Browse Skills — Page 214

pencil-ui-designer

partme-ai/full-stack-skills

"Orchestrates Pencil design system initialization by routing framework requests to the correct pencil-ui-design-system-* skill. Use when the user explicitly mentions Pencil and wants to initialize a design system (antd, Bootstrap, Element Plus, Layui, uView, Vant, uCharts, ECharts), set up component libraries, or create design tokens in a .pen file."

pencilkit

dpearson2699/swift-ios-skills

Add Apple Pencil drawing with PKCanvasView, PKToolPicker, PKDrawing serialization/export, stroke inspection, and PencilKit/PaperKit handoffs. Use when building drawing apps, annotation features, handwriting capture, signature fields, content-version-safe ink workflows, or Apple Pencil-powered experiences on iOS/iPadOS/visionOS.

pennylane

K-Dense-AI/scientific-agent-skills

Hardware-agnostic quantum ML framework with automatic differentiation. Use when training quantum circuits via gradients, building hybrid quantum-classical models, or needing device portability across IBM/Google/Rigetti/IonQ. Best for variational algorithms (VQE, QAOA), quantum neural networks, and integration with PyTorch/JAX/TensorFlow. For hardware-specific optimizations use qiskit (IBM) or cirq (Google); for open quantum systems use qutip.

penpot-uiux-design

github/awesome-copilot

'Comprehensive guide for creating professional UI/UX designs in Penpot using MCP tools. Use this skill when: (1) Creating new UI/UX designs for web, mobile, or desktop applications, (2) Building design systems with components and tokens, (3) Designing dashboards, forms, navigation, or landing pages, (4) Applying accessibility standards and best practices, (5) Following platform guidelines (iOS, Android, Material Design), (6) Reviewing or improving existing Penpot designs for usability. Triggers: "design a UI", "create interface", "build layout", "design dashboard", "create form", "design landing page", "make it accessible", "design system", "component library".'

pension-buyout-strukturierung-und-de-risking

Klotzkette/claude-fuer-deutsches-recht

Pension Buyout und De-Risking: Buy-in Buy-out Longevity Swap Versichererauswahl Term Sheets regulatorische BaFin-Genehmigung VAG-Paragraphen-236-242 Transaktionsstrukturierung fuer Direktzusagen-Abloesung und Risikominimierung im Duesseldorfer Boutique-Stil.

pensionsmodelle-fuenf-durchfuehrungswege

Klotzkette/claude-fuer-deutsches-recht

Vergleich und Auswahl der fuenf Durchfuehrungswege der betrieblichen Altersversorgung (Direktzusage Unterstuetzungskasse Pensionskasse Pensionsfonds Direktversicherung) mit Entscheidungsmatrix Bilanz- und Risiko-Tradeoffs sowie Auswirkungen auf IFRS/HGB fuer Konzerne im Stil von Treuenfels Yamamoto.

pentagi

TerminalSkills/skills

>-

pentest

HoangNguyen0403/agent-skills-standard

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

pentest-checklist

benjaminasterA/antigravity-awesome-skills

This skill should be used when the user asks to \"plan a penetration test\", \"create a security assessment checklist\", \"prepare for penetration testing\", \"define pentest scope\", \"foll...

pentest-checklist-v2

diegosouzapw/awesome-omni-skills

Pentest Checklist workflow skill. Use this skill when the user needs Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pentest-commands

benjaminasterA/antigravity-awesome-skills

This skill should be used when the user asks to \"run pentest commands\", \"scan with nmap\", \"use metasploit exploits\", \"crack passwords with hydra or john\", \"scan web vulnerabilities ...

pentest-commands-v2

diegosouzapw/awesome-omni-skills

Pentest Commands workflow skill. Use this skill when the user needs Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

pentesting-ajp

xalgord/xalgorix

Testing Apache JServ Protocol (AJP13) connectors (default 8009/TCP) for the Ghostcat LFI/RCE vulnerability (CVE-2020-1938), trusted-request-attribute abuse, AJP secret brute forcing, and reaching the Tomcat Manager via an nginx/Apache AJP proxy during authorized engagements.

pentesting-couchdb

xalgord/xalgorix

Testing Apache CouchDB document databases (default HTTP port 5984, HTTPS 6984) for unauthenticated/admin-party access, database dumping over the REST API, default/weak credentials, the CVE-2017-12635 privilege-escalation admin-creation bug and CVE-2017-12636/CVE-2018-8007 remote-code-execution paths, plus Erlang EPMD cookie abuse during authorized engagements.

pentesting-dns

xalgord/xalgorix

Testing DNS services (default 53/TCP+UDP, 5353/UDP mDNS) for zone transfers (AXFR), version/banner disclosure, subdomain and reverse-lookup enumeration, open recursion/amplification, DNSSEC and CAA misconfiguration, and Active Directory SRV record discovery during authorized engagements.

pentesting-docker

xalgord/xalgorix

Testing the Docker Engine remote API (default 2375/TCP plaintext, 2376/TCP TLS) for unauthenticated access leading to instant host takeover by mounting the host filesystem into a privileged container, plus secret/credential extraction and container-escape pivoting during authorized engagements.

pentesting-docker-registry

xalgord/xalgorix

Testing Docker Registry / Distribution services (default 5000/TCP, HTTP or HTTPS) for unauthenticated catalog access, image and blob/manifest extraction, weak basic-auth, and supply-chain image backdooring (push poisoned WordPress/SSH images) during authorized engagements.

pentesting-elasticsearch

xalgord/xalgorix

Testing Elasticsearch search/analytics clusters (default HTTP port 9200, transport 9300) for disabled authentication and full index dumping, default/weak credentials, write access to indices, and the historical Groovy/MVEL dynamic-scripting remote-code-execution CVEs (CVE-2015-1427, CVE-2014-3120) during authorized engagements.

pentesting-freeipa

xalgord/xalgorix

Enumerating and attacking FreeIPA domains during authorized engagements — anonymous and authenticated LDAP

pentesting-ftp

xalgord/xalgorix

Testing FTP services (default port 21, plus FileZilla admin 14147) for anonymous access, default/weak credentials, FTP bounce port scanning and protocol relay, writable webroot uploads, and dangerous vsFTPd/ProFTPD configuration during authorized engagements.

pentesting-imap

xalgord/xalgorix

Testing IMAP services (default ports 143 cleartext, 993 IMAPS) for weak/default credentials and brute force, NTLM info disclosure, cleartext credential exposure, capability enumeration, and authenticated mailbox access/data extraction via raw IMAP commands and curl during authorized engagements.

pentesting-ipmi

xalgord/xalgorix

Testing IPMI / BMC out-of-band management interfaces (default 623/UDP, sometimes TCP) for the cipher-zero authentication bypass, RAKP password-hash retrieval, anonymous/default BMC credentials, cleartext password storage, and host takeover via KVM/SOL during authorized engagements.

pentesting-kerberos

xalgord/xalgorix

Testing the Kerberos authentication service (88/tcp and 88/udp) in Active Directory during authorized

pentesting-ldap

xalgord/xalgorix

Testing LDAP / LDAPS directory services (389, 636, and Global Catalog 3268/3269) including Active Directory

pentesting-memcached

xalgord/xalgorix

Testing Memcached distributed memory caching servers (default port 11211 TCP/UDP) for unauthenticated stats/version access, slab-based key dumping and cached-data exfiltration, cache poisoning, and the UDP reflection/amplification DDoS primitive during authorized engagements.

pentesting-mongodb

xalgord/xalgorix

Testing MongoDB document databases (default ports 27017 and 27018) for no-auth/unauthenticated access, weak credentials, database and collection dumping, predictable ObjectID enumeration, config-based auth bypass, and the MongoBleed unauthenticated memory-disclosure CVE during authorized engagements.

pentesting-msrpc

xalgord/xalgorix

Testing the Microsoft RPC (MSRPC / DCE-RPC) endpoint mapper and exposed RPC interfaces during authorized

pentesting-mssql

xalgord/xalgorix

Testing Microsoft SQL Server (default port 1433, UDP 1434 browser) for default/weak SA credentials, Windows-auth and NTLM relay/coercion, xp_cmdshell OS command execution, linked-server lateral movement, and OLE/BULK file read-write primitives during authorized engagements.

pentesting-mysql

xalgord/xalgorix

Testing MySQL / MariaDB database services (default port 3306) for empty/default root credentials, authentication-bypass and version CVEs, FILE-privilege data theft, and the INTO OUTFILE webshell / lib_mysqludf_sys UDF remote-code-execution primitives during authorized engagements.

pentesting-netbios

xalgord/xalgorix

Testing NetBIOS over TCP/IP services during authorized engagements. Covers the NetBIOS Name Service (137/udp,

pentesting-nfs

xalgord/xalgorix

Testing NFS services (default port 2049, with rpcbind/mountd on 111 and dynamic ports) for exported share enumeration, missing authentication, UID/GID impersonation, no_root_squash/no_all_squash misconfiguration, subtree_check export escape, and group-based file access (e.g., /etc/shadow) during authorized engagements.

pentesting-ntp

xalgord/xalgorix

Testing NTP services (default 123/UDP for time data and legacy control, 4460/TCP for NTS-KE/TLS) for monlist/Mode-7 amplification exposure, remote query/control leakage, time-shift MITM, weak NTS-KE TLS, and known ntpd/chrony/ntpd-rs CVEs during authorized engagements.

pentesting-oracle

xalgord/xalgorix

Testing Oracle Database via the TNS Listener (default ports 1521, plus secondary listeners 1522-1529) for SID disclosure/bruteforce, default and weak account credentials, TNS listener misconfiguration and poisoning, and ODAT-driven file read/write and OS command-execution primitives during authorized engagements.

pentesting-pop3

xalgord/xalgorix

Testing POP3 services (default ports 110 cleartext, 995 POP3S) for weak/default credentials and brute force, NTLM info disclosure, cleartext credential exposure, capability enumeration, and authenticated mailbox retrieval/data extraction via raw POP3 commands during authorized engagements.

pentesting-postgresql

xalgord/xalgorix

Testing PostgreSQL database services (default port 5432, fallback 5433) for trust-auth and default/weak credentials, role/privilege enumeration, the COPY ... FROM PROGRAM command-execution primitive, large-object and server-file read/write, CREATEROLE privilege escalation, and extension/config-file RCE during authorized engagements.

pentesting-rabbitmq

xalgord/xalgorix

Testing RabbitMQ / AMQP message brokers (default 5672/TCP plaintext, 5671/TCP TLS; management 15672) for default guest credentials, anonymous/SASL login, message sniffing via topic/stream/event-exchange binds, queue-deletion DoS (CVE-2024-51988), Authorization-header log leakage, and message-to-RCE sinks during authorized engagements.

pentesting-rdp

xalgord/xalgorix

Testing the Remote Desktop Protocol (RDP, 3389/tcp ms-wbt-server) during authorized engagements. Covers

pentesting-redis

xalgord/xalgorix

Testing Redis in-memory data stores (default port 6379) for unauthenticated access, weak AUTH credentials, keyspace dumping, and the high-impact RCE primitives - module load (system.exec), webshell/cron write via CONFIG SET dir + dbfilename + SAVE, SSH authorized_keys write, Lua sandbox escape CVEs, and master-slave replication abuse - during authorized engagements.

pentesting-rsync

xalgord/xalgorix

Testing rsync daemon services (default port 873) for unauthenticated module listing and access, weak/default credentials and brute force, arbitrary file read/download and write/upload (including authorized_keys planting), and rsyncd.conf/secrets misconfiguration during authorized engagements.

pentesting-smb

xalgord/xalgorix

Testing SMB/CIFS file-sharing services (TCP 445, and 139 over NetBIOS) on Windows and Samba hosts during

pentesting-smtp

xalgord/xalgorix

Testing SMTP services (default ports 25, 465/SSL, 587/submission) for open relays, user enumeration (VRFY/EXPN/RCPT), NTLM info disclosure, weak/no authentication, SPF/DKIM/DMARC spoofing gaps, Secure Email Gateway bypass, and SMTP smuggling during authorized engagements.

pentesting-snmp

xalgord/xalgorix

Testing SNMP services (default 161/UDP for agents, 162/UDP for traps, 10161/10162 over TLS/DTLS) for default/guessable community strings, sensitive MIB/OID data harvesting, writable rwcommunity strings, and SNMP-to-RCE via NET-SNMP-EXTEND-MIB during authorized engagements.

pentesting-ssh

xalgord/xalgorix

Testing SSH services (default port 22) for weak algorithms/host keys, default and brute-forceable credentials, key-based auth gaps, SFTP shell escapes and tunneling, auth-method downgrade, and high-impact CVEs (regreSSHion CVE-2024-6387, XZ backdoor CVE-2024-3094, Erlang/OTP CVE-2025-32433, libssh CVE-2018-10933) during authorized engagements.

pentesting-telnet

xalgord/xalgorix

Testing Telnet services (default port 23) for cleartext credential capture, default/weak and hard-coded credentials, NTLM info disclosure, option negotiation issues, and code-execution/DoS CVEs (inetutils telnetd NEW_ENVIRON option injection CVE-2026-24061, D-Link CVE-2024-45698, NETGEAR CVE-2023-40478, inetutils DoS CVE-2022-39028) during authorized engagements.

pentesting-tftp

xalgord/xalgorix

Testing TFTP services (default port 69/UDP) for unauthenticated file read/write, default path enumeration (no directory listing), exposure of device configuration files and ROM/firmware images, and arbitrary upload during authorized engagements.

pentesting-vnc

xalgord/xalgorix

Testing VNC remote desktop services using the Remote Frame Buffer (RFB) protocol during authorized

pentesting-voip

xalgord/xalgorix

Testing VoIP / SIP infrastructure (default 5060/UDP+TCP, 5061/TLS, RTP media on high UDP ports) for endpoint and extension enumeration, REGISTER/digest credential cracking, unauthenticated INVITE toll fraud, SIP Digest Leak, RTP eavesdropping, and Asterisk PBX misconfiguration abuse during authorized engagements.

pentesting-winrm

xalgord/xalgorix

Testing Windows Remote Management (WinRM / WS-Management) during authorized engagements. WinRM exposes an

pentesting-x11

xalgord/xalgorix

Testing the X Window System (X11) display server during authorized engagements. X11 listens on TCP

people-analytics

borghei/Claude-Skills

>

people-analytics-reporting

Significant-Gravitas/skills-catalog

Generate headcount, attrition, diversity, or org health reports. Use when pulling a headcount snapshot for leadership, analyzing turnover trends by team, preparing diversity representation metrics, or assessing span of control and flight risk across the org.

people-operations

modu-ai/cowork-plugins

>

people-ops-getting-started

Significant-Gravitas/skills-catalog

Set up people operations work from policies, roles, calendars, data rules, and HR and counsel contacts.

people-report

anthropics/knowledge-work-plugins

Generate headcount, attrition, diversity, or org health reports. Use when pulling a headcount snapshot for leadership, analyzing turnover trends by team, preparing diversity representation metrics, or assessing span of control and flight risk across the org.

people-search

extruct-ai/gtm-skills

>

peopledatalabs-automation

ComposioHQ/awesome-claude-skills

"Automate Peopledatalabs tasks via Rube MCP (Composio). Always search tools first for current schemas."

peptide-properties-calculation

InternScience/scp

Calculate peptide sequence properties including molecular weight, isoelectric point, extinction coefficient, and chemical formula.

per-concept-documentation

MicrosoftDocs/semantic-kernel-docs

Required when reviewing, updating, auditing, or creating any concept documentation page. Covers code accuracy checks against source repos, language parity across zone pivots, parity table comments, and structural consistency.

per-item-records

trailofbits/calcifier

Describe each item in an inventory and save one record per item.

per-repo-conventions

microsoft/amplifier-foundation

>

per-section-tracking

lyndonkl/claude

Breaks down weekly and trailing-4-week substacker performance per Substack section, keyed on section tags in corpus/published/ and section-map.md. Reports opens, clicks, subs-attributable-to-section per section with ≥3 posts. Skips if section-map has <2 sections. Feeds Curator with pruning candidates (sections with 4-week median z ≤ -1.0). Use when section-map has ≥2 live sections. Trigger keywords: per-section, section performance, section metrics, section pruning, differential engagement.

percy

TerminalSkills/skills

When the user wants to perform visual testing with automated screenshot comparison using Percy by BrowserStack. Also use when the user mentions "percy," "visual testing," "screenshot comparison," "visual diff," "percy snapshot," or "BrowserStack visual." For Storybook-specific visual testing, see chromatic.

perennial-seller-holiday

simbajigege/book2skills

Apply Ryan Holiday''s perennial seller framework. Trigger on: "will this work last?", "position my book/product", "build an enduring launch".

perf

boshu2/agentops

Profile and optimize hotspots.

perf-activation-recompute

NVIDIA-NeMo/Megatron-Bridge

Validate and use selective and full activation recompute in Megatron Bridge to reduce GPU memory usage at the cost of extra compute.

perf-analysis

NVIDIA/skills

>

perf-analyzer

ComposioHQ/awesome-claude-plugins

"Use when synthesizing perf findings into evidence-backed recommendations and decisions."

perf-astro

tech-leads-club/agent-skills

Astro-specific performance optimizations for 95+ Lighthouse scores. Covers critical CSS inlining, compression, font loading, and LCP optimization. Use when optimizing Astro site performance, improving Astro Lighthouse scores, or configuring astro-critters. Do NOT use for non-Astro sites (use perf-web-optimization or core-web-vitals) or running Lighthouse audits (use perf-lighthouse).

perf-baseline-manager

ComposioHQ/awesome-claude-plugins

"Use when managing perf baselines, consolidating results, or comparing versions. Ensures one baseline JSON per version."

perf-benchmarker

ComposioHQ/awesome-claude-plugins

"Use when running performance benchmarks, establishing baselines, or validating regressions with sequential runs. Enforces 60s minimum runs (30s only for binary search) and no parallel benchmarks."

perf-code-paths

ComposioHQ/awesome-claude-plugins

"Use when mapping code paths, entrypoints, and likely hot files before profiling."

perf-compare

Significant-Gravitas/AutoGPT

Shared measurement recipe for AutoGPT performance work. Compares a baseline and a candidate in Sentry (two releases, two environments such as preview pr-<n> deploys, or two time windows) per transaction: count, p50/p95/p99, failure rate, and a trace-clustered bootstrap verdict of faster / slower / no detectable change / not enough data, with exit codes agents can branch on. Works for span duration, web vitals (measurements.lcp) or any numeric span field. TRIGGER when an agent needs to show a change made the backend or frontend faster or slower, compare a preview against a control or dev, check a release after merge on dev or prod, or check for regressions.

perf-cpu-offloading

NVIDIA-NeMo/Megatron-Bridge

Validate and use CPU offloading in Megatron Bridge, including layer-level activation offloading and fractional optimizer state offloading with HybridDeviceOptimizer.

perf-cuda-graphs

NVIDIA-NeMo/Megatron-Bridge

Validate and use CUDA graph capture in Megatron Bridge, including local full-iteration graphs and Transformer Engine scoped graphs for attention, MLP, and MoE modules.

perf-expert-parallel-overlap

NVIDIA-NeMo/Megatron-Bridge

Validate and use MoE expert-parallel communication overlap in Megatron-Bridge, including overlap_moe_expert_parallel_comm, delay_wgrad_compute, and flex dispatcher backends such as DeepEP and HybridEP.

perf-host-analysis

NVIDIA/skills

>

perf-host-optimization

NVIDIA/skills

Profiles and optimizes TensorRT-LLM host/CPU overhead using line_profiler (with nsys support planned). Runs iterative profile-analyze-optimize-validate rounds. Use when GPU utilization is low or optimizing PyExecutor throughput.

perf-hybrid-context-parallel

NVIDIA-NeMo/Megatron-Bridge

Operational guide for enabling hierarchical context parallelism in Megatron-Bridge, including config knobs, code anchors, pitfalls, and verification.

perf-investigation-logger

ComposioHQ/awesome-claude-plugins

"Use when appending structured perf investigation notes and evidence."

perf-lighthouse

tech-leads-club/agent-skills

Run Lighthouse audits locally via CLI or Node API, parse and interpret reports, and set performance budgets. Use when measuring site performance, understanding Lighthouse scores, setting up budgets, or integrating audits into CI. Triggers on: lighthouse, run lighthouse, lighthouse score, performance audit, performance budget. Do NOT use for fixing specific performance issues (use perf-web-optimization or core-web-vitals) or Astro-specific optimization (use perf-astro).

perf-megatron-fsdp

NVIDIA-NeMo/Megatron-Bridge

Operational guide for enabling Megatron FSDP in Megatron-Bridge, including config knobs, code anchors, pitfalls, and verification.

perf-memory-tuning

NVIDIA-NeMo/Megatron-Bridge

Techniques for reducing peak GPU memory in Megatron Bridge — expandable segments, parallelism resizing, activation recompute, CPU offloading constraints, and common OOM fixes.

perf-moe-comm-overlap

NVIDIA-NeMo/Megatron-Bridge

MoE expert-parallel communication overlap in Megatron Bridge. Covers dispatch/combine overlap, flex dispatcher backends, and expert wgrad scheduling.

perf-moe-dispatcher-selection

NVIDIA-NeMo/Megatron-Bridge

Choose the right MoE token dispatcher (`alltoall`, DeepEP, or HybridEP) for the hardware, EP degree, and optimization stage. Summarizes patterns from DSV3, Qwen3, Qwen3-Next, and VLM bring-up work.

perf-moe-hardware-configs

NVIDIA-NeMo/Megatron-Bridge

Representative MoE training playbooks by hardware platform and model family. Summarizes rounded throughput bands, parallelism patterns, and common tuning stacks.

perf-moe-long-context

NVIDIA-NeMo/Megatron-Bridge

Long-context MoE training guidance for Megatron Bridge. Covers CP sizing, selective recompute, dispatcher choices, and practical patterns from DSV3, Qwen3, and Qwen3-Next long-context experiments.

perf-moe-optimization-workflow

NVIDIA-NeMo/Megatron-Bridge

Systematic workflow for MoE training optimization in Megatron Bridge, based on the Megatron-Core MoE paper. Covers the Three Walls framework, parallel folding, recompute strategy, dispatcher choice, and CUDA-graph bring-up.

perf-moe-vlm-training

NVIDIA-NeMo/Megatron-Bridge

Practical guidance for training MoE VLMs in Megatron Bridge. Compares FSDP and 3D-parallel approaches, using rounded lessons from Qwen3-VL, Qwen3-Next, and other multimodal experiments.

perf-nsight-compute-analysis

NVIDIA/skills

>

perf-nsight-systems

NVIDIA/skills

>-

perf-optimization

NVIDIA/skills

>

perf-parallelism-strategies

NVIDIA-NeMo/Megatron-Bridge

Operational guide for choosing and combining parallelism strategies in Megatron Bridge, including sizing rules, hardware topology mapping, and combined parallelism configuration.

perf-profile

pixel-cellar/Claude-Code-Game-Studios

结构化的性能分析工作流。识别瓶颈、与性能预算对比测量，并生成带有优先级排序的优化建议。

perf-profiler

ComposioHQ/awesome-claude-plugins

"Use when profiling CPU/memory hot paths, generating flame graphs, or capturing JFR/perf evidence."

perf-sequence-packing

NVIDIA-NeMo/Megatron-Bridge

Validate and use packed sequences and long-context training in Megatron-Bridge, distinguishing offline packed SFT for LLMs from in-batch packing for VLMs, and applying the right CP constraints.

perf-theory-gatherer

ComposioHQ/awesome-claude-plugins

"Use when generating performance hypotheses backed by git history and code evidence."

perf-theory-tester

ComposioHQ/awesome-claude-plugins

"Use when running controlled perf experiments to validate hypotheses."

perf-torch-cuda-graphs

NVIDIA/skills

>-

perf-torch-sync-free

NVIDIA/skills

>-

perf-tp-dp-comm-overlap

NVIDIA-NeMo/Megatron-Bridge

Operational guide for enabling TP, DP, and PP communication overlap in Megatron-Bridge, including config knobs, code anchors, pitfalls, and verification.