The library

nexus-elements-nexus-provider · Use for install and configure the nexusprovider for nexus elements. use when setting up provider context, handleinit on wallet connect, or when any element needs usenexus.

hunt-dom · Use for hunt client-side dom vulnerabilities — dom clobbering (overwrite js globals via html injection), postmessage hijacking (missing origin check), service worker abuse (intercept requests from same-origin script), css injection/exfiltration (attribute selectors → token char-by-char via oob), client-side template injection, dangerouslysetinnerhtml. grounded in named public research: gareth heyes / portswigger dom-clobbering + dom-invader, michał bentkowski dompurify clobbering bypasses, jquery htmlprefilter xss (cve-2020-11022 / cve-2020-11023), d0nut css-exfil research. use when hunting dom-xss, client-side auth bypass, or token exfiltration without server-side interaction.

rechtsabteilung-pe-closing-continuation-fund · PE teams needing audit-ready closing documentation with live German legal norm verification instead of templated checklists.

people-audit · Teams tracking hundreds of contacts who need to know which relationships are stale before reaching out.

hunt-file-upload · Security auditors hunting RCE on PHP/JSP/ASPX stacks with publicly-exploitable file-processing chains.

meeting-prep · Executives preparing for 1:1s and meetings who need contextual briefings without manually grep-ing notes.

hunt-graphql · Bug bounty hunters on platform APIs (GitHub, Shopify, Stripe tier) where GraphQL mutations interact with REST APIs.

smart-device-agb-redlinen-beschwerde · German consumer advocates needing to verify statutory deadlines and evidence requirements in smart-device complaints.

hunt-grpc · Security teams hunting microservice architecture vulns where edge-proxy auth is bypassed by reaching backend directly.

hunt-host-header · Security researchers hunting account-takeover on apps behind CDN/reverse proxy where Host is unkeyed in cache.

bug-investigation · Teams enforcing TDD discipline to prevent regressions and verify actual bug fix.

hunt-http-smuggling · Bug bounty hunters on older deployments (HAProxy <2.4, legacy F5, Citrix ADC) or AWS ALB+origin chains with H2 downgrade.

expo-deployment · Use for expo-deployment tasks and operations.

hunt-idor · Use when hunting idor on any target.

jest-generator · Use for jest-generator tasks and operations.

html-ppt-product-launch · Use when announcing a product, launching a feature, or doing a keynote-style reveal.

hunt-k8s · Testing container orchestration for auth bypass and RCE.

hunt-laravel · Testing PHP Laravel apps for CVE-2021-3129 Ignition.

digital-humanities-guide · Analyzing historical texts and correspondence networks.

design-index · Creating table of contents for design docs.

api-doc-comments · Documenting smart contract ABIs where generated docs must be client-accessible and precise.

code-sanitizer · Ensuring consistent code style across a data pipeline before completion checklist.

git-workflow · Submitting feature patterns to upstream community repositories with clean history.

benutzungsschonfrist-und-rechtserhaltende-benutzung · Preparing evidence bundles to defend luxury/fashion trademarks against non-use revocation.

clickhouse-query · Debugging event analytics on replica clusters without writing custom export code.

android-di-koin · Setting up DI scoping per feature layer without manual constructor plumbing.

evaluating-llms · Validating agent responses against business rules without manual test review.

hunt-ntlm-info · Lateral movement in Windows domains when Kerberos is unavailable.

security-scan · Baseline security assessment before manual penetration testing.

mobile-architect · Scaling Android/iOS apps to 10+ features without DI complexity explosion.

skill-usage-audit · Verifying governance compliance across codebases without manual file inspection.

hunt-saml · Discovering saml vulnerabilities when generic scanners miss domain-specific chains.

vibecode-brand-design · Ensuring visual consistency across branded UI components at scale.

compound-agent-doc-gardener · Orchestrating multi-step task flows with guaranteed validation and tracking.

hunt-session · Discovering session vulnerabilities when generic scanners miss domain-specific chains.

hunt-sharepoint · Discovering sharepoint vulnerabilities when generic scanners miss domain-specific chains.

cy-execute-task · Orchestrating multi-step task flows with guaranteed validation and tracking.

hunt-source-leak · Discovering source leak vulnerabilities when generic scanners miss domain-specific chains.

turboquant-pytorch · Implementing turboquant pytorch workflows that require automation.

llm-pipeline · Extracting structured knowledge from unstructured messaging with high-signal batching.

hunt-sqli · Discovering sqli vulnerabilities when generic scanners miss domain-specific chains.

hunt-ssrf · Discovering ssrf vulnerabilities when generic scanners miss domain-specific chains.

upgrade-deps · Implementing upgrade deps workflows that require automation.

hunt-ssti · Discovering ssti vulnerabilities when generic scanners miss domain-specific chains.

industrial · Implementing industrial workflows that require automation.

openspec-sync-specs · Implementing openspec sync specs workflows that require automation.

hunt-subdomain · Discovering subdomain vulnerabilities when generic scanners miss domain-specific chains.

hunt-tls-network · Discovering tls network vulnerabilities when generic scanners miss domain-specific chains.

hunt-websocket · Discovering websocket vulnerabilities when generic scanners miss domain-specific chains.

using-git-worktrees · When feature work requires complete isolation from current workspace without branch switching.