القائمة
Skills في هذا المستودع
جمع SkillsMP عدد ٤٨٤ من skills من tomysh1337/openstarry-code. افتح أي skill لمراجعة مصدره وتفاصيله.
tomysh1337/openstarry-codeعرض ٤٠ من أصل ٤٨٤ skills مجمعة.
Flux GitOps security for owned/authorized clusters: source trust (Git/OCI), multi-tenant path and namespace isolation, controller and impersonation RBAC, secrets decryption (SOPS/age/ESO), image automation and admission pins, and notification webhook hygiene.…
لغة النص الأصلي: الإنجليزية
Frida attach/spawn playbook for owned apps and CTF labs: frida-server setup, process attach vs spawn, common Java/ObjC/native Interceptor hooks, script patterns, and troubleshooting. Use when instrumenting authorized Android/iOS apps or native lab binaries at…
لغة النص الأصلي: الإنجليزية
Select the most specific installed skill for frontend applications, React/Next.js, shadcn, UI/UX, accessibility, responsive layouts, browser behavior, images, video, animation, themes, and branded artifacts. Use when a user asks to build, redesign, review,…
لغة النص الأصلي: الإنجليزية
Review and harden Google Cloud VPC firewall rules for owned projects: 0.0.0.0/0 ingress, priority/order, target tags vs service accounts, hierarchical firewall policies, and shadow/redundant rules. Use when assessing GCP VPC allow/deny posture, open admin…
لغة النص الأصلي: الإنجليزية
GCP IAM principles for authorized assessment and hardening: least privilege, policy inheritance, service accounts, basic roles, key hygiene, and common privilege-escalation footguns. Use when reviewing org-owned projects or written engagements — not…
لغة النص الأصلي: الإنجليزية
Authorized assessment and hardening of Google Cloud Storage (GCS) public exposure: allUsers / allAuthenticatedUsers IAM, uniform bucket-level access, public access prevention, legacy ACLs vs IAM, and org-policy guardrails. Use when reviewing org-owned buckets…
لغة النص الأصلي: الإنجليزية
Configure and review Google Cloud Workload Identity Federation (WIF) so CI and external IdPs (especially GitHub Actions OIDC) obtain short-lived tokens for a GCP service account without user-managed SA keys. Use when designing or auditing workload identity…
لغة النص الأصلي: الإنجليزية
Enable, operate, and triage Google Container Registry / Artifact Registry vulnerability scanning (Container Analysis, continuous and on-demand scans, gcloud findings, CI gates on image digests). Use when GCR CVE scan, Artifact Registry vulnerability scanning,…
لغة النص الأصلي: الإنجليزية
Perform complex, long-running research tasks using Gemini Deep Research Agent. Use when asked to research topics requiring multi-source synthesis, competitive analysis, market research, or comprehensive technical investigations that benefit from systematic…
لغة النص الأصلي: الإنجليزية
Deep integration with Ghidra and IDA Pro for binary analysis and reverse engineering
لغة النص الأصلي: الإنجليزية
Ghidra and IDA Pro workflows for binary analysis: headless analysis, decompiler output, scripting, function recovery, types, signatures, and xrefs. Use when the user asks for Ghidra, IDA, analyzeHeadless, IDAPython, Ghidra scripts, or database-driven reverse…
لغة النص الأصلي: الإنجليزية
Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.
لغة النص الأصلي: الصينية
Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditing compiled code, renaming symbols, annotating disassembly, cross-references, or any RE task - even without explicit mention of Ghidra.
لغة النص الأصلي: الإنجليزية
Ghidra headless (analyzeHeadless) and Jython/Python scripting basics for authorized binary reverse engineering: project import, post-scripts, function and decompiler export, xrefs, and batch automation. Use when writing or debugging Ghidra scripts,…
لغة النص الأصلي: الإنجليزية
Apply branch naming, trunk-based or Git Flow high-level strategy, and PR hygiene for healthy git history. Use when git branch, git workflow, 分支策略, branch naming, trunk-based development, Git Flow, feature branch, release branch, or how to open/update/merge a…
لغة النص الأصلي: الإنجليزية
Configure and review GitHub Actions OIDC federation to AWS IAM roles so CI obtains short-lived credentials via sts:AssumeRoleWithWebIdentity without long-lived access keys. Use when designing or auditing GitHub OIDC providers, role trust policies (sub/aud…
لغة النص الأصلي: الإنجليزية
Harden GitLab CI/CD for owned projects: .gitlab-ci.yml trust boundaries, protected/masked variables, environment protection, CI_JOB_TOKEN least privilege, runner isolation, fork/MR secret exposure, include/template supply chain, and deploy gates. Use when…
لغة النص الأصلي: الإنجليزية
Run and gate Go vulnerability checks with govulncheck locally and in CI: module/source analysis, binary mode, JSON outputs, version pins, and actionable upgrade paths for owned Go modules. Use when govulncheck, golang.org/x/vuln, Go CVE scanning, go vuln DB,…
لغة النص الأصلي: الإنجليزية
Keep Go modules healthy: go.mod/go.sum hygiene, replace directives, Minimum Version Selection (MVS), go mod tidy, retract, and private modules via GOPRIVATE/GOPROXY/GONOSUMDB. Use when go.mod, go.sum, replace directives, go mod tidy, MVS, retract, GOPRIVATE,…
لغة النص الأصلي: الإنجليزية
Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.
لغة النص الأصلي: لغات متعددة
Apply Effective Go, gofmt/goimports, idiomatic error handling, package and exported-API comments, naming, and module-local style when writing or reviewing Go code. Use when Go style, gofmt, goimports, Effective Go, package comments, error wrapping, Go 风格, or…
لغة النص الأصلي: الإنجليزية
Verify Go module checksums against the public checksum database (sumdb): GOSUMDB, sum.golang.org, go.sum integrity, go mod verify, tiled hashes, and GONOSUMDB/GOPRIVATE exceptions. Use when sumdb, GOSUMDB, go.sum mismatch, SECURITY ERROR checksum, go mod…
لغة النص الأصلي: الإنجليزية
Run and triage securego/gosec static analysis on owned Go modules: rule selection, severity/confidence gates, nosec discipline, JSON/SARIF CI artifacts, and fix-then-recheck for common G-rules. Use when gosec, securego, Go SAST, G101 secrets, G201 SQL, G204…
لغة النص الأصلي: الإنجليزية
Gradle dependency locking: enable locks, generate and commit lockfiles, update deliberately, and fail CI on drift so resolved graphs stay reproducible. Use when gradle.lockfile, dependencyLocking, lockAllConfigurations, --write-locks, resolution locks, locked…
لغة النص الأصلي: الإنجليزية
GraphQL batching and alias multiplication: JSON-array multi-ops, field-alias fan-out, rate-limit/cost gaps, and Apollo/server batch configuration. Use when assessing or hardening GraphQL against array batching, alias brute force, per-HTTP vs per-operation…
لغة النص الأصلي: الإنجليزية
GraphQL persisted and allowlisted queries: Automatic Persisted Queries (APQ), trusted-document / operation allowlists, hash registration, full-query bypass, and production hardening for Apollo, Relay, and similar clients. Use when traffic shows…
لغة النص الأصلي: الإنجليزية
Authorized GraphQL query depth and complexity analysis: cost scoring models, maxDepth / maxComplexity limits, alias and list-multiplier abuse, nested-query DoS proofs, and persisted-query allowlists. Use when GraphQL resolvers risk expensive nested selection…
لغة النص الأصلي: الإنجليزية
Design and evolve GraphQL schemas (SDL/code-first): types, nullability, connections, mutations, errors, and versioning style. Use when GraphQL schema design, SDL review, GraphQL API modeling, Relay connections, input types, or schema evolution—not for…
لغة النص الأصلي: الإنجليزية
Authorized gRPC security testing: service/method inventory, metadata auth, channel security (TLS/mTLS), interceptors, reflection abuse, message-level authz (IDOR), injection via fields, and gRPC-Web edge cases. Use when testing owned or in-scope gRPC/gRPC-Web…
لغة النص الأصلي: الإنجليزية
Wire Anchore Grype vulnerability scans into CI with severity fail-on gates, config and ignore policy, DB freshness, and SARIF/JSON artifacts. Use when Grype CI, anchore/scan-action, grype image/dir/sbom, --fail-on, .grype.yaml, grype ignore matches, SARIF…
لغة النص الأصلي: الإنجليزية
Authorized HAProxy ACL and routing-control review: path/host/header matchers, use_backend / http-request deny allowlists, src and X-Forwarded-For trust, stats and admin plane protection, TLS client-cert ACLs, and bypass-prone patterns (normalization, case,…
لغة النص الأصلي: الإنجليزية
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
لغة النص الأصلي: لغات متعددة
Create, repair, validate, visually QA, and package Codex-compatible v2 animated pets from character art, generated images, company or prospect brand cues, or visual references. Use for any new Codex pet, custom mascot, non-pixel pet style, brand-inspired pet,…
لغة النص الأصلي: الإنجليزية
Analyze and reproduce client-side JavaScript signature, token, cookie, obfuscation, JSVMP, worker, and WebAssembly flows for user-owned, authorized, or CTF sandbox targets. Use when a task requires tracing a Web request from UI action to parameter…
لغة النص الأصلي: الإنجليزية
Helm chart security review for owned/authorized apps: values secrets, privileged pods, default service accounts, NetworkPolicy gaps, chart provenance/signing, and --set / CI secret leaks. Use when reviewing Chart.yaml, values.yaml, templates, helm…
لغة النص الأصلي: الإنجليزية
Helm secrets plugins (helm-secrets + SOPS/vals backends) for encrypting chart values, decrypt-on-render install/upgrade, and CI-safe secret files. Use when installing or configuring helm-secrets, choosing SOPS vs vals, encrypting values.yaml, wiring age/PGP…
لغة النص الأصلي: الإنجليزية
Query the per-turn DecisionEntry log for skill co-occurrence patterns, meta-skill usage stats, and the router fixture corpus. Returns a JSON summary suitable for downstream LLM consumption. Used by meta-skill-creator's harvest step but also useful standalone…
لغة النص الأصلي: الإنجليزية
Authorized Host header and cache-poisoning methodology: unkeyed Host / X-Forwarded-Host influence on cacheable responses, cache-key confusion, absolute URL injection into shared caches, and second-client proofs. Use when CDNs or reverse proxies may store…
لغة النص الأصلي: الإنجليزية
Prepare, verify, and operate HTTP Strict Transport Security (HSTS) for Chromium preload eligibility and long-lived HTTPS enforcement. Use when auditing or enabling Strict-Transport-Security with preload, includeSubDomains, max-age policy, apex/www dual hosts,…
لغة النص الأصلي: الإنجليزية
Expert HTML development skill for building web pages, forms, and interactive content. Use when creating HTML documents, structuring web content, implementing semantic markup, adding forms and media, working with HTML5 APIs, or needing HTML templates, best…
لغة النص الأصلي: الإنجليزية