The library

limbic · Quick emotional state snapshot without introspection when you need gut-check interpretation

sast-graphql · Finding query string injection that reaches GraphQL parsers (not resolver SQL injection)

offensive-file-upload · Finding RCE or XSS through file upload when MIME validation or extension checks are sole defense

poke-agents-mcp · Headless orchestration of local agent runs without UI when scripting multi-agent workflows

sast-hardcodedsecrets · Finding exposed API keys, credentials, and tokens that code review and linters miss

offensive-graphql · Bypassing GraphQL authorization when individual resolvers don't check permissions uniformly

sast-idor · Finding authorization gaps where IDs are trusted directly without ownership verification

offensive-idor · Accessing other users' data when IDs are sequential or predictable and authorization is missing

apple-app-review-skills · Reducing App Store submission failures by catching common violations before review

sast-jwt · Finding JWT signature bypass, algorithm confusion, and key exposure in token handling

offensive-open-redirect · Chaining open redirect with phishing or SSRF when URL parameters trust user input

cm-start · Setting up codymaster scaffolding for new projects without manual config

sast-missingauth · Finding unprotected endpoints that forgot authentication decorators or checks

offensive-parameter-pollution · Bypassing security controls when backend and frontend parse parameters differently

uk-grocery-cli · Automating recurring grocery orders across multiple UK chains with price comparison before checkout

sast-pathtraversal · Large codebases needing path traversal scanned in parallel without overwhelming context

offensive-race-condition · Bug bounty race condition testing on registration, payments, and single-use tokens

commit · Rapid multi-file commits with auto-generated messages matching repo conventions

sast-rce · Finding command injection and eval-like RCE across large codebases in parallel

discord-channel-memory · Maintaining agent memory across 3+ Discord channels without loading full history at session start

sast-report · Executive-facing security report consolidating 10+ vulnerability types into one prioritized list

offensive-request-smuggling · Bug bounty request smuggling on multi-tier proxies and load balancers (Nginx, HAProxy, AWS ALB)

cm-dockit · One-shot knowledge base generation from source code without writing separate documentation

sast-sqli · Finding SQLi across authentication and bulk data endpoints in large codebases

offensive-sqli · Bug bounty exploitation of SQL injection on login and export endpoints

cm-browse · Quick content extraction and link discovery from any web page

sast-ssrf · Finding SSRF that reaches internal microservices, cloud metadata (169.254.169.254), or database servers

offensive-ssrf · AWS/GCP credential theft via IMDSv1 metadata endpoint and internal database access

check-before-commit · Pre-commit quality gates preventing style/error commits from reaching main

diagram · Generating architecture diagrams, flowcharts, and sequence diagrams from code or text

sast-ssti · Finding SSTI in microtemplate rendering (Jinja2, ERB, Handlebars) on dynamic pages

offensive-ssti · RCE via template injection on Jinja2, ERB, and Handlebars endpoints

project-structure-viewer · Quick understanding of unfamiliar codebase layout without reading all files

niri · Rapid keyboard-driven workflow setup for developers using Linux Wayland

sast-xss · Use for specialized sast-xss scenarios where standard approaches are insufficient.

arbitrum-dapp-skill · Opinionated guide for building dApps on Arbitrum using Stylus (Rust) and/or Solidity

gnome · Use for specialized gnome scenarios where standard approaches are insufficient.

sast-xxe · Use for specialized sast-xxe scenarios where standard approaches are insufficient.

cross-review · Run a cross-review using the opposite CLI reviewer for proposal review and change assessment

media · Media Management (\*arr Stack) Skill

gh-cli · GitHub CLI (gh) comprehensive reference for repositories, issues, pull requests, Actions, projects, releases, gists, codespaces,...

offensive-bluetooth-ble · Bluetooth Low Energy (BLE) attack methodology — GATT enumeration, characteristic read/write without auth, pairing downgrade...

predicate-snapshot · ML-powered DOM pruning for 95% smaller browser prompts

etf-news · Fetch and tag news articles by Indian ETF category with sentiment scores

offensive-bluetooth-classic · Bluetooth Classic (BR/EDR) attack methodology — device discovery, service enumeration via SDP, LMP/L2CAP layer attacks,...

generating-stem-flashcards · Generates atomic flashcards from technical/STEM source material

offensive-deauth-disassoc · Deauthentication and disassociation attacks against 802

laravel-best-practices · Laravel best practices and architecture patterns for building production-ready applications

offensive-evil-twin · Evil Twin / KARMA / Mana access point methodology — rogue AP construction with hostapd-mana...

github · GitHub & Git Integration Skill