ssrf-server-side-request-forgery
Provides an SSRF playbook for servers that fetch URLs, resolve hostnames, or import remote content. Examines requests that can be directed toward internal networks, cloud metadata, or secondary protocols.
Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Provides an SSRF playbook for servers that fetch URLs, resolve hostnames, or import remote content. Examines requests that can be directed toward internal networks, cloud metadata, or secondary protocols.
Server-Side Template Injection (SSTI) occurs when user input is embedded directly into a template engine (Jinja2, Twig, Freemarker, Pebble, Velocity, Smarty, Mako) and evaluated, enabling remote code execution. Detect via math expressions {{77}} returning 49, or ${77}, <%= 77 %>. Leads to full RCE via template sandbox escape, Python __class__.__mro__ traversal, and Java reflection cha…
Covers server-side template injection where attacker-controlled content may be evaluated by templating engines. Applies to template expressions, server-side rendering, and preview features.
Trains and evaluates single-agent reinforcement learning with Stable Baselines3 (PPO, SAC, DQN, TD3, DDPG, A2C), Gymnasium custom environments, vectorized rollouts, callbacks, and checkpoint normalization. Applies to reproducible RL experiments, continuous control, discrete actions, and SB3-Contrib recurrent or masked policies.
Covers buffer overflow exploitation to hijack control flow in Linux userland binaries. Includes return address overwrites, ROP chains, ret2libc, ret2csu, ret2dlresolve, and SROP.
Build alignment artifacts when unclear ownership blocks decisions. Covers responsibility matrices, decision rights, and communication plans rather than persuasion during a live discussion.
Helps lead without formal authority by understanding stakeholder incentives. Uses connection and co-creation to address conflict and build shared ownership.
Builds a stakeholder map using a power/interest grid and assigns communication strategies to each quadrant. Supports launch preparation, cross-functional alignment, and stakeholder engagement planning.
Generate stakeholder updates tailored to audience and reporting cadence. Adapt progress, launch announcements, and risk escalations into executive, engineering, or customer-facing versions.
Generate shareable daily standup updates from recent work activity or rough notes. Organize commits, pull requests, and ticket movements into yesterday, today, and blockers.
Generate a standup update from recent activity. Use when preparing for daily standup, summarizing yesterday's commits and PRs and ticket moves, formatting work into yesterday/today/blockers, or structuring a few rough notes into a shareable update.
Facilitates a read-only standup across parallel development work. Compares changes in git worktrees, branches, or pull requests and produces one consolidation plan.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name