Browse Skills — Page 112

experimentation-analytics

rampstackco/claude-skills

How to read experiment results without fooling yourself. Confidence intervals, p-values, multiple testing, sequential testing, CUPED, heterogeneous treatment effects, ratio metrics, network effects, dashboard reconciliation, and the interpretation failures that produce confidently wrong shipping decisions.

experimentation-platform-orchestrator

rampstackco/claude-skills

A platform decision framework for experimentation. When to use Statsig vs PostHog vs GrowthBook vs Optimizely vs Amplitude vs Eppo vs Kameleoon. How to migrate between them. How to coordinate when multi-platform is genuinely warranted. The decisions that compound for years and the ones you can defer. Triggers on which experimentation platform, choose Statsig vs PostHog, evaluate experimentation tools, switch experimentation platform, migrate from Optimizely, consolidate experimentation tools, multi-platform experimentation, experimentation platform decision, ab test platform selection, feature flag platform vs experiment platform, warehouse-native experiments, vendor lock-in experimentation. Also triggers when a team is asking about cost, governance, or migration cost across experimentation tools, or when an evaluation is starting.

experiments

microsoft/vscode

Use when adding, changing, or reviewing a VS Code A/B experiment, either an experiment-controlled setting or a treatment read with the assignment service, and when deciding whether and where to log an `experimentTrigger` event for a triggered ExP scorecard.

expert-interview

inhouseseo/superseo-skills

Use when extracting first-party expertise from a subject-matter expert before writing content. Produces a knowledge document of contrarian takes, specific examples, and surprising outcomes that AI can't fabricate.

expert-interview-generator

aipoch/medical-research-skills

Generates a full expert interview article including introduction, Q&A body, and summary based on interview questions and expert background. Use when you have interview questions and an expert profile and need a polished article.

expert-interview-topics

aipoch/medical-research-skills

Generates professional interview titles and questions based on expert background and topic. Provides a structured workflow for interview preparation.

expert-panel

OneWave-AI/claude-skills

Assemble 2-3 complementary experts to collaboratively analyze anything. Experts work together to explore topics from multiple expert angles.

expert-reviewing

microsoft/vstest

Route code and dependency changes to relevant review dimensions based on affected files and folders. Use when reviewing PRs, including Dependabot updates, GitHub Actions and generated workflow changes, or specific vstest subsystems.

expert-secrets

guia-matthieu/clawfu-skills

"Apply Russell Brunson's Expert Secrets framework to build a mass movement around expertise — create a charismatic leader persona, design a new-opportunity offer, craft belief-breaking stories, and structure a Perfect Webinar that converts. Use when: positioning as an expert to monetize knowledge, creating an online course or coaching program, designing a webinar sales presentation, building a tribe with an identity and cause, crafting an Epiphany Bridge origin story, or packaging expertise into a value ladder."

experts

remotion-dev/remotion

Maintain Remotion's experts directory and its generated assets. Use when adding, removing, or editing experts; changing experts data or portraits; rendering expert cards; or regenerating the homepage experts animation for Chrome and Safari.

explain

softspark/ai-toolkit

Explains code/architecture with Mermaid diagrams and sequence flows. Triggers: what does X do, how does Y work, explain code, sequence diagram.

explain-code

AgnosticUI/agnosticui

Explain what code does in plain English

explain-like-socrates

diegosouzapw/awesome-omni-skills

EXPLAIN LIKE SOCRATES workflow skill. Use this skill when the user needs > and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

explain-like-socrates-v2

diegosouzapw/awesome-omni-skills

EXPLAIN LIKE SOCRATES workflow skill. Use this skill when the user needs > and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

explain-this

tobihagemann/turbo

Explain whatever the user is pointing at right now in plain language: a pending question, a piece of code, an error, a command output, or an artifact like a plan or findings report. Use when the user asks to \"explain this\", \"what am I being asked\", \"what's happening right now\", \"help me understand this\", \"what does this mean\", \"what does this error mean\", \"what is this code doing\", or \"what do these options mean\".

explain-this-pr

Varnan-Tech/opendirectory

Takes a GitHub PR URL or the current branch and writes a plain-English explanation of what it does and why, then posts it as a PR comment. Use when asked to explain a PR, summarize a pull request, write a plain-English description of a PR, add a summary comment to a PR, or understand what a PR changes. Trigger when a user says "explain this PR", "summarize this pull request", "what does this PR do", "add a comment explaining the PR", or shares a GitHub PR URL and asks what it does.

explainability

Aperivue/medsci-skills

>

explainer-video-guide

inferen-sh/superpowers

Explainer video production guide: scripting, voiceover, visuals, and assembly. Covers script formulas, pacing rules, scene planning, and multi-tool pipelines. Use for: product demos, how-it-works videos, onboarding videos, social explainers. Triggers: explainer video, how to make explainer, product video, demo video, video production, video script, animated explainer, product demo video, tutorial video, onboarding video, walkthrough video, video pipeline

explainshell

taracodlabs/aiden

Explain shell commands in plain English (explainshell.com)

explanation-docs

existential-birds/beagle

Explanation documentation patterns for understanding-oriented content - conceptual guides that explain why things work the way they do. Use when writing an explanation doc, conceptual guide, understanding/background doc, design rationale, or architecture explanation, or when asked how/why something works. Builds on the docs-style core writing principles.

explanation-generation

yogsoth-ai/de-anthropocentric-research-engine

SOP: 为异常现象生成候选解释列表

explanation-traces

notque/vexjoy-agent

Query and display structured decision traces from routing, agent selection, and skill execution.

explicit-checker

bitwize-music-studio/claude-ai-music-skills

Scans lyrics for explicit content and verifies that explicit flags match actual content. Use before Suno generation or release to ensure accurate content ratings.

explicit-configuration

TheBushidoCollective/han

Prefer explicit configuration over framework defaults to prevent environment-dependent failures

Exploit Development & Payload Engineering

Masriyan/Claude-Code-CyberSecurity-Skill

Proof-of-concept development, payload crafting, shellcode analysis, and exploitation technique research for authorized security testing

exploiting-active-directory-certificate-services-esc1

mukul975/Anthropic-Cybersecurity-Skills

Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1 vulnerability to request certificates as high-privileged users and escalate domain privileges during authorized red team assessments.

exploiting-active-directory-with-bloodhound

mukul975/Anthropic-Cybersecurity-Skills

BloodHound is a graph-based Active Directory reconnaissance tool that uses graph theory to reveal hidden and unintended relationships within AD environments. Red teams use BloodHound to identify attac

exploiting-ai-model-file-rce

xalgord/xalgorix

Testing machine-learning model files and model-loading services for remote code execution caused by insecure

exploiting-api-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-arbitrary-write-to-execution

xalgord/xalgorix

Methodology for converting an arbitrary-write (write-what-where) or write-anything-anywhere primitive into

exploiting-bgp-hijacking-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-broken-function-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

Discover and exploit broken link hijacking vulnerabilities by identifying references to expired domains, decommissioned cloud resources, and dead external services that can be claimed by an attacker.

exploiting-client-side-path-traversal

xalgord/xalgorix

Exploiting Client-Side Path Traversal (CSPT, also known as On-Site Request Forgery) where attacker-controlled

exploiting-client-side-template-injection

xalgord/xalgorix

Exploiting Client-Side Template Injection (CSTI) where a frontend framework (AngularJS, Vue, Mavo, Alpine.js)

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users via S4U2self and S4U2proxy extensions for lateral movement and privilege escalation.

exploiting-container-escapes

xalgord/xalgorix

Escaping Docker/containerd containers to the host during authorized engagements via privileged-container

exploiting-cookie-based-vulnerabilities

xalgord/xalgorix

Testing and exploiting cookie-related weaknesses including attribute misconfiguration (SameSite, HttpOnly,

exploiting-cross-site-script-inclusion-xssi

xalgord/xalgorix

Identifying and exploiting Cross-Site Script Inclusion (XSSI), where the script tag's exemption from the

exploiting-csv-formula-injection

xalgord/xalgorix

Identifying and exploiting CSV/Excel formula (DDE) injection in import and export features where

exploiting-dangling-markup-injection

xalgord/xalgorix

Exploiting dangling markup / scriptless HTML injection to exfiltrate clear-text secrets, steal form data,

exploiting-dbus-and-socket-command-injection

xalgord/xalgorix

Enumerating the D-Bus system bus and abusing root-exposed methods, policy and Polkit misconfigurations, and

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-dependency-confusion

xalgord/xalgorix

Identifying and exploiting dependency confusion (substitution) attacks where a package manager resolves an

exploiting-excessive-data-exposure-in-api

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-file-upload-vulnerabilities

xalgord/xalgorix

Identifying and exploiting insecure file upload functionality to achieve remote code execution, stored XSS, path traversal, and denial of service during authorized penetration tests.

exploiting-format-string-vulnerabilities

xalgord/xalgorix

Methodology for exploiting format string bugs where attacker-controlled data reaches the format argument of

exploiting-glibc-heap-vulnerabilities

xalgord/xalgorix

Methodology for exploiting glibc ptmalloc2 heap vulnerabilities during authorized engagements — use-after-free,

exploiting-http-request-smuggling

mukul975/Anthropic-Cybersecurity-Skills

Detecting and exploiting HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding parsing discrepancies between front-end and back-end servers.

exploiting-idor-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Identifying and exploiting Insecure Direct Object Reference vulnerabilities to access unauthorized resources by manipulating object identifiers in API requests and URLs.

exploiting-insecure-data-storage-in-mobile

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-insecure-deserialization

mukul975/Anthropic-Cybersecurity-Skills

Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications to achieve remote code execution during authorized penetration tests.

exploiting-integer-overflow-vulnerabilities

xalgord/xalgorix

Methodology for finding and exploiting integer overflow, underflow, truncation, and signedness bugs in native

exploiting-ipv6-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-jwt-algorithm-confusion-attack

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-kerberoasting-with-impacket

mukul975/Anthropic-Cybersecurity-Skills

Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.

exploiting-ldap-injection

xalgord/xalgorix

Exploiting LDAP injection where web applications build LDAP search filters from unsanitized user input,

exploiting-linux-capabilities

xalgord/xalgorix

Enumerating and abusing Linux capabilities (file and process) for local privilege escalation and container

exploiting-linux-kernel-vulnerabilities

xalgord/xalgorix

Methodology for discovering and exploiting Linux kernel memory-corruption vulnerabilities (UAF, OOB read/write,

exploiting-macos-dyld-hijacking-and-process-injection

xalgord/xalgorix

Exploiting macOS dynamic-linker and process-injection primitives during authorized engagements - DYLD_INSERT_LIBRARIES injection, @rpath/missing-dylib hijacking with re-export proxy libraries, dyld interposing and fishhook symbol rebinding, Objective-C method swizzling, and Mach task-port thread hijacking (task_for_pid) including arm64e PAC handling - using otool, codesign, install_name_tool, gcc/clang, and lldb, with EndpointSecurity detection notes.

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

Discover and exploit mass assignment vulnerabilities in REST APIs to escalate privileges, modify restricted fields, and bypass authorization controls by injecting unexpected parameters in API requests.

exploiting-ms17-010-eternalblue-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

MS17-010 (EternalBlue) is a critical vulnerability in Microsoft's SMBv1 implementation that allows remote code execution. Originally discovered by the NSA and leaked by the Shadow Brokers in 2017, it

exploiting-nopac-cve-2021-42278-42287

mukul975/Anthropic-Cybersecurity-Skills

Exploit the noPac vulnerability chain (CVE-2021-42278 sAMAccountName spoofing and CVE-2021-42287 KDC PAC confusion) to escalate from standard domain user to Domain Admin in Active Directory environments.

exploiting-nosql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and other NoSQL databases to demonstrate authentication bypass, data extraction, and unauthorized access risks.

exploiting-oauth-misconfiguration

mukul975/Anthropic-Cybersecurity-Skills

Identifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations including redirect URI manipulation, token leakage, and authorization code theft during security assessments.

exploiting-orm-injection

xalgord/xalgorix

Exploiting ORM injection (ORM Leak) where applications pass attacker-controlled keys/operators directly into

exploiting-os-command-injection

xalgord/xalgorix

Identifying and exploiting OS command injection vulnerabilities in web

exploiting-postmessage-vulnerabilities

xalgord/xalgorix

Exploiting insecure cross-window messaging where senders use a wildcard targetOrigin (leaking sensitive

exploiting-prototype-pollution-in-javascript

mukul975/Anthropic-Cybersecurity-Skills

Detect and exploit JavaScript prototype pollution vulnerabilities on both client-side and server-side applications to achieve XSS, RCE, and authentication bypass through property injection.

exploiting-race-condition-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Detect and exploit race condition vulnerabilities in web applications using Turbo Intruder's single-packet attack technique to bypass rate limits, duplicate transactions, and exploit time-of-check-to-time-of-use flaws.

exploiting-reverse-tab-nabbing

xalgord/xalgorix

Identifying and exploiting reverse tabnabbing, where a link opened with target="_blank" without

exploiting-saml-authentication-flaws

xalgord/xalgorix

Identifying and exploiting SAML SSO weaknesses including XML Signature Wrapping (XSW1-8), comment

exploiting-server-side-includes-esi-injection

xalgord/xalgorix

Exploiting Server-Side Includes (SSI) and Edge-Side Includes (ESI) injection where unsanitized input is

exploiting-server-side-request-forgery

mukul975/Anthropic-Cybersecurity-Skills

Identifying and exploiting SSRF vulnerabilities to access internal services, cloud metadata, and restricted network resources during authorized penetration tests.

exploiting-smb-vulnerabilities-with-metasploit

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-sql-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

>

exploiting-sql-injection-with-sqlmap

mukul975/Anthropic-Cybersecurity-Skills

Detecting and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.

exploiting-stack-buffer-overflows

xalgord/xalgorix

Methodology for discovering and exploiting stack-based buffer overflows in native binaries during authorized

exploiting-subdomain-takeover-vulnerabilities

xalgord/xalgorix

Identifying and exploiting dangling DNS records pointing to unclaimed cloud services, enabling subdomain takeover for phishing, cookie stealing, and authentication bypass during authorized penetration tests.

exploiting-sudo-suid-and-cron-misconfigurations

xalgord/xalgorix

Local privilege escalation through sudo rule abuse (GTFOBins, SETENV/LD_PRELOAD/BASH_ENV/PYTHONPATH),

exploiting-template-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Detecting and exploiting Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution.

exploiting-type-juggling-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Exploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent hash verification, and manipulate application logic through type coercion attacks.

exploiting-vulnerabilities-with-metasploit-framework

mukul975/Anthropic-Cybersecurity-Skills

The Metasploit Framework is the world's most widely used penetration testing platform, maintained by Rapid7. It contains over 2,300 exploits, 1,200 auxiliary modules, and 400 post-exploitation modules

exploiting-websocket-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Testing WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.

exploiting-xpath-injection

xalgord/xalgorix

Exploiting XPath injection where applications build XPath/XQuery expressions from unsanitized user input to

exploiting-xslt-server-side-injection

xalgord/xalgorix

Exploiting server-side XSLT injection where an application transforms XML with attacker-influenced

exploiting-zerologon-vulnerability-cve-2020-1472

mukul975/Anthropic-Cybersecurity-Skills

Exploit the Zerologon vulnerability (CVE-2020-1472) in the Netlogon Remote Protocol to achieve domain controller compromise by resetting the machine account password to empty.

exploratory-data-analysis

K-Dense-AI/scientific-agent-skills

Perform comprehensive exploratory data analysis on scientific data files across 200+ file formats. This skill should be used when analyzing any scientific data file to understand its structure, content, quality, and characteristics. Automatically detects file type and generates detailed markdown reports with format-specific analysis, quality metrics, and downstream analysis recommendations. Covers chemistry, bioinformatics, microscopy, spectroscopy, proteomics, metabolomics, and general scientific data formats.

exploratory-test

tobihagemann/turbo

Execute multi-level exploratory testing of the app covering basic functionality, complex operations, adversarial testing, and cross-cutting scenarios, plus usability observations through a UX lens reported separately from defects. Deeper than /smoke-test. Use when the user asks to \"exploratory test\", \"test thoroughly\", \"test all scenarios\", \"deep test\", \"test edge cases\", \"test everything\", \"break it\", \"find bugs by testing\", \"test usability\", or \"check the UX while testing\".

exploratory-testing

686f6c61/alfred-dev

Usar para testing exploratorio con sesiones documentadas. También: probar sin script, buscar bugs, testing manual, edge cases, sesión de testing.

explore

softspark/ai-toolkit

Explores codebase structure, stack, and architecture. Triggers: explore codebase, project structure, stack overview, architecture map.

explore-codebase

686f6c61/alfred-dev

Usar antes de modificar código existente para entender el contexto. Activar cuando el usuario quiera entender el código, saber cómo funciona esto, explorar un repositorio, prepararse antes de modificar, analizar la estructura del proyecto o familiarizarse con una base de código nueva.

explore-data

anthropics/knowledge-work-plugins

Profile and explore a dataset to understand its shape, quality, and patterns. Use when encountering a new table or file, checking null rates and column distributions, spotting data quality issues like duplicates or suspicious values, or deciding which dimensions and metrics to analyze.

explore-resume

yogsoth-ai/de-anthropocentric-research-engine

Understand the user's background comprehensively — technical stack, project experience, research experience, publications, research directions. Allows user to express interest beyond their resume. Execute once only, never re-run.

explorer

supabase/supabase

Build and modify Studio Explorer surfaces, including notebooks, chats, SQL snippets, query cells, and their shared toolbar patterns.

Exploring Alternatives

obra/clank

Try 2-3 different approaches before implementing - don't settle for first design you think of

exploring_dependency_sources

rnett/gradle-mcp

>

exploring-codebases

oaustegard/claude-skills

>-

exploring-data

oaustegard/claude-skills

Exploratory data analysis using ydata-profiling. Use when users upload .csv/.xlsx/.json/.parquet files or request "explore data", "analyze dataset", "EDA", "profile data". Generates interactive HTML or JSON reports with statistics, visualizations, correlations, and quality alerts.

explorium

vm0-ai/vm0-skills

Explorium API for external data enrichment. Use when user mentions "Explorium",