Browse Skills — Page 76

contract-redliner

OneWave-AI/claude-skills

Reads a contract and generates redline suggestions with replacement language. Identifies unfavorable terms, missing protections, ambiguous language, liability exposure, IP risks, termination traps, and auto-renewal gotchas. Produces a contract-review.md with clause-by-clause analysis, risk ratings, tracked changes format, and negotiation talking points. Use when the user wants redline markup, contract markup, or suggested contract edits.

contract-renewal-tracker

Significant-Gravitas/skills-catalog

Extract renewal and notice facts into an owned tracker, with source cites and no automatic renewal or cancellation action.

contract-review

mohitagw15856/pm-claude-skills

Review and summarise any contract or legal agreement. Use when asked to review a contract, check an agreement, flag legal risks, or summarise key clauses. Produces a structured review with key terms, flagged clauses, risk rating, and plain English summary. Not a substitute for qualified legal advice.

contract-review

anthropics/knowledge-work-plugins

>

contract-review-pro

lovstudio/skills

Professional-grade contract review skill that adds comment-based issue annotations without changing original text. Enforces a four-layer review (entity verification, basic, business, legal), writes structured comments (issue type, risk reason, revision suggestion) with risk level encoded via reviewer name, and generates a contract summary, consolidated opinion, and Mermaid business flowchart (with rendered image). Output language must follow the contract’s language.

contract-skill

microsoft/apm

Hermetic Agent Plugins lifecycle contract

contractor-matching-ai

datadrivenconstruction/DDC_Skills_for_AI_Agents_in_Construction

AI-powered contractor matching and selection for construction projects. Analyze contractor capabilities, past performance, certifications, and project requirements to recommend optimal matches.

contracts

anthropics/healthcare

Answer a question across a corpus of contract documents with verified citations. Use when the user asks what a contract says, which contracts have a clause, what changed between amendments, or any question that needs reading and citing across a set of contract files. The corpus must be on the local filesystem (see README).

contracts-and-business-law

Tibsfox/gsd-skill-creator

Contracts, commercial law, and intellectual property essentials for founders, managers, and knowledge workers. Covers the elements of contract formation, common contract types, property rights, consumer protection, employment law basics, and the four IP regimes — patents, copyrights, trademarks, and trade secrets. Use when drafting or reviewing an agreement, protecting an invention or brand, evaluating a licensing deal, or understanding regulatory exposure.

contradiction-derivation

yogsoth-ai/de-anthropocentric-research-engine

Negate a claim, derive logical consequences step by step, detect whether a genuine contradiction or absurdity emerges.

contradiction-detection

yogsoth-ai/de-anthropocentric-research-engine

Evaluate whether a derivation chain has reached a genuine contradiction, absurdity, or inconclusive state.

contradiction-identification

yogsoth-ai/de-anthropocentric-research-engine

Identify technical and physical contradictions in a system through functional modeling and matrix analysis.

contradiction-matrix-lookup

yogsoth-ai/de-anthropocentric-research-engine

Query the 39x39 TRIZ contradiction matrix to find recommended inventive principles for a given technical contradiction.

contradictory-findings-resolver

aipoch/medical-research-skills

Explains why studies on the same biomedical topic reach different or opposing conclusions by auditing differences in population, endpoint definition, sample source, assay or platform, study design, statistical model, adjustment strategy, validation chain, and bias control. It separates true contradiction from apparent contradiction caused by framing or methods. Never fabricate references, PMIDs, DOIs, trial identifiers, dataset details, platform details, study features, or conflict explanations that are not supported by the input.

Contrast Master

Community-Access/accessibility-agents

Color contrast and visual accessibility specialist. Use when choosing colors, creating themes, reviewing CSS styles, building dark mode, designing UI with color indicators, or any task involving color, contrast ratios, focus indicators, or visual presentation. Ensures WCAG AA compliance for all color and visual decisions. Applies to any web framework or vanilla HTML/CSS/JS.

contrast-check

TerminalSkills/skills

>-

contrib-pr

prisma/prisma-next

Open a high-quality external contributor PR against prisma-next. Use when the user is an outside contributor (not a Prisma maintainer) and wants to submit a change as a pull request from a fork. Encodes the contribution flow from CONTRIBUTING.md so the resulting PR passes review on the first round.

contribute

Aperivue/medsci-skills

>

contribute-turbo

tobihagemann/turbo

Submit turbo skill improvements back to the upstream repo. Adapts to repo mode: fork mode creates a PR, source mode pushes directly. Use when the user asks to \"contribute to turbo\", \"submit turbo changes\", \"PR my skill changes\", \"contribute back\", or \"upstream my changes\".

contributing

cloudflare/cloudflare-docs

Use when contributing to the Cloudflare Docs repository — writing or editing documentation pages, choosing content types or components, adding changelog entries, reviewing docs, or learning how to contribute.

contributing-to-awesome-claude

JSONbored/awesome-claude

>-

contributing-to-pi

joelhooks/joelclaw

"Contribute fixes, bug reports, and upstream discussions to badlogic/pi-mono without wasting maintainer time. Use when filing pi issues, preparing pi PRs, debugging whether a bug belongs upstream, or responding to maintainer pushback. Triggers on: 'contribute to pi', 'pi-mono issue', 'upstream pi fix', 'open a pi issue', 'why did Mario reject this', or any work in ~/Code/badlogic/pi-mono meant for upstream."

contribution-analysis

elizaOS/eliza

Calculate the relative contribution of different factors to a response variable using R² decomposition. Use when you need to quantify how much each factor explains the variance of an outcome.

Contributions Hub

Community-Access/accessibility-agents

Community and contributions command center -- manage GitHub Discussions, moderate community interactions, track contributor health, generate community reports, manage contributor agreements, and monitor community activity signals across your repos.

contributor-pipeline-gardening

JSONbored/awesome-claude

>-

contributor-reward

aaronjmars/aeon

Closes the contributor flywheel — turns the weekly fork-contributor-leaderboard ranking into a tier-priced rewards plan, writes it into memory/distributions.yml, and hands off to distribute-tokens for the actual on-chain send

contributor-spotlight

aaronjmars/aeon

Weekly recognition post for one fork operator — converts fork-cohort cohort data into a named human moment (POWER fork callout with their work, stars, and skills enabled)

control

popup-studio-ai/bkit-claude-code

|

control-d-automation

ComposioHQ/awesome-claude-skills

"Automate Control D tasks via Rube MCP (Composio). Always search tools first for current schemas."

control-flow

EpicenterHQ/epicenter

Control flow: early returns, guard clauses, linearizing nested logic. Use for "simplify this", "flatten these conditions", "too many nested ifs".

control-systems-and-dynamics

Tibsfox/gsd-skill-creator

Classical control and system dynamics for engineered systems — feedback and closed-loop control, transfer functions and block diagrams, poles/zeros and stability, time-domain response (rise time, overshoot, settling time), PID controllers and tuning, and frequency response (Bode plots, gain and phase margin). Traces feedback control from the flyball governor to modern controllers. Use when analyzing feedback loops, designing or tuning a PID controller, assessing stability from poles or margins, or characterizing transient response of a dynamic system.

controleur-fiscal

romainsimon/paperasse

|

controlled-perturbation

yogsoth-ai/de-anthropocentric-research-engine

Systematically vary parameters along defined axes, recording performance at each point to identify degradation thresholds.

controlled-waiting

zjunlp/SkillNet

Executes timed waiting using 'wait' or 'wait1' actions to advance the simulation clock. Use when a time-dependent process like plant growth, chemical reaction, or mechanical cycle must progress before you can continue the task.

controlling-spotify

oaustegard/claude-skills

Control Spotify playback and manage playlists via MCP server. Use when user requests playing music, controlling Spotify, creating playlists, searching songs, or managing their Spotify library.

convening-experts

oaustegard/claude-skills

Convenes expert panels for problem-solving. Use when user mentions panel, experts, multiple perspectives, MECE, DMAIC, RAPID, Six Sigma, root cause analysis, strategic decisions, or process improvement.

conventional-branch

github/awesome-copilot

Create Git branches following the Conventional Branch specification (feature/, bugfix/, hotfix/, release/, chore/). Use when creating a new branch, naming a branch, or checking whether a branch name complies with the spec.

conventional-commit

github/awesome-copilot

'Prompt and workflow for generating conventional commit messages using a structured XML format. Guides users to create standardized, descriptive commit messages in line with the Conventional Commits specification, including instructions, examples, and validation.'

conventional-commits

axone-protocol/contracts

Guide for writing conventional commit messages. Use when committing changes, writing commit messages, or reviewing commit history.

conventional-git

samber/cc-skills

Conventional Commits v1.0.0 branch naming, worktree naming, and commit message standards for GitHub and GitLab projects. Use when creating branches, naming worktrees, writing commits, generating commit messages, reviewing branch conventions, or setting up changelog automation. Apply when your project needs consistent git history, SemVer-driven releases, parseable changelog generation, or automatic issue closing. Trigger when the user asks how to name a worktree, create a git worktree, or organize worktrees alongside branches.

conventional-non-oncology-hub-gene

aipoch/medical-research-skills

Generates complete conventional non-oncology bioinformatics research designs from a user-provided disease context, process-related gene family or biological theme, and validation direction. Use when a study centers on multi-dataset bulk transcriptome integration, DEG analysis, process-gene intersection, enrichment analysis, GSEA, PPI hub-gene prioritization, TF/miRNA regulatory networks, ROC-based biomarker evaluation, and immune infiltration analysis. Covers five study patterns (process-DEG discovery, enrichment/GSEA interpretation, hub-gene prioritization, regulatory-network and immune interpretation, multi-layer public validation) and always outputs Lite / Standard / Advanced / Publication+ with a recommended primary plan, stepwise workflow, figure plan, validation hierarchy, minimal executable version, publication upgrade path, and strictly verified literature retrieval.

conventional-oncology-hub-gene

aipoch/medical-research-skills

Generates complete conventional oncology bulk-transcriptome biomarker and hub-gene research designs from a user-provided cancer type and study direction. Always use this skill whenever a user wants to design, plan, or build a tumor bioinformatics study centered on differential expression, prognostic filtering or risk modeling, PPI-based hub-gene prioritization, diagnostic/prognostic evaluation, clinical association, immune infiltration context, methylation context, and optional tissue or cell validation. Covers five study patterns (signature-first prognostic workflow, hub-gene-first biomarker workflow, hybrid signature-to-hub workflow, immune-context biomarker workflow, translational validation workflow) and always outputs four workload configs (Lite / Standard / Advanced / Publication+) with recommended primary plan, step-by-step workflow, figure plan, validation strategy, minimal executable version, publication upgrade path...

conventions-db

stella/stella

Apply when writing or modifying database schema, queries, or migrations.

conventions-i18n

stella/stella

Internationalization conventions for Stella. Apply when adding or modifying user-facing strings.

conventions-scale

stella/stella

Apply when making architectural decisions, designing new endpoints, or adding database tables.

conventions-security

stella/stella

Apply when writing code that touches auth, data access, file handling, or external APIs. Stella handles privileged legal data (attorney-client privilege, litigation holds, personal data).

conventions-testing

stella/stella

Apply when writing or reviewing tests.

conventions-ux

stella/stella

Apply when building or modifying user-facing UI components.

convergence-assessment

yogsoth-ai/de-anthropocentric-research-engine

Compare results across multiple model variants — quantitative agreement metrics and qualitative conclusion stability.

convergence-check

yogsoth-ai/de-anthropocentric-research-engine

Evaluate whether the ranking has stabilized by analyzing rating history and computing stability metrics.

convergence-distillation

yogsoth-ai/de-anthropocentric-research-engine

Iterative convergence to a single answer through Classic Delphi, Modified Delphi, or Nominal Group Technique rounds.

convergence-study

HeshamFS/materials-simulation-skills

>

conversation-analyzer

mhattingpete/claude-skills-marketplace

Analyzes your Claude Code conversation history to identify patterns, common mistakes, and opportunities for workflow improvement. Use when user wants to understand usage patterns, optimize workflow, identify automation opportunities, or check if they're following best practices.

conversation-archaeologist

OneWave-AI/claude-skills

Mine ALL past Claude conversations to build a living 'User Manual About You'. Extract writing style, business context, goals, preferences, and patterns. Make all other skills smarter with context.

conversation-intelligence

openai/plugins

Twilio Conversation Intelligence development guide. Use when building real-time or post-call conversation analysis, language operator pipelines, sentiment analysis, agent assist, cross-channel analytics, or querying aggregated conversation insights (sentiment trends, escalation rates, dashboards).

conversation-launcher

vellum-ai/vellum-assistant

Offer the user several spin-off conversations as clickable buttons on a single persistent card. Each click spawns a fresh seeded conversation in the sidebar; the user keeps their place in the current conversation. Use when you want to branch into N focused threads (research directions, draft choices, pending replies, triage of N items) without losing the current context. Not for single-destination pivots — just reply inline.

conversation-memory

benjaminasterA/antigravity-awesome-skills

Persistent memory systems for LLM conversations including short-term, long-term, and entity-based memory Use when: conversation memory, remember, memory persistence, long-term memory, chat history.

conversation-memory-v2

diegosouzapw/awesome-omni-skills

Conversation Memory workflow skill. Use this skill when the user needs Persistent memory systems for LLM conversations including and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

conversion-copywriting

guia-matthieu/clawfu-skills

"Write copy that gets a \"yes\" using Joanna Wiebe's research-first, Voice of Customer methodology Use when: **Writing landing pages, emails, or sales pages** that need measurable conversion results; **Starting a new copy project** and need a systematic process to follow; **Struggling with what to write** and staring at a blank page; **Wanting to prove ROI** to clients with data-backed decisions; **Improving existing copy** through validation and testing"

conversion-optimization

kostja94/marketing-skills

When the user wants to improve conversion rates, run A/B tests, optimize funnels, or reduce friction. Also use when the user mentions "CRO," "conversion rate optimization," "A/B test," "split test," "funnel optimization," "checkout optimization," "form optimization," or "conversion funnel." For pricing psychology, use pricing-strategy.

conversion-rate-optimization

manojbajaj95/claude-gtm-plugin

Conversion rate optimization for marketing pages and lead-capture forms. Use when the user wants to improve conversions on a homepage, landing page, pricing page, feature page, blog CTA, contact form, demo form, or campaign page. For product onboarding use user-onboarding; for lifecycle email use marketing-automation; for pricing and paywalls use pricing-strategy; for A/B testing use ab-test-setup.

conversion-signal-qa

aaron-he-zhu/aaron-marketing-skills

Use when the user asks to "QA my conversion tracking before launch", "check my UTMs / pixel / event firing", "set up a tracking pre-flight", or "set the dedup rule so Meta and Google stop double-counting"; builds and fixes the measurement plumbing — conversion-event firing, UTM hygiene, cross-platform dedup rules, attribution-window alignment, and offline/iOS-ATT modeled-gap flags — as a pre-flight checklist plus a UTM/event-spec builder. Not for scoring R1/R2 — that is a scored veto in ad-account-auditor; not for account structure — use campaign-architect. 付费广告转化追踪QA/UTM规范/跨平台去重

conversion-tools-automation

ComposioHQ/awesome-claude-skills

"Automate Conversion Tools tasks via Rube MCP (Composio). Always search tools first for current schemas."

conversion-value-mapper

aaron-he-zhu/aaron-marketing-skills

Use when the user asks to "set up conversion values so tROAS optimizes profit not orders", "map margin onto my purchase value", "build value rules for lead / phone / signup conversions", or "stop bidding to revenue when I care about profit"; defines and QAs the conversion VALUE model — per-conversion values, margin/net-value adjustment, static-vs-dynamic value rules, proxy values for non-revenue actions, and a value-vs-count sanity check — as a value-model spec plus a pre-launch value QA sheet. Not for whether the tag fires or UTMs are clean — use conversion-signal-qa; not for cross-platform double-count de-dup — use attribution-reconciler; not for scoring R1/R2 — that is a scored veto in ad-account-auditor. 付费广告转化价值建模/利润出价/价值规则QA

convert

terrylica/cc-skills

Convert .cast to .txt for Claude Code analysis. Supports batch mode. TRIGGERS - convert cast, cast to txt, batch convert

convert

remotion-dev/remotion

Start the local @remotion/convert app and open it in the Codex browser. Use when the user invokes /convert or $convert, asks to launch convert.remotion.dev locally, or wants to inspect the Convert package UI.

convert-excel-to-md

github/awesome-copilot

Converts Excel (.xlsx) workbooks into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .xlsx file — even if they don''t say "convert" or "markdown" explicitly. This includes requests to "read", "summarize", "review", "extract data from", "compare", "chart", or "analyze" a spreadsheet, workbook, budget, data export, or tracker. Always run the bundled conversion script to produce Markdown first; do not attempt to parse .xlsx content directly or write ad-hoc extraction code. Also use this skill for batch requests involving a whole folder of Excel workbooks. IMPORTANT: When the user references a folder or set of documents containing multiple file types (.pdf, .docx, .xlsx), invoke ALL three sibling skills — convert-pdf-to-md, convert-word-to-md, and convert-excel-to-md — so no file type is silently skipped.

convert-github-issues-to-fixmes

imbue-ai/mngr

Convert triaged autoclaude GitHub issues into FIXMEs in the codebase. Use when you want to process issues that have been triaged by authorized users.

convert-pdf-to-md

github/awesome-copilot

Converts PDF (.pdf) documents into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .pdf file — even if they don''t say "convert" or "markdown" explicitly. This includes requests to "read", "summarize", "review", "extract data from", "compare", or "analyze" a PDF report, paper, invoice, form, contract, or scanned document. Always run the bundled conversion script to produce Markdown first; do not attempt to parse PDF content directly or write ad-hoc extraction code. Also use this skill for batch requests involving a whole folder of PDF documents. IMPORTANT: When the user references a folder or set of documents containing multiple file types (.pdf, .docx, .xlsx), invoke ALL three sibling skills — convert-pdf-to-md, convert-word-to-md, and convert-excel-to-md — so no file type is silently skipped.

convert-plaintext-to-md

github/awesome-copilot

'Convert a text-based document to markdown following instructions from prompt, or if a documented option is passed, follow the instructions for that option.'

convert-to-apple-container

microsoft/amplifier-app-nanoclaw

Switch from Docker to Apple Container for macOS-native container isolation. Use when the user wants Apple Container instead of Docker, or is setting up on macOS and prefers the native runtime. Triggers on "apple container", "convert to apple container", "switch to apple container", or "use apple container".

convert-word-to-md

github/awesome-copilot

Converts Word (.docx) documents into Markdown so their contents can be accurately analyzed, summarized, searched, or extracted from. Use this skill whenever the user shares, references, or asks about a .docx file — even if they don''t say "convert" or "markdown" explicitly. This includes requests to "read", "summarize", "review", "extract data from", "compare", or "analyze" a Word document, resume, report, contract, or proposal. Always run the bundled conversion script to produce Markdown first; do not attempt to parse .docx content directly or write ad-hoc conversion code. Also use this skill for batch requests involving a whole folder of Word documents. IMPORTANT: When the user references a folder or set of documents containing multiple file types (.pdf, .docx, .xlsx), invoke ALL three sibling skills — convert-pdf-to-md, convert-word-to-md, and convert-excel-to-md — so no file type is silently skipped.

convertapi-automation

ComposioHQ/awesome-claude-skills

"Automate Convertapi tasks via Rube MCP (Composio). Always search tools first for current schemas."

converter

boshu2/agentops

Convert AgentOps skill formats.

convertible-bond

HKUDS/Vibe-Trading

A股可转债分析——转股/纯债/期权三维估值、下修/强赎/回售博弈、双低策略与转债轮动选债框架

convertkit-automation

benjaminasterA/antigravity-awesome-skills

Automate ConvertKit (Kit) tasks via Rube MCP (Composio): manage subscribers, tags, broadcasts, and broadcast stats. Always search tools first for current schemas.

convertkit-automation-v2

diegosouzapw/awesome-omni-skills

ConvertKit (Kit) Automation via Rube MCP workflow skill. Use this skill when the user needs Automate ConvertKit (Kit) tasks via Rube MCP (Composio): manage subscribers, tags, broadcasts, and broadcast stats. Always search tools first for current schemas and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

convex

waynesutton/convexskills

Umbrella skill for all Convex development patterns. Routes to specific skills like convex-functions, convex-realtime, convex-agents, etc.

convex-agents

waynesutton/convexskills

Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration

convex-backend

CloudAI-X/claude-workflow-v2

Convex backend development guidelines. Use when writing Convex functions, schemas, queries, mutations, actions, or any backend code in a Convex project. Triggers on tasks involving Convex database operations, real-time subscriptions, file storage, or serverless functions.

convex-best-practices

waynesutton/convexskills

Guidelines for building production-ready Convex apps covering function organization, query patterns, validation, TypeScript usage, error handling, and the Zen of Convex design philosophy

convex-component-authoring

waynesutton/convexskills

How to create, structure, and publish self-contained Convex components with proper isolation, exports, and dependency management

convex-cron-jobs

waynesutton/convexskills

Scheduled function patterns for background tasks including interval scheduling, cron expressions, job monitoring, retry strategies, and best practices for long-running tasks

convex-file-storage

waynesutton/convexskills

Complete file handling including upload flows, serving files via URL, storing generated files from actions, deletion, and accessing file metadata from system tables

convex-functions

waynesutton/convexskills

Writing queries, mutations, actions, and HTTP actions with proper argument validation, error handling, internal functions, and runtime considerations

convex-http-actions

waynesutton/convexskills

External API integration and webhook handling including HTTP endpoint routing, request/response handling, authentication, CORS configuration, and webhook signature validation

convex-migrations

waynesutton/convexskills

Schema migration strategies for evolving applications including adding new fields, backfilling data, removing deprecated fields, index migrations, and zero-downtime migration patterns

convex-realtime

waynesutton/convexskills

Patterns for building reactive apps including subscription management, optimistic updates, cache behavior, and paginated queries with cursor-based loading

convex-schema-validator

waynesutton/convexskills

Defining and validating database schemas with proper typing, index configuration, optional fields, unions, and migration strategies for schema changes

convex-security-audit

waynesutton/convexskills

Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations

convex-security-check

waynesutton/convexskills

Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling

convex-v2

diegosouzapw/awesome-omni-skills

Convex workflow skill. Use this skill when the user needs Convex reactive backend expert: schema design, TypeScript functions, real-time subscriptions, auth, file storage, scheduling, and deployment and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

conveyor-automation

ComposioHQ/awesome-claude-skills

"Automate Conveyor tasks via Rube MCP (Composio). Always search tools first for current schemas."

convolo-ai-automation

ComposioHQ/awesome-claude-skills

"Automate Convolo AI tasks via Rube MCP (Composio). Always search tools first for current schemas."

coo-advisor

alirezarezvani/claude-skills

Operations leadership for scaling companies. Process design, OKR execution, operational cadence, and scaling playbooks. Use when designing operations, setting up OKRs, building processes, scaling teams, analyzing bottlenecks, planning operational cadence, or when user mentions COO, operations, process improvement, OKRs, scaling, operational efficiency, or execution.

cook

YunYouJun/cook

食用手册 —— 围绕「吃什么」的生活灵感助手。帮助用户根据手边食材想菜谱、做每周饮食规划、了解食材搭配与储存知识、获取烹饪灵感。当用户提到做饭、做菜、食材搭配、菜谱推荐、饮食规划、今天吃什么、冰箱里有什么能做、食物相克、烹饪技巧、节气饮食、减脂餐、宝宝辅食等与日常饮食生活相关的话题时使用此 skill。

cook-the-blog

Varnan-Tech/opendirectory

Generate high-converting, deep-dive growth case studies in MDX format. Use this skill when asked to write a case study or blog post about a company's growth, tech stack, or product-led strategy. It handles the full pipeline (researching the company via Tavily, generating a 16:9 cover image, quality checking the draft, uploading assets to cloud storage, and pushing directly to the target repository).

cookbook-audit

anthropics/claude-cookbooks

Audit an Anthropic Cookbook notebook based on a rubric. Use whenever a notebook review or audit is requested.

cookie-analysis

wgpsec/AboutSecurity

Session cookie 分析与伪造方法论。当发现 Web 应用使用 cookie 进行认证、需要判断 cookie 类型并选择伪造方法时使用。覆盖 unsigned base64 cookie 直接伪造、Flask 签名 cookie（flask-unsign 爆破密钥）、加密/二进制 cookie 的识别。本技能负责 cookie 类型判断和分流：如果判断为 JWT（三段式 eyJ 开头），应转至 jwt-attack-methodology；如果判断为加密 cookie 需要 Padding Oracle，应转至 crypto-web-attack

cookie-consent

TerminalSkills/skills

>-