Menu
Skills dans ce dépôt
SkillsMP a collecté 484 skills depuis tomysh1337/openstarry-code. Ouvrez un skill pour examiner sa source et ses détails.
tomysh1337/openstarry-codeAffichage de 40 skills collectés sur 484.
Design load shedding under overload: admission control, priority queues, graceful degradation, and drop/reject policies that protect critical paths. Use when load shedding, overload, backpressure, 限流丢弃, 过载保护, 503 shedding, queue full, admission control, or…
Langue du texte source : anglais
Standards for application logs: structured fields, correct levels, stable message templates, and no PII or secrets. Use when logging style, 日志规范, log messages, logger design, slog/zap/logrus/structlog, or when reviews flag noisy, string-interpolated, or leaky…
Langue du texte source : anglais
Detect, prove, and remediate login CSRF: cross-site login that binds the victim browser to an attacker-controlled identity, silent account switch, and post-login action chaining. Use when login, SSO password-form, or magic-link consume endpoints lack…
Langue du texte source : anglais
Use for authorized macOS and Mach-O reverse engineering including codesign, Objective-C/Swift recovery, endpoint security surfaces, and Apple platform malware analysis.
Langue du texte source : chinois
Authorized assessment and hardening of passwordless magic-link authentication: token lifecycle, single-use/TTL, email binding, consume races, open-redirect after verify, prefetch/scanner consumption, and post-login session hygiene. Use when login, sign-in, or…
Langue du texte source : anglais
Convert documents and files to Markdown using markitdown. Use when converting PDF, Word (.docx), PowerPoint (.pptx), Excel (.xlsx, .xls), HTML, CSV, JSON, XML, images (with EXIF/OCR), audio (with transcription), ZIP archives, YouTube URLs, or EPubs to…
Langue du texte source : anglais
Write and edit Markdown documentation with consistent headings, links, tables, code fences, and docs-site hygiene. Use when markdown style, docs markdown, README polish, CONTRIBUTING, ADRs, MkDocs/Docusaurus/VitePress content, or fixing broken docs structure,…
Langue du texte source : anglais
Harden Markdown-to-HTML pipelines against XSS: safe renderers, post-parse HTML sanitization, link/image URL allowlists, and tests for raw HTML and attribute breakouts. Use when user or third-party Markdown is rendered to HTML (comments, wikis, READMEs, chat,…
Langue du texte source : anglais
Select the most specific installed skill for marketing strategy, SEO, copywriting, content, campaigns, positioning, pricing, launch, growth, retention, email, social media, and conversion optimization. Use for marketing, SEO, CRO, copy, campaign, 营销, 文案,…
Langue du texte source : anglais
Find and safely prove mass assignment / over-posting when APIs or frameworks bind client JSON or form fields onto domain objects, including hidden role, ownership, price, and flag fields. Use when create/update endpoints accept broad DTOs,…
Langue du texte source : anglais
Run and gate OWASP Dependency-Check on Maven projects: plugin config, NVD/API keys, suppressions, report formats, CI fail builds, and upgrade paths for owned Java/Maven modules. Use when dependency-check-maven, OWASP dependency check, Maven CVE scan, NVD API…
Langue du texte source : anglais
Use this meta-skill instead of answering directly when the current user asks to generate an AI short-drama or 短剧 from a topic. The workflow infers render style, character identity, and shot count (1-10, default 5) from the request (filling in conservative…
Langue du texte source : anglais
Authorized methodology for testing multi-factor authentication weaknesses: backup codes, remember-device, race on attempt counters, step-up gaps, and high-level response/status manipulation. Use when login, step-up, or recovery flows claim MFA is enforced but…
Langue du texte source : anglais
Authorized methodology for MFA enrollment and setup-skip flaws: force MFA incomplete, bind attacker factors, disable without step-up, and treat enrollment as optional. Use when register/enroll/setup-2FA, skip setup, or optional MFA paths may leave accounts…
Langue du texte source : anglais
编写和调试 Minecraft 1.20.1 Forge/ModLauncher 客户端 JavaScript 插件。适用于 SRG、官方混淆、启动器重映射或魔改端环境，以及 Mojmap 字段名无法直接访问的情况；覆盖类型确认、反射解析、Holder 解包、调试日志和性能安全的成品化流程。
Langue du texte source : chinois
Find and fix HTTPS mixed content (active and passive), insecure third-party assets, missing upgrade-insecure-requests / HSTS, and CSP report endpoints for residual HTTP subresources. Use when hardening org-owned or authorized HTTPS sites that still load…
Langue du texte source : anglais
Choose and review mocks, stubs, fakes, spies, and dummies: when each is appropriate, how to avoid over-mocking, and how to keep tests honest. Use when mock, test doubles, 单元测试 mock, stub, fake, spy, mockito, unittest.mock, jest.fn, or reviews flag brittle…
Langue du texte source : anglais
Authorized MongoDB authentication and exposure hardening: SCRAM, bindIp, TLS, role-based access control, localhost exception, and free monitoring disablement. Use when reviewing mongod.conf, Atlas/self-hosted MongoDB, unauthorized access risk, or hardening…
Langue du texte source : anglais
Mutual TLS (mTLS) client authentication basics for owned or authorized systems: client cert trust, require-and-verify config, identity mapping, revocation, and common misconfigs. Use when designing or reviewing mTLS between services or APIs, debugging…
Langue du texte source : anglais
SPIFFE/SPIRE workload identity for mTLS: SPIFFE IDs (spiffe:// trust domain path), SVIDs (X.509 and JWT), Workload API attestation, trust bundles, and peer ID authorization. Use when designing or reviewing SPIRE agents/servers, mapping Kubernetes SA/node…
Langue du texte source : anglais
Harden multi-stage Dockerfiles so build toolchains, secrets, and VCS context never reach the runtime image. Use when multi-stage Dockerfile security, COPY --from leakage, builder secrets in final layers, distroless or scratch runtime stages, BuildKit secret…
Langue du texte source : anglais
Plan and review mutation testing: mutants, kill/survive scores, equivalent mutants, and CI budgets. Use when mutation testing, 变异测试, PIT, Stryker, mutmut, infection, mutant survival, or test strength beyond coverage %. Complements unit-testing-style and…
Langue du texte source : anglais
Authorized MySQL/MariaDB security hardening: bind-address, local_infile, user@host accounts, SSL/TLS, remove test DB, FILE privilege, and validate_password. Use when reviewing my.cnf, cloud MySQL/MariaDB, or owned lab instances — not for scanning or abusing…
Langue du texte source : anglais
General naming conventions for variables, functions, types, files, and packages: domain language, consistency, and avoiding Hungarian notation or noisy prefixes. Use when naming, renaming, choosing identifiers, 命名规范, 变量命名, 函数命名, file naming, or when reviews…
Langue du texte source : anglais
Deterministic OpenRouter image generation adapter for Nano Banana Pro / Gemini image models. Use as skill_exec when a meta-skill needs local image files and structured IMAGE_READY records without spawning an LLM agent.
Langue du texte source : anglais
Generate or edit a single image via OpenRouter (google/gemini-3.1-flash-image-preview by default). Accepts a text prompt and optional --input-image for image-to-image editing. Trigger when the user asks for an AI image, illustration, concept art, product…
Langue du texte source : anglais
After an initial reverse-engineering pass, detect and classify native residue such as signed -3###### constants, 0x###### addresses, RVA/VA offsets, JNI pointers, and embedded native modules, then validate candidates with static analysis and an IDA debugger…
Langue du texte source : anglais
Network penetration testing: port scanning, service enumeration, banner grabbing, protocol fuzzing. Trigger: scan network, enumerate ports, banner grab, service detect, fingerprint, network pentest.
Langue du texte source : anglais
Network protocol capture, analysis, and fuzzing capabilities
Langue du texte source : anglais
Capture and analyze network traffic with PCAP, tshark/Wireshark, Lua dissectors, Scapy crafting, state-machine recovery, debugging, and authorized fuzzing. Use for pcap triage, custom dissectors, packet reproduction, and controlled protocol testing on owned…
Langue du texte source : anglais
Next.js security checklist for org-owned apps: App Router / RSC data exposure, middleware authz, env public vs server split, Server Actions, headers, and route handlers. Use when Next.js security, RSC leak, middleware bypass, NEXT_PUBLIC secrets, Server…
Langue du texte source : anglais
Configure and review nginx limit_req / limit_req_zone (and related limit_conn) rate-limit zones: keys, shared-memory sizing, rate and burst, nodelay, status codes, trusted client IP, and per-location attachment. Use when designing or auditing nginx rate…
Langue du texte source : anglais
Authorized nginx hardening and assessment: HTTP security headers, TLS termination settings, server_tokens, common reverse-proxy and header misconfigurations. Use when reviewing nginx.conf / sites-enabled, missing CSP/HSTS/XFO, weak TLS, version disclosure, or…
Langue du texte source : anglais
Node.js security checklist for org-owned services: Express/Fastify/Nest defaults, validation, injection sinks, sessions/JWT cookies, secrets, dependencies, and HTTP hardening. Use when reviewing Node/Express APIs, npm risk, helmet/CORS, or release hardening —…
Langue du texte source : anglais
Defend applications against NoSQL operator injection and type confusion: block $gt/$ne/$where and other operator keys, force typed scalars, sanitize Mongo-style filters, and use query sanitization libraries. Use when hardening MongoDB/Mongoose/CouchDB-style…
Langue du texte source : anglais
Notion API for creating and managing pages, databases, and blocks.
Langue du texte source : anglais
Keep npm package publish contents intentional: package.json "files", .npmignore vs .gitignore, npm pack dry-runs, and exclusion of secrets, tests, and build junk from the tarball. Use when npm pack, npm publish, package tarball contents, .npmignore,…
Langue du texte source : anglais
Harden the npm supply chain: committed lockfiles, frozen CI installs (npm ci), integrity hashes, .npmrc registry pin, and lifecycle-script risk (preinstall/install/postinstall/prepare). Use when package-lock.json, npm ci vs npm install, ignore-scripts,…
Langue du texte source : anglais
Keep NuGet dependency graphs healthy: PackageReference, Central Package Management, packages.lock.json, nuget.config sources, Package Source Mapping, restore locked mode, and vulnerable/deprecated package cleanup. Use when csproj PackageReference,…
Langue du texte source : anglais
Authorized design and assessment of OAuth 2.0 / OIDC client authentication at the token and related client-auth endpoints: none, client_secret_basic/post, client_secret_jwt, private_key_jwt, and mTLS (tls_client_auth / self_signed_tls_client_auth). Use when…
Langue du texte source : anglais