Menu
Skills dans ce dépôt
SkillsMP a collecté 484 skills depuis tomysh1337/openstarry-code. Ouvrez un skill pour examiner sa source et ses détails.
tomysh1337/openstarry-codeAffichage de 40 skills collectés sur 484.
Flux GitOps security for owned/authorized clusters: source trust (Git/OCI), multi-tenant path and namespace isolation, controller and impersonation RBAC, secrets decryption (SOPS/age/ESO), image automation and admission pins, and notification webhook hygiene.…
Langue du texte source : anglais
Frida attach/spawn playbook for owned apps and CTF labs: frida-server setup, process attach vs spawn, common Java/ObjC/native Interceptor hooks, script patterns, and troubleshooting. Use when instrumenting authorized Android/iOS apps or native lab binaries at…
Langue du texte source : anglais
Select the most specific installed skill for frontend applications, React/Next.js, shadcn, UI/UX, accessibility, responsive layouts, browser behavior, images, video, animation, themes, and branded artifacts. Use when a user asks to build, redesign, review,…
Langue du texte source : anglais
Review and harden Google Cloud VPC firewall rules for owned projects: 0.0.0.0/0 ingress, priority/order, target tags vs service accounts, hierarchical firewall policies, and shadow/redundant rules. Use when assessing GCP VPC allow/deny posture, open admin…
Langue du texte source : anglais
GCP IAM principles for authorized assessment and hardening: least privilege, policy inheritance, service accounts, basic roles, key hygiene, and common privilege-escalation footguns. Use when reviewing org-owned projects or written engagements — not…
Langue du texte source : anglais
Authorized assessment and hardening of Google Cloud Storage (GCS) public exposure: allUsers / allAuthenticatedUsers IAM, uniform bucket-level access, public access prevention, legacy ACLs vs IAM, and org-policy guardrails. Use when reviewing org-owned buckets…
Langue du texte source : anglais
Configure and review Google Cloud Workload Identity Federation (WIF) so CI and external IdPs (especially GitHub Actions OIDC) obtain short-lived tokens for a GCP service account without user-managed SA keys. Use when designing or auditing workload identity…
Langue du texte source : anglais
Enable, operate, and triage Google Container Registry / Artifact Registry vulnerability scanning (Container Analysis, continuous and on-demand scans, gcloud findings, CI gates on image digests). Use when GCR CVE scan, Artifact Registry vulnerability scanning,…
Langue du texte source : anglais
Perform complex, long-running research tasks using Gemini Deep Research Agent. Use when asked to research topics requiring multi-source synthesis, competitive analysis, market research, or comprehensive technical investigations that benefit from systematic…
Langue du texte source : anglais
Deep integration with Ghidra and IDA Pro for binary analysis and reverse engineering
Langue du texte source : anglais
Ghidra and IDA Pro workflows for binary analysis: headless analysis, decompiler output, scripting, function recovery, types, signatures, and xrefs. Use when the user asks for Ghidra, IDA, analyzeHeadless, IDAPython, Ghidra scripts, or database-driven reverse…
Langue du texte source : anglais
Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.
Langue du texte source : chinois
Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditing compiled code, renaming symbols, annotating disassembly, cross-references, or any RE task - even without explicit mention of Ghidra.
Langue du texte source : anglais
Ghidra headless (analyzeHeadless) and Jython/Python scripting basics for authorized binary reverse engineering: project import, post-scripts, function and decompiler export, xrefs, and batch automation. Use when writing or debugging Ghidra scripts,…
Langue du texte source : anglais
Apply branch naming, trunk-based or Git Flow high-level strategy, and PR hygiene for healthy git history. Use when git branch, git workflow, 分支策略, branch naming, trunk-based development, Git Flow, feature branch, release branch, or how to open/update/merge a…
Langue du texte source : anglais
Configure and review GitHub Actions OIDC federation to AWS IAM roles so CI obtains short-lived credentials via sts:AssumeRoleWithWebIdentity without long-lived access keys. Use when designing or auditing GitHub OIDC providers, role trust policies (sub/aud…
Langue du texte source : anglais
Harden GitLab CI/CD for owned projects: .gitlab-ci.yml trust boundaries, protected/masked variables, environment protection, CI_JOB_TOKEN least privilege, runner isolation, fork/MR secret exposure, include/template supply chain, and deploy gates. Use when…
Langue du texte source : anglais
Run and gate Go vulnerability checks with govulncheck locally and in CI: module/source analysis, binary mode, JSON outputs, version pins, and actionable upgrade paths for owned Go modules. Use when govulncheck, golang.org/x/vuln, Go CVE scanning, go vuln DB,…
Langue du texte source : anglais
Keep Go modules healthy: go.mod/go.sum hygiene, replace directives, Minimum Version Selection (MVS), go mod tidy, retract, and private modules via GOPRIVATE/GOPROXY/GONOSUMDB. Use when go.mod, go.sum, replace directives, go mod tidy, MVS, retract, GOPRIVATE,…
Langue du texte source : anglais
Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.
Langue du texte source : Plusieurs langues
Apply Effective Go, gofmt/goimports, idiomatic error handling, package and exported-API comments, naming, and module-local style when writing or reviewing Go code. Use when Go style, gofmt, goimports, Effective Go, package comments, error wrapping, Go 风格, or…
Langue du texte source : anglais
Verify Go module checksums against the public checksum database (sumdb): GOSUMDB, sum.golang.org, go.sum integrity, go mod verify, tiled hashes, and GONOSUMDB/GOPRIVATE exceptions. Use when sumdb, GOSUMDB, go.sum mismatch, SECURITY ERROR checksum, go mod…
Langue du texte source : anglais
Run and triage securego/gosec static analysis on owned Go modules: rule selection, severity/confidence gates, nosec discipline, JSON/SARIF CI artifacts, and fix-then-recheck for common G-rules. Use when gosec, securego, Go SAST, G101 secrets, G201 SQL, G204…
Langue du texte source : anglais
Gradle dependency locking: enable locks, generate and commit lockfiles, update deliberately, and fail CI on drift so resolved graphs stay reproducible. Use when gradle.lockfile, dependencyLocking, lockAllConfigurations, --write-locks, resolution locks, locked…
Langue du texte source : anglais
GraphQL batching and alias multiplication: JSON-array multi-ops, field-alias fan-out, rate-limit/cost gaps, and Apollo/server batch configuration. Use when assessing or hardening GraphQL against array batching, alias brute force, per-HTTP vs per-operation…
Langue du texte source : anglais
GraphQL persisted and allowlisted queries: Automatic Persisted Queries (APQ), trusted-document / operation allowlists, hash registration, full-query bypass, and production hardening for Apollo, Relay, and similar clients. Use when traffic shows…
Langue du texte source : anglais
Authorized GraphQL query depth and complexity analysis: cost scoring models, maxDepth / maxComplexity limits, alias and list-multiplier abuse, nested-query DoS proofs, and persisted-query allowlists. Use when GraphQL resolvers risk expensive nested selection…
Langue du texte source : anglais
Design and evolve GraphQL schemas (SDL/code-first): types, nullability, connections, mutations, errors, and versioning style. Use when GraphQL schema design, SDL review, GraphQL API modeling, Relay connections, input types, or schema evolution—not for…
Langue du texte source : anglais
Authorized gRPC security testing: service/method inventory, metadata auth, channel security (TLS/mTLS), interceptors, reflection abuse, message-level authz (IDOR), injection via fields, and gRPC-Web edge cases. Use when testing owned or in-scope gRPC/gRPC-Web…
Langue du texte source : anglais
Wire Anchore Grype vulnerability scans into CI with severity fail-on gates, config and ignore policy, DB freshness, and SARIF/JSON artifacts. Use when Grype CI, anchore/scan-action, grype image/dir/sbom, --fail-on, .grype.yaml, grype ignore matches, SARIF…
Langue du texte source : anglais
Authorized HAProxy ACL and routing-control review: path/host/header matchers, use_backend / http-request deny allowlists, src and X-Forwarded-For trust, stats and admin plane protection, TLS client-cert ACLs, and bypass-prone patterns (normalization, case,…
Langue du texte source : anglais
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
Langue du texte source : Plusieurs langues
Create, repair, validate, visually QA, and package Codex-compatible v2 animated pets from character art, generated images, company or prospect brand cues, or visual references. Use for any new Codex pet, custom mascot, non-pixel pet style, brand-inspired pet,…
Langue du texte source : anglais
Analyze and reproduce client-side JavaScript signature, token, cookie, obfuscation, JSVMP, worker, and WebAssembly flows for user-owned, authorized, or CTF sandbox targets. Use when a task requires tracing a Web request from UI action to parameter…
Langue du texte source : anglais
Helm chart security review for owned/authorized apps: values secrets, privileged pods, default service accounts, NetworkPolicy gaps, chart provenance/signing, and --set / CI secret leaks. Use when reviewing Chart.yaml, values.yaml, templates, helm…
Langue du texte source : anglais
Helm secrets plugins (helm-secrets + SOPS/vals backends) for encrypting chart values, decrypt-on-render install/upgrade, and CI-safe secret files. Use when installing or configuring helm-secrets, choosing SOPS vs vals, encrypting values.yaml, wiring age/PGP…
Langue du texte source : anglais
Query the per-turn DecisionEntry log for skill co-occurrence patterns, meta-skill usage stats, and the router fixture corpus. Returns a JSON summary suitable for downstream LLM consumption. Used by meta-skill-creator's harvest step but also useful standalone…
Langue du texte source : anglais
Authorized Host header and cache-poisoning methodology: unkeyed Host / X-Forwarded-Host influence on cacheable responses, cache-key confusion, absolute URL injection into shared caches, and second-client proofs. Use when CDNs or reverse proxies may store…
Langue du texte source : anglais
Prepare, verify, and operate HTTP Strict Transport Security (HSTS) for Chromium preload eligibility and long-lived HTTPS enforcement. Use when auditing or enabling Strict-Transport-Security with preload, includeSubDomains, max-age policy, apex/www dual hosts,…
Langue du texte source : anglais
Expert HTML development skill for building web pages, forms, and interactive content. Use when creating HTML documents, structuring web content, implementing semantic markup, adding forms and media, working with HTML5 APIs, or needing HTML templates, best…
Langue du texte source : anglais