issues — it does not just report them. Triggers: dependencies, packages, fix dependencies, update packages, fix vulnerabilities, npm audit fix, pnpm audit fix, CVE fix, outdated, deprecated, supply chain, license.

cognitedata

security

MUST be used whenever fixing security issues in a Flows app, or before shipping any feature that handles credentials, user input, or external data. This skill finds AND fixes security problems — it does not just report them. Do NOT skip this when the user asks for a security fix, security hardening, or vulnerability remediation — run every step in order. Triggers: security, security fix, security hardening, vulnerability, XSS, injection, credentials, secrets, auth, authentication, authorization, token, sensitive data, input validation, CORS, CSP, dependency audit.

cognitedata

migrate-app-to-flows

MUST be used when migrating a legacy Dune app to the new Flows app hosting infrastructure. Orchestrates the full migration: audits current state, updates app.json to appsApi infra, delegates auth wiring to setup-flows-auth, creates or updates manifest.json network permissions, and updates deploy scripts to @cognite/cli. Use this whenever a user says 'migrate to Flows', 'migrate to new infra', 'move from dune to flows', 'migrate legacy app', or wants to move their existing app to the new Flows app hosting.

cognitedata

clawhub-skill-vetting

Vet ClawHub skills before installation. Use when the user asks about evaluating, auditing, or safely installing OpenClaw/ClawHub skills, or when a skill’s trustworthiness is in question.

hugomrtz

yt-dlp

Download videos and extract audio from various platforms using yt-dlp. Use when user provides a video URL, asks to download a video, or when conversation contains video links from YouTube, Twitter/X, Vimeo, TikTok, Instagram, etc.

lwmxiaobei

agentwallet

4security

Wallets for AI agents with x402 and MPP payment signing, referral rewards, and policy-controlled actions.

frames-engineering

configuring-connections

4security

Configure Celigo connections and iClients -- credential and configuration objects that authenticate to external systems. Use when creating or editing connections, choosing auth methods, setting up OAuth, managing iClients (shared credential stores), or troubleshooting connectivity.

celigo

configuring-guardrails

4security

Configure Celigo guardrail resources -- safety and compliance checks that validate data flowing through integrations. Use when creating or editing guardrails for PII detection, content moderation, or AI-based evaluation rules.

celigo

tigris-security-access-control

3security

Use when configuring CORS, rotating access keys, setting bucket policies, or securing Tigris storage — covers key lifecycle, roles, CORS rules, presigned URL security, audit checklist

tigrisdata

tigris-sdk-guide

3security

Use when choosing between Tigris-native SDKs and AWS S3-compatible SDKs — covers which SDK to use per language, CLI preference, and when AWS SDKs are the only option

tigrisdata

ace-step

2security

通过 `runcomfy` CLI 在 RunComfy 上使用 ACE Step 生成、修补和扩展音乐。ACE Step 是 StepFun-AI 的开源权重音乐基础模型——基于标签的作曲（流派、情绪、乐器）、支持多语言歌词和段落标记、5 秒到 4 分钟的立体声输出，每秒 $0.0002–0.0003（比 ElevenLabs Music 便宜约 27 倍）。四个端点：ACE Step 文本转音频（默认）、ACE Step 1.5 文本转音频（50+ 语言歌词、改进的结构化歌词处理）、ACE Step 音频修补（在现有音轨内重新生成时间范围）、ACE Step 音频扩展（在现有音轨前后扩展）。触发词包括 "ace step"、"ace-step"、"acestep"、"ACE music"、"open music model"、"cheap AI music"、"inpaint audio"、"audio inpaint"、"extend music"、"audio outpaint"、"lengthen track"、"music with tags" 或任何明确要求使用 ACE Step 生成或编辑音乐的请求。

doany-ai

ai-music

2security

通过 `runcomfy` CLI 在 RunComfy 上生成 AI 音乐——一个智能路由，覆盖音乐模型目录。路由到 ElevenLabs AI 音乐生成（高级 44.1 kHz 立体声人声曲目，5 秒–5 分钟，$0.0083/秒）和 ACE Step / ACE Step 1.5（StepFun-AI 开放权重，标签驱动作曲，多语言歌词，$0.0002–0.0003/秒，约便宜 27 倍），以及 ACE Step 音频修补（在现有曲目内重新生成时间范围）和 ACE Step 音频外延（在曲目前后扩展）。根据用户的实际意图选择正确的模型——高级人声片段、廉价背景音乐库、多语言流行歌曲、修复糟糕的副歌、将 30 秒草稿延长为 2 分钟剪辑——并提供每个模型的文档化提示模式以及最小的 `runcomfy run` 调用。触发词包括“生成音乐”、“制作歌曲”、“AI 音乐”、“背景音乐”、“器乐曲目”、“配乐”、“广告曲”、“主题音乐”、“免版税音乐”、“作曲”、“带歌词的音乐”、“扩展音乐”、“修复这首歌”、“修补音乐”或任何明确的生成或编辑音乐的请求。

doany-ai