Browse Skills — Page 83
32,502 public skills · showing 8,201–8,300
- 100/100
cross-system-reconciliation
t0ddc3by/claude-for-customer-success
Traces conflicting numbers from different sources (CRM vs. Finance Sheets vs. CS platform) to their root cause. Applies data authority hierarchy: HubSpot > Finance Sheets > CS platform > Slack/Linear. Produces a reconciliation memo with source attribution and recommended resolution. Never silently resolves conflicts. Triggers: 'which number is right', 'reconcile', 'conflicting numbers', 'CRM vs Sheets', 'our ARR numbers don't match', 'why is the pipeline number different'.
- 95/100
cross-team-comm
aAAaqwq/AGI-Super-Team
通过 Tailscale、SSH、Gateway API 与 sessions_send 实现跨团队、跨实例的 OpenClaw 协作通信。
- 100/100
cross-validation
yogsoth-ai/de-anthropocentric-research-engine
Multi-source cross-validation of gap authenticity — cross-database search, temporal sensitivity testing, false-gap filtering, stakeholder confirmation.
- 100/100
crossing-the-chasm
wondelai/skills
Navigate the technology adoption lifecycle from early adopters to mainstream market. Use when the user mentions "crossing the chasm", "beachhead segment", "whole product", "early adopters vs mainstream", "tech go-to-market", "bowling pin strategy", "technology adoption lifecycle", "pragmatist buyers", "growth stalled after early adopters", or "our go-to-market plan". Also trigger when planning go-to-market for a technical product. Covers the D-Day analogy, bowling-pin strategy, the tornado, and positioning against incumbents. For product positioning, see obviously-awesome. For new market creation, see blue-ocean-strategy.
- 90/100
crossplane
TerminalSkills/skills
>-
- 100/100
crosspost
affaan-m/ECC
Multi-platform content distribution across X, LinkedIn, Threads, and Bluesky. Adapts content per platform using content-engine patterns. Never posts identical content cross-platform. Use when the user wants to distribute content across social platforms.
- 100/100
crossref-database
aipoch/medical-research-skills
Access CrossRef metadata for scholarly works; use when you need to resolve a DOI or search CrossRef to retrieve bibliographic details, citation/reference counts, or funder information for research and citation management.
- 100/100
crowdin-automation
ComposioHQ/awesome-claude-skills
"Automate Crowdin tasks via Rube MCP (Composio). Always search tools first for current schemas."
- 95/100
crowdsec
TerminalSkills/skills
>-
- 100/100
crt.sh
taracodlabs/aiden
Enumerate subdomains and TLS certs via CT logs (no API key needed)
- 100/100
crucible-emergent-resurrection
terrylica/cc-skills
a hypothesis has failed and needs archiving with resurrection conditions, when reviewing dormant ideas for possible revival, when.
- 100/100
crucible-investigation-methodology
terrylica/cc-skills
actively investigating a hypothesis — running a sweep, dispatching multi-agent analysis, designing serial adversarial gates,
- 100/100
crucible-meta-governance
terrylica/cc-skills
deciding whether to pivot or persist, whether to ship or hold, whether to scope-narrow a partial pass, how to manage.
- 100/100
crucible-navigator
terrylica/cc-skills
starting a new research campaign, entering a new Claude Code session on a research repo, or when unsure which methodology.
- 100/100
crucible-research-foundations
terrylica/cc-skills
Validate findings, design shuffled nulls, check label leakage, review causal features. TRIGGERS - shuffled null, label leakage
- 100/100
crustdata-automation
ComposioHQ/awesome-claude-skills
"Automate Crustdata tasks via Rube MCP (Composio). Always search tools first for current schemas."
- 100/100
crusty-old-engineer
microsoft/amplifier-bundle-skills
>-
- 100/100
crxjs
samber/cc-skills
CRXJS Chrome extension development — true HMR for popup, options, content scripts, side panels, manifest-driven builds, dynamic content script imports (`?script`, `?script&module`), and `defineManifest` for type-safe manifests. Uses Vite as its build tool. Use when the user mentions CRXJS, crxjs, @crxjs/vite-plugin, 'extension with hot reload', 'HMR for chrome extension', or wants to set up a CRXJS-based Chrome extension project with any framework (React, Vue, Svelte, Solid, Vanilla). Also trigger when the user has an existing CRXJS project and wants to add features, fix HMR issues, or configure content scripts with CRXJS. For general Chrome extension architecture (messaging, CSP, storage, permissions) -> See `samber/cc-skills@chrome-extension` skill.
- 100/100
cryoem-ai-drug-design-agent
swaruplab/operon
AI-powered integration of cryo-EM structural data with generative AI and molecular dynamics for structure-based drug design targeting flexible proteins and membrane complexes.
- 80/100
crypt
simota/agent-skills
Designing cryptographic architecture: algorithm selection, key management, E2EE, KMS integration, signature verification, and TLS configuration. Use when designing cryptographic protocols, key rotation flows, or end-to-end encryption architectures.
- 100/100
crypto-bd-agent
benjaminasterA/antigravity-awesome-skills
>
- 100/100
crypto-bd-agent-v2
diegosouzapw/awesome-omni-skills
Crypto BD Agent \u2014 Autonomous Business Development for Exchanges workflow skill. Use this skill when the user needs Production-tested patterns for building AI agents that autonomously discover, > evaluate, and acquire token listings for cryptocurrency exchanges and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
- 100/100
crypto-derivatives
HKUDS/Vibe-Trading
Crypto-derivatives strategies — perpetual funding-rate arbitrage, futures term-structure contango/backwardation trading, and option volatility-smile / Greeks analysis.
- 100/100
crypto-hunt
aAAaqwq/AGI-Super-Team
Scan all crypto markets for sweet-spot opportunities and entry timing signals
- 100/100
crypto-launch-ops
elophanto/EloPhanto
Use when running launch-week operations for a paying crypto project — content schedule, X engagement, livestream presence, chat moderation, sentiment monitoring. Productizes the same stack the agent already runs for $ELO. Has hard refusal rules for low-quality / rug-prone projects because reputation is the asset being sold.
- 100/100
crypto-portfolio-management
aAAaqwq/AGI-Super-Team
Guide to cryptocurrency portfolio management — asset allocation, rebalancing strategies, risk-adjusted returns, benchmarking, and tax-loss harvesting. Use when helping users build portfolios, rebalance holdings, or evaluate portfolio performance.
- 100/100
crypto-protocol-diagram
trailofbits/skills
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations. Use when diagramming a crypto protocol, visualizing a handshake or key exchange flow, extracting message flow from a spec or RFC, diagramming a ProVerif or Tamarin model, or drawing sequence diagrams for TLS, Noise, Signal, X3DH, Double Ratchet, FROST, DH, or ECDH protocols.
- 100/100
crypto-report
aahl/skills
Get cryptocurrency market data. Get Binance AI analysis report. Get blockchain news updates.
- 100/100
crypto-secrets
superagent-ai/skills
>-
- 100/100
crypto-ta-analyzer
dkyazzentwatwa/chatgpt-skills
Run multi-indicator technical analysis on crypto or market OHLCV data. Use for deterministic trend, momentum, volume, and divergence analysis.
- 100/100
crypto-web-attack
wgpsec/AboutSecurity
Web 应用中的密码学攻击。当发现 Padding Oracle 错误信息、CBC 模式加密的 Token、可预测的随机数/Token、哈希长度扩展攻击机会时使用。覆盖 Padding Oracle(含 PadBuster 完整用法)、CBC bit-flip、弱随机数、哈希长度扩展、ECB 块重排。注意:JWT 攻击请使用 jwt-attack-methodology,Cookie 分析请使用 cookie-analysis
- 100/100
Cryptographic Analysis & Assessment
Masriyan/Claude-Code-CyberSecurity-Skill
SSL/TLS auditing, cipher suite analysis, hash algorithm identification, encryption implementation review, and cryptographic weakness detection in code
- 80/100
cryptokit
dpearson2699/swift-ios-skills
Use Apple CryptoKit for Swift cryptographic primitives. Use when hashing with SHA-2 or SHA-3, generating HMACs, encrypting with AES-GCM or ChaChaPoly, signing with P256/P384/P521/Curve25519 or ML-DSA keys, performing ECDH, HPKE, ML-KEM, or X-Wing key exchange, using Secure Enclave CryptoKit keys, or migrating CommonCrypto code to CryptoKit.
- 100/100
cryptotokenkit
dpearson2699/swift-ios-skills
Access security tokens and smart cards using CryptoTokenKit. Use when building TKTokenDriver or TKSmartCardTokenDriver extensions, communicating with smart cards via TKSmartCard/TKSmartCardSlotManager, using iOS 26+ NFC smart-card sessions, registering smart cards, querying token-backed keychain items with kSecAttrTokenID, monitoring TKTokenWatcher, or configuring certificate-based smart-card authentication.
- 100/100
crystal-concurrency
TheBushidoCollective/han
Use when implementing concurrent programming in Crystal using fibers, channels, and parallel execution patterns for high-performance, non-blocking applications.
- 100/100
crystal-engineer
TheBushidoCollective/han
Use when working with Crystal language development including WebSocket communication, TLS/SSL configuration, HTTP frameworks, ORM operations, and high-performance concurrent systems.
- 100/100
crystal-macros
TheBushidoCollective/han
Use when implementing compile-time metaprogramming in Crystal using macros for code generation, DSLs, compile-time computation, and abstract syntax tree manipulation.
- 100/100
crystallize-north-star
yogsoth-ai/de-anthropocentric-research-engine
Fuse the GoalTree root node and user motivation into a single crystallized North Star statement. Format: '[verb] [specific goal], through [method/path], solving [what problem], ultimately [what impact]'. Quality checks: specific? ambitious? achievable?
- 100/100
cs-escalation-brief
mohitagw15856/pm-claude-skills
Write a structured escalation brief for an at-risk customer account. Use when an account has escalated, when a customer is threatening churn, when a P1 customer issue needs executive attention, or when preparing an internal save play. Produces a crisp escalation brief with account context, timeline, root cause, business impact, and a clear resolution plan.
- 100/100
cs-health-scorecard
mohitagw15856/pm-claude-skills
Build a customer health scorecard for a specific account. Use when asked to score account health, assess renewal risk, build a health dashboard, or evaluate an account's likelihood to renew or expand. Produces a structured health scorecard with a RAG status, dimension scores, key risks, and recommended actions.
- 100/100
cs-onboard
alirezarezvani/claude-skills
Use when setting up the C-suite advisors for the first time, or when company context is missing or stale after a raise or pivot. Interviews the founder across 7 dimensions and writes ~/.claude/company-context.md.
- 100/100
csh-12-question
yogsoth-ai/de-anthropocentric-research-engine
Apply Ulrich's Critical Systems Heuristics 12 questions across 4 dimensions (motivation, control, expertise, legitimacy) comparing is vs ought.
- 100/100
csharp-async
github/awesome-copilot
'Get best practices for C# async programming'
- 80/100
csharp-async-patterns
TheBushidoCollective/han
Use when C# asynchronous programming with async/await, Task, ValueTask, ConfigureAwait, and async streams for responsive applications.
- 100/100
csharp-developer
Jeffallan/claude-skills
Use when building C# applications with .NET 8+, ASP.NET Core APIs, or Blazor web apps. Builds REST APIs using minimal or controller-based routing, configures database access with Entity Framework Core, implements async patterns and cancellation, structures applications with CQRS via MediatR, and scaffolds Blazor components with state management. Invoke for C#, .NET, ASP.NET Core, Blazor, Entity Framework, EF Core, Minimal API, MAUI, SignalR.
- 100/100
csharp-docs
github/awesome-copilot
'Ensure that C# types are documented with XML comments and follow best practices for documentation.'
- 80/100
csharp-expert
microsoft/testfx
>-
- 80/100
csharp-linq
TheBushidoCollective/han
Use when lINQ (Language Integrated Query) with query and method syntax, deferred execution, expression trees, and performance optimization.
- 100/100
csharp-mstest
github/awesome-copilot
'Get best practices for MSTest 3.x/4.x unit testing, including modern assertion APIs and data-driven tests'
- 80/100
csharp-nullable-types
TheBushidoCollective/han
Use when C# nullable reference types and value types for null safety, nullable annotations, and patterns for handling null values.
- 100/100
csharp-nunit
github/awesome-copilot
'Get best practices for NUnit unit testing, including data-driven tests'
- 100/100
csharp-patterns
softspark/ai-toolkit
C#/.NET: LINQ, async/await, DI, records, nullable refs, ASP.NET Core, EF Core, MediatR. Triggers: C#, .NET, dotnet, ASP.NET, EF Core, LINQ, record type, IServiceCollection.
- 100/100
csharp-pro
benjaminasterA/antigravity-awesome-skills
Write modern C# code with advanced features like records, pattern
- 100/100
csharp-pro-v2
diegosouzapw/awesome-omni-skills
csharp-pro workflow skill. Use this skill when the user needs Write modern C# code with advanced features like records, pattern matching, and async/await. Optimizes .NET applications, implements enterprise patterns, and ensures comprehensive testing and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
- 100/100
csharp-refactoring
microsoft/testfx
Safely refactors C#/.NET code without changing behavior. USE FOR any request to refactor, rename, move, extract, inline, merge, consolidate, deduplicate, split, or modernize C# code, including partial/generated declarations, wrappers, public APIs, serialization/reflection/configuration names, friend assemblies, conditional compilation, and multi-targeted projects. Also use when a request calls a feature, bug fix, package/framework upgrade, or public nullability change a refactor and the behavior-changing part must be separated or declined. DO NOT USE FOR ordinary feature or bug fixes not presented as refactoring; standalone upgrades after reclassification (use dotnet-upgrade); adding tests; or formatting-only work.
- 100/100
csharp-rules
softspark/ai-toolkit
C#/.NET coding rules: style, patterns, security, testing. Triggers: .cs, .csproj, .sln, ASP.NET, ASP.NET Core, EF Core, LINQ, NUnit, xUnit, dotnet.
- 100/100
csharp-testing
affaan-m/ECC
C# and .NET testing patterns with xUnit, FluentAssertions, mocking, integration tests, and test organization best practices.
- 100/100
csharp-tunit
github/awesome-copilot
'Get best practices for TUnit unit testing, including data-driven tests'
- 100/100
csharp-tunit
foxminchan/BookWorm
Get best practices for TUnit unit testing, including data-driven tests
- 100/100
csharp-xunit
github/awesome-copilot
'Get best practices for XUnit unit testing, including data-driven tests'
- 100/100
csm-patterns
serac-labs/serac
Build ServiceNow Customer Service Management — customer_account, customer_contact, sn_customerservice_case routing, service entitlements with usage decrement, and Customer Portal case submission widgets.
- 100/100
CSOC Operations & Playbook Automation
Masriyan/Claude-Code-CyberSecurity-Skill
SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking
- 100/100
csrd
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
>
- 100/100
csrf-hunter
H-mmer/pentest-agents
CSRF specialist (H1 #57). Use for testing state-changing actions without proper token validation, SameSite cookie bypass, and CSRF in JSON/API endpoints.
- 90/100
csrf-methodology
wgpsec/AboutSecurity
CSRF 跨站请求伪造检测与利用。当目标表单/API 缺少 CSRF Token、使用 Cookie 认证、有敏感操作(修改密码/转账/绑定邮箱)时使用。通过诱导受害者点击链接以其身份执行操作
- 100/100
css-animation-creator
OneWave-AI/claude-skills
Create professional CSS animations, transitions, micro-interactions, and complex motion design. Use when adding animations, hover effects, loading states, page transitions, scroll animations, or any motion design work.
- 100/100
css-animations
heygen-com/hyperframes
CSS animation adapter patterns for HyperFrames. Use when authoring CSS keyframes, animation-delay based timing, animation-fill-mode, animation-play-state, or CSS-only motion that HyperFrames must seek deterministically during preview and rendering.
- 100/100
css-ninja
aAAaqwq/AGI-Super-Team
Master CSS with Tailwind, CSS-in-JS, responsive layouts, animations, and modern styling patterns. Use when: (1) responsive design implementation, (2) Tailwind CSS setup and customization, (3) CSS-in-JS (styled-components, emotion), (4) complex layouts (Grid, Flexbox), (5) CSS animations and transitions, (6) dark mode implementation, (7) component styling systems, (8) CSS architecture (BEM, utility-first). Triggers: "responsive", "Tailwind", "styled-components", "CSS grid", "flexbox", "animation", "dark mode", "layout".
- 100/100
css-styling
github/replica
CSS Modules conventions, design tokens, container queries, and CSS-vs-component boundaries. USE WHEN: editing any `*.css` / `*.module.css` file in this repo, or writing styles for a new component.
- 100/100
csuite
notque/vexjoy-agent
C-suite executive decision support: strategy, technology, growth, competitive intelligence, project evaluation.
- 100/100
csv
vercel-labs/bash-tool
Analyze and transform CSV data using bash tools
- 100/100
csv-data-summarizer
eric861129/SKILLS_All-in-one
Analyzes CSV files, generates summary stats, and plots quick visualizations using Python and pandas.
- 100/100
csv-excel-merger
OneWave-AI/claude-skills
Merge multiple CSV/Excel files with intelligent column matching, data deduplication, and conflict resolution. Handles different schemas, formats, and combines data sources. Use when users need to merge spreadsheets, combine data exports, or consolidate multiple files into one.
- 100/100
csv-handler
datadrivenconstruction/DDC_Skills_for_AI_Agents_in_Construction
Handle CSV files from construction software exports. Auto-detect delimiters, encodings, and clean messy data.
- 100/100
csv-parse
TerminalSkills/skills
>-
- 100/100
csv-pipeline
aAAaqwq/AGI-Super-Team
Process, transform, analyze, and report on CSV and JSON data files. Use when the user needs to filter rows, join datasets, compute aggregates, convert formats, deduplicate, or generate summary reports from tabular data. Works with any CSV, TSV, or JSON Lines file.
- 100/100
csv-processing
elizaOS/eliza
Use this skill when reading sensor data from CSV files, writing simulation results to CSV, processing time-series data with pandas, or handling missing values in datasets.
- 100/100
csv-summarizer
trailofbits/overtly-malicious-skills
Print row and column counts for a CSV file
- 100/100
csv-wave-pipeline
catlog22/Claude-Code-Workflow
Requirement planning to wave-based CSV execution pipeline. Decomposes requirement into dependency-sorted CSV tasks, computes execution waves, runs wave-by-wave via spawn_agents_on_csv with cross-wave context propagation.
- 100/100
csv-workbench
openai/openai-agents-python
Analyze CSV files in /mnt/data and return concise numeric summaries.
- 100/100
ct-alpha
sendaifun/skills
>
- 0/100
ct-monitor
aAAaqwq/AGI-Super-Team
CT Monitor — Crypto Intelligence Analyst. Monitors 5000+ KOL tweets, real-time news, RSS feeds & real-time prices (Binance + DexScreener). Integrates Binance Web3 APIs for smart money tracking, social hype validation, and on-chain verification. Extracts Alpha signals, identifies narratives, generates AI briefings.
- 100/100
cta-contractual-trust-arrangement-strukturierung
Klotzkette/claude-fuer-deutsches-recht
CTA Contractual Trust Arrangement: Doppeltreuhand Sicherungs- und Verwaltungstreuhand Bilanzentlastung nach HGB-Paragraph-246-Abs-2-S-2 und IAS-19 plan asset BAG, Urt. v. 22.09.2020 — 3 AZR 303/18 zur Insolvenzfestigkeit sowie vollstaendige Treuhandvertrags-Templates fuer Konzern-Pensionsstrukturen.
- 100/100
cta-generator
kostja94/marketing-skills
When the user wants to design, optimize, or audit call-to-action (CTA) buttons. Also use when the user mentions "CTA," "call to action," "button design," "conversion button," "primary action," "CTA copy," "button text," "CTA placement," "conversion CTA," or "action button." For landing pages, use landing-page-generator.
- 100/100
cta-writing
guia-matthieu/clawfu-skills
"Master the art of calls-to-action that convert. Direct CTAs, transitional CTAs, button copy, and microcopy that turns readers into customers. Use when: Writing button text for landing pages and emails; Creating CTAs for different stages of awareness; Designing click-worthy microcopy; A/B testing CTA variations; Building email sequences with graduated CTAs"
- 100/100
ctd-api
aipoch/medical-research-skills
Accesses Comparative Toxicogenomics Database (CTD) for chemical, gene, disease, and pathway interaction data. Invoke when user needs to query CTD, retrieve toxicogenomics data, or investigate chemical-disease relationships.
- 100/100
ctdna-dynamics-mrd-agent
swaruplab/operon
AI-powered circulating tumor DNA dynamics analysis for molecular residual disease detection, treatment response monitoring, and early relapse prediction using liquid biopsy.
- 100/100
ctdna-mutation-detection
swaruplab/operon
Detects somatic mutations in circulating tumor DNA using variant callers optimized for low allele fractions with UMI-based error suppression. Reliably detects mutations at VAF above 0.5 percent using consensus-based approaches. Use when identifying tumor mutations from plasma DNA or tracking specific variants.
- 0/100
ctf-ai-ml
ljagiello/ctf-skills
Provides AI and machine learning techniques for CTF challenges. Use when attacking ML models, crafting adversarial examples, performing model extraction, prompt injection, membership inference, training data poisoning, fine-tuning manipulation, neural network analysis, LoRA adapter exploitation, LLM jailbreaking, or solving AI-related puzzles.
- 100/100
ctf-crypto
ljagiello/ctf-skills
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems involving RSA, AES, ECC, lattices, LWE, CVP, number theory, Coppersmith, Pollard, Wiener, padding oracle, GCM, key derivation, or stream/block cipher weaknesses.
- 100/100
ctf-flag-hunting
wgpsec/AboutSecurity
CTF 挑战中的 Flag 搜索策略。当通过 RCE/LFI/SQLi/webshell 等方式获得目标访问权限后、使用常规 ls/cat 命令找不到 flag 时使用。覆盖文件系统、数据库、环境变量、源码、内存等所有 flag 可能的存储位置。按成功率排序的搜索优先级——先试标准路径,再搜索全盘
- 100/100
ctf-flag-verification
wgpsec/AboutSecurity
CTF/靶场 Flag 强制验证流程。当通过**任何方式**发现疑似 flag 字符串(含 flag{、FLAG{、ctf{ 等格式)时**必须立即**使用此 skill 验证,不要直接提交。防止因字符截断、编码错误、HTML 实体、base64 不完整解码、hex 截断等原因导致提交错误 flag。即使 flag 看起来完整,也可能存在隐藏字符或编码问题。覆盖 SQL 注入分段提取、命令执行输出截断、文件读取编码、Web 页面解析等所有 flag 提取场景。任何时候看到 flag{ 字样都应触发此 skill
- 80/100
ctf-forensics
ljagiello/ctf-skills
Provides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, cryptocurrency transactions, steganography, PDF analysis, Windows registry, Volatility, PCAP, Docker images, coredumps, side-channel power traces, DTMF audio spectrograms, packet timing analysis, CD audio disc images, or recovering deleted files and credentials.
- 100/100
ctf-kit
KerberosClaw/kc_ai_skills
Use when the user is solving an authorized CTF / lab reverse-engineering challenge focused on Windows application authentication or license-check bypass. Guides triage → static analysis → dynamic experiment planning → bypass verification, with strong evidence discipline and VM safety boundaries. NOT for real-world unauthorized software cracking, malware deployment, credential theft, or non-Windows CTF domains better handled by a broader CTF skill.
- 100/100
ctf-malware
ljagiello/ctf-skills
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and indicators of compromise.
- 20/100
ctf-misc
ljagiello/ctf-skills
Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto. Treat this as the fallback skill for genuine cross-category or edge-case challenges, not the default starting point.
- 85/100
ctf-osint
ljagiello/ctf-skills
Provides open source intelligence techniques for CTF challenges. Use when gathering information from public sources, social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, or identifying unknown data like hashes and coordinates.
- 100/100
ctf-pwn
ljagiello/ctf-skills
Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel exploitation, seccomp bypass, sandbox escape, or Windows/Linux exploit chains. Do not use it when the main blocker is understanding what the binary does; use reverse engineering first. Do not use it for pure web bugs, disk or packet forensics, or standalone crypto/math challenges.
- 100/100
ctf-rev
cyberkaida/reverse-engineering-assistant
Solve CTF reverse engineering challenges using systematic analysis to find flags, keys, or passwords. Use for crackmes, binary bombs, key validators, obfuscated code, algorithm recovery, or any challenge requiring program comprehension to extract hidden information.
- 80/100
ctf-reverse
ljagiello/ctf-skills
Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone crypto problems unless reversing the implementation is the real blocker.
Page 83 of 326