The library

hunt-websocket · Discovering websocket vulnerabilities when generic scanners miss domain-specific chains.

using-git-worktrees · When feature work requires complete isolation from current workspace without branch switching.

hunt-xxe · When hunting XXE on XML-heavy endpoints, file parsers, or SAML flows where file-read or SSRF payoff is high.

m365-entra-attack · When testing M365 credential attacks with locked-down attempt budgets and needing AADSTS code interpretation.

mid-engagement-ir-detection · When running active testing against monitored targets and needing to separate your activity from external attacker activity.

offensive-osint · When conducting reconnaissance from attacker perspective with only public information.

okta-attack · When testing Okta for credential attacks or session manipulation during authorized assessments.

osint-methodology · When reconnaissance needs repeatable structure and documentation versus ad-hoc browsing.

redteam-mindset · When planning red-team engagements with structured threat modeling versus vulnerability checklist testing.

redteam-report-template · When documenting red-team findings with proper impact quantification and evidence chain.

report-writing · Ensures reports pass triage by enforcing impact-first writing and exact reproduction over theoretical claims.

triage-validation · Filters ineligible findings early (out-of-scope, known, theoretical) saving submission time and maintaining validity ratio.

vmware-vcenter-attack · Rapidly identifies critical CVE chains (file upload → RCE) in exposed VMware infrastructure for impact assessment.

openspec-archive-change · Automates spec change documentation to ensure migration guides are accurate and complete.

web2-recon · Maps external attack surface comprehensively faster than manual DNS/port scanning.

web3-audit · Identifies on-chain vulnerabilities (reentrancy, overflow, access control) before mainnet deployment.

geoint_web_search · Enables remote site assessment and change detection over time without travel, useful for infrastructure planning.

sanitize · Safely detecting and redacting PII from text files without exposing raw sensitive data.

yourvpndead-vpn-detection · Demonstrating VPN vulnerability by detecting server IPs via unauthenticated SOCKS5 proxies on Android.

worker-agents · Use this skill when you need to worker agents.

solo-cli · Romanian freelancers needing fast CLI access to accounting, invoicing, and e-Factura (EUR invoice regulation)

git-sync · Safe repository synchronization that enforces code quality gates and prevents accidental force pushes

notion-spec-to-implementation · Bridging Notion product specs to working code with test coverage, reducing handoff friction

video-download-faas · Batch downloading videos from multiple sources while continuing other work.

agency-automation-governance-architect · Deciding whether to automate a business process before implementation.

payment-integration · Building checkout flows and subscription management for Vietnamese and global markets.

tool-usage · Constructing reliable exploits for memory corruption vulnerabilities.

selenium-automation · Complex browser workflows when Playwright lacks cross-browser support.

base · Automating database operations, forms, and report generation when ODB or embedded databases suit the use case better than CLI tools.

two-panel-plan-review · Stress-testing a strategic plan and deriving a tactical build plan when risk of engineering effort failure is high.

audit-loop · Detecting dark cascade outages and version drift in a gm/rs-* publish pipeline when run on recurring /loop.

infra-review · Automated code review with structured feedback loops.

verify-status · Proving unified status reporting works across all deployment substrates by running isolated beds in parallel on shared infrastructure.

audit-deploy-configs · Validating deployment configuration correctness and health before release without risking mutation of running systems.

yolo-epic · Executing a multi-phase Epic with parallel design/implementation review and human checkpoints at budget/escalation gates.

loom-drain-tutorials · Rewriting stale docs against real shipped product surfaces with adversarial review gates.

memory-reconcile · Running memory-reconcile workflow with multi-phase verification and structured output.

nacl-postmortem-panel · Tracing which project gates let specific bugs through in a feature→fix boundary.

fix-misleading-translations · Running fix-misleading-translations workflow with multi-phase verification and structured output.

drum-stems-character · When applying consistent tonal character processing across multi-mic drum stems via UADx plugins.

pipeline-review · Processing batches of items through concurrent, scoped review stages with per-item result collection.

apqc-section-transform · Transforming process taxonomies into validated ontology modules with reality-layer semantics.

migdal-dr-drill · Workflow pattern automation: migdal-dr-drill.

wfl:run-sprint · Workflow pattern automation: wfl:run-sprint.

idea-stresstest · Validating ideas through adversarial challenge and evidence verification.

markup-repair · Fixing text markup without changing wording or structure.

legacy-sdk-deprecation-sweep · Rolling out breaking changes safely across multiple releases with parallel worktrees.

yasad-schema-evolution · Phasing schema migrations with zero-downtime guarantees across releases.

driver-menu-build · Building curated driver catalogs from event sources with blind naming.

pm-issue-to-pr · Converting issues to PRs with automated changes and validation.