The library

tesserax · Automating workflows for tesserax without manual intervention.

offensive-bug-identification · Developing and validating exploits for vulnerable software in controlled lab environments.

powertools-aws · When writing Lambda functions that need structured logging, distributed tracing, and metrics in production.

ac-coverage · When you need to verify that acceptance criteria are actually tested before release.

compose-ui-control · When you need to test Compose Desktop UI automatically via HTTP without native frameworks.

commit · When you need to commit code with automatic service detection and cross-service validation.

hotfix · When you need a safe prod hotfix with guaranteed backmerge to test and main.

offensive-vuln-classes · When learning memory corruption exploit techniques with real CVE case studies.

validate · When you need to quickly check if all affected services pass their lint/format/test rules.

api-crud-generator · When you need a complete, tested REST API with auth and docs from a single prompt.

worktree · When you need isolated branches without stashing or checking out locally.

api-crud-generator · When you need a complete, tested REST API with auth and docs from a single prompt.

fix-lint · When you have lint errors and want automatic fixes before manual intervention.

micro-pipeline · When building any multi-step output (docs, code, reports) and you need quality gates.

create-pr · When you need to create a PR with automatic base branch detection.

what-would-cc-do · When unsure what Claude Code skill to invoke next.

aso-appstore-listing-skill · When optimizing app listings for higher search ranking and conversion.

review-pr · When you need multi-angle code review (correctness, efficiency, style) with inline comments.

openalex · When you need comprehensive academic metadata with proper citation tracking beyond simple Google Scholar.

backmerge · When releasing a hotfix and need to synchronize prod-test-main in proper order.

offensive-windows-mitigations · When auditing Windows binary defenses or preparing Week 8 exploit bypass techniques.

zod · When needing runtime type checking tied to static types in form data or API payloads.

codex-cli-runtime · When delegating complex code repairs to Codex from within Claude Code subagents.

offensive-osint-methodology · When teaching or systematizing OSINT workflows to avoid ad-hoc recon drift.

codex-result-handling · When consuming Codex outputs in automated Claude Code workflows.

offensive-osint · When starting reconnaissance on a target with only name or domain known.

SKILL · When onboarding a new skill into a framework or verifying structure.

gpt-5-4-prompting · When crafting prompts for Codex subagents or other LLM-heavy workflows.

offensive-fast-checking · When needing a quick vulnerability surface scan before in-depth testing.

SKILL · When setting up skill-based agents in a framework or CI environment.

sast-analysis · When auditing source code in CI/CD or pre-release security review.

offensive-reporting · When translating raw pentest data into boardroom-ready security reports.

ts-library · When releasing TypeScript utility libraries to npm with strong type guarantees.

offensive-business-logic · Finding high-value logic chains in fintech/marketplace apps where scanners miss compound flows

reddit-growth · Organic growth in niche communities where bot-detection is high and authenticity matters

cm-tdd · Catching regressions and hidden edge cases that manual testing cannot verify

offensive-deserialization · Achieving RCE on Java/.NET/PHP/Python apps that deserialize untrusted objects without allowlists

limbic · Quick emotional state snapshot without introspection when you need gut-check interpretation

offensive-file-upload · Finding RCE or XSS through file upload when MIME validation or extension checks are sole defense

poke-agents-mcp · Headless orchestration of local agent runs without UI when scripting multi-agent workflows

offensive-graphql · Bypassing GraphQL authorization when individual resolvers don't check permissions uniformly

offensive-idor · Accessing other users' data when IDs are sequential or predictable and authorization is missing

apple-app-review-skills · Reducing App Store submission failures by catching common violations before review

offensive-open-redirect · Chaining open redirect with phishing or SSRF when URL parameters trust user input

offensive-parameter-pollution · Bypassing security controls when backend and frontend parse parameters differently

uk-grocery-cli · Automating recurring grocery orders across multiple UK chains with price comparison before checkout

offensive-race-condition · Bug bounty race condition testing on registration, payments, and single-use tokens

commit · Rapid multi-file commits with auto-generated messages matching repo conventions

discord-channel-memory · Maintaining agent memory across 3+ Discord channels without loading full history at session start

sast-report · Executive-facing security report consolidating 10+ vulnerability types into one prioritized list