Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Guides .NET CLI development using Spectre.Console, Spectre.Console.Cli, and Microsoft.Extensions.Hosting. Covers dependency injection, localized help, command settings, aliases, examples, terminal output, exit codes, and stdio-safe command paths.
Provides reference material for using the liter-llm command-line interface.
Provides reference material for using the tree-sitter-language-pack command-line interface.
Applies @clack/prompts to interactive command-line flows and update-notifier to version awareness. Enhances Commander.js help with examples and colors using patterns suitable for Node.js CLIs.
Identify and exploit Clickjacking (UI Redressing) vulnerabilities where a malicious website iframes a target application, tricking victims into performing unintended actions (e.g., transferring funds, deleting accounts, or granting permissions) via hidden layers.
Create cloud provider architecture diagrams using PlantUML syntax with official AWS, Azure, GCP, and Alibaba Cloud service icons. Best for multi-service cloud topologies and migration blueprints.
Uses the wrangler CLI to operate Cloudflare. Covers contexts involving Workers, Pages, R2, D1, KV, CDN, DNS, and WAF.
Cloud security posture assessment for AWS, Azure, and GCP. Tests IAM privilege escalation paths, public storage exposure, serverless attack surface, database exposure, logging gaps, container registry security, and cloud-specific attacks. Both authenticated (with cloud credentials) and unauthenticated (external) modes. Uses nuclei cloud templates, Prowler, ScoutSuite, manual IMDS/metadata probing…
Reviews CloudKit code for container setup, record handling, subscriptions, and sharing patterns. Use when reviewing code with import CloudKit, CKContainer, CKRecord, CKShare, or CKSubscription.
Skill for the Cluster_98 area of Securacy. 3 symbols across 2 files.
OS command injection occurs when user input is passed unsanitized to a system shell via dangerous APIs: Java Runtime.exec(), Python os.system/subprocess, PHP system/shell_exec/exec/proc_open, C system/exec. Detect via pipe |, semicolon ;, &&, ||, backtick, $() operators, and time-delay payloads (sleep 5). Tools: Commix, Burp Suite, OWASP WebGoat.
The skill name indicates a CNCF KCSP review focus, but its description is a placeholder and provides no concrete capabilities.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name