메뉴
이 저장소의 skills
SkillsMP는 tomysh1337/openstarry-code에서 484개의 skill을 수집했습니다. skill을 열어 소스와 세부 정보를 확인하세요.
tomysh1337/openstarry-code수집된 skill 484개 중 40개를 표시합니다.
Flux GitOps security for owned/authorized clusters: source trust (Git/OCI), multi-tenant path and namespace isolation, controller and impersonation RBAC, secrets decryption (SOPS/age/ESO), image automation and admission pins, and notification webhook hygiene.…
원문 언어: 영어
Frida attach/spawn playbook for owned apps and CTF labs: frida-server setup, process attach vs spawn, common Java/ObjC/native Interceptor hooks, script patterns, and troubleshooting. Use when instrumenting authorized Android/iOS apps or native lab binaries at…
원문 언어: 영어
Select the most specific installed skill for frontend applications, React/Next.js, shadcn, UI/UX, accessibility, responsive layouts, browser behavior, images, video, animation, themes, and branded artifacts. Use when a user asks to build, redesign, review,…
원문 언어: 영어
Review and harden Google Cloud VPC firewall rules for owned projects: 0.0.0.0/0 ingress, priority/order, target tags vs service accounts, hierarchical firewall policies, and shadow/redundant rules. Use when assessing GCP VPC allow/deny posture, open admin…
원문 언어: 영어
GCP IAM principles for authorized assessment and hardening: least privilege, policy inheritance, service accounts, basic roles, key hygiene, and common privilege-escalation footguns. Use when reviewing org-owned projects or written engagements — not…
원문 언어: 영어
Authorized assessment and hardening of Google Cloud Storage (GCS) public exposure: allUsers / allAuthenticatedUsers IAM, uniform bucket-level access, public access prevention, legacy ACLs vs IAM, and org-policy guardrails. Use when reviewing org-owned buckets…
원문 언어: 영어
Configure and review Google Cloud Workload Identity Federation (WIF) so CI and external IdPs (especially GitHub Actions OIDC) obtain short-lived tokens for a GCP service account without user-managed SA keys. Use when designing or auditing workload identity…
원문 언어: 영어
Enable, operate, and triage Google Container Registry / Artifact Registry vulnerability scanning (Container Analysis, continuous and on-demand scans, gcloud findings, CI gates on image digests). Use when GCR CVE scan, Artifact Registry vulnerability scanning,…
원문 언어: 영어
Perform complex, long-running research tasks using Gemini Deep Research Agent. Use when asked to research topics requiring multi-source synthesis, competitive analysis, market research, or comprehensive technical investigations that benefit from systematic…
원문 언어: 영어
Deep integration with Ghidra and IDA Pro for binary analysis and reverse engineering
원문 언어: 영어
Ghidra and IDA Pro workflows for binary analysis: headless analysis, decompiler output, scripting, function recovery, types, signatures, and xrefs. Use when the user asks for Ghidra, IDA, analyzeHeadless, IDAPython, Ghidra scripts, or database-driven reverse…
원문 언어: 영어
Use for free/open reverse engineering with Ghidra (headless or GUI), including decompile, cross-refs, and optional Ghidra MCP workflows when IDA is unavailable.
원문 언어: 중국어
Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditing compiled code, renaming symbols, annotating disassembly, cross-references, or any RE task - even without explicit mention of Ghidra.
원문 언어: 영어
Ghidra headless (analyzeHeadless) and Jython/Python scripting basics for authorized binary reverse engineering: project import, post-scripts, function and decompiler export, xrefs, and batch automation. Use when writing or debugging Ghidra scripts,…
원문 언어: 영어
Apply branch naming, trunk-based or Git Flow high-level strategy, and PR hygiene for healthy git history. Use when git branch, git workflow, 分支策略, branch naming, trunk-based development, Git Flow, feature branch, release branch, or how to open/update/merge a…
원문 언어: 영어
Configure and review GitHub Actions OIDC federation to AWS IAM roles so CI obtains short-lived credentials via sts:AssumeRoleWithWebIdentity without long-lived access keys. Use when designing or auditing GitHub OIDC providers, role trust policies (sub/aud…
원문 언어: 영어
Harden GitLab CI/CD for owned projects: .gitlab-ci.yml trust boundaries, protected/masked variables, environment protection, CI_JOB_TOKEN least privilege, runner isolation, fork/MR secret exposure, include/template supply chain, and deploy gates. Use when…
원문 언어: 영어
Run and gate Go vulnerability checks with govulncheck locally and in CI: module/source analysis, binary mode, JSON outputs, version pins, and actionable upgrade paths for owned Go modules. Use when govulncheck, golang.org/x/vuln, Go CVE scanning, go vuln DB,…
원문 언어: 영어
Keep Go modules healthy: go.mod/go.sum hygiene, replace directives, Minimum Version Selection (MVS), go mod tidy, retract, and private modules via GOPRIVATE/GOPROXY/GONOSUMDB. Use when go.mod, go.sum, replace directives, go mod tidy, MVS, retract, GOPRIVATE,…
원문 언어: 영어
Use for reverse engineering stripped Go and Rust binaries including runtime recognition, pclntab/moduel data recovery, panic strings, and idiomatic decompilation recovery.
원문 언어: 다국어 혼합
Apply Effective Go, gofmt/goimports, idiomatic error handling, package and exported-API comments, naming, and module-local style when writing or reviewing Go code. Use when Go style, gofmt, goimports, Effective Go, package comments, error wrapping, Go 风格, or…
원문 언어: 영어
Verify Go module checksums against the public checksum database (sumdb): GOSUMDB, sum.golang.org, go.sum integrity, go mod verify, tiled hashes, and GONOSUMDB/GOPRIVATE exceptions. Use when sumdb, GOSUMDB, go.sum mismatch, SECURITY ERROR checksum, go mod…
원문 언어: 영어
Run and triage securego/gosec static analysis on owned Go modules: rule selection, severity/confidence gates, nosec discipline, JSON/SARIF CI artifacts, and fix-then-recheck for common G-rules. Use when gosec, securego, Go SAST, G101 secrets, G201 SQL, G204…
원문 언어: 영어
Gradle dependency locking: enable locks, generate and commit lockfiles, update deliberately, and fail CI on drift so resolved graphs stay reproducible. Use when gradle.lockfile, dependencyLocking, lockAllConfigurations, --write-locks, resolution locks, locked…
원문 언어: 영어
GraphQL batching and alias multiplication: JSON-array multi-ops, field-alias fan-out, rate-limit/cost gaps, and Apollo/server batch configuration. Use when assessing or hardening GraphQL against array batching, alias brute force, per-HTTP vs per-operation…
원문 언어: 영어
GraphQL persisted and allowlisted queries: Automatic Persisted Queries (APQ), trusted-document / operation allowlists, hash registration, full-query bypass, and production hardening for Apollo, Relay, and similar clients. Use when traffic shows…
원문 언어: 영어
Authorized GraphQL query depth and complexity analysis: cost scoring models, maxDepth / maxComplexity limits, alias and list-multiplier abuse, nested-query DoS proofs, and persisted-query allowlists. Use when GraphQL resolvers risk expensive nested selection…
원문 언어: 영어
Design and evolve GraphQL schemas (SDL/code-first): types, nullability, connections, mutations, errors, and versioning style. Use when GraphQL schema design, SDL review, GraphQL API modeling, Relay connections, input types, or schema evolution—not for…
원문 언어: 영어
Authorized gRPC security testing: service/method inventory, metadata auth, channel security (TLS/mTLS), interceptors, reflection abuse, message-level authz (IDOR), injection via fields, and gRPC-Web edge cases. Use when testing owned or in-scope gRPC/gRPC-Web…
원문 언어: 영어
Wire Anchore Grype vulnerability scans into CI with severity fail-on gates, config and ignore policy, DB freshness, and SARIF/JSON artifacts. Use when Grype CI, anchore/scan-action, grype image/dir/sbom, --fail-on, .grype.yaml, grype ignore matches, SARIF…
원문 언어: 영어
Authorized HAProxy ACL and routing-control review: path/host/header matchers, use_backend / http-request deny allowlists, src and X-Forwarded-For trust, stats and admin plane protection, TLS client-cert ACLs, and bypass-prone patterns (normalization, case,…
원문 언어: 영어
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
원문 언어: 다국어 혼합
Create, repair, validate, visually QA, and package Codex-compatible v2 animated pets from character art, generated images, company or prospect brand cues, or visual references. Use for any new Codex pet, custom mascot, non-pixel pet style, brand-inspired pet,…
원문 언어: 영어
Analyze and reproduce client-side JavaScript signature, token, cookie, obfuscation, JSVMP, worker, and WebAssembly flows for user-owned, authorized, or CTF sandbox targets. Use when a task requires tracing a Web request from UI action to parameter…
원문 언어: 영어
Helm chart security review for owned/authorized apps: values secrets, privileged pods, default service accounts, NetworkPolicy gaps, chart provenance/signing, and --set / CI secret leaks. Use when reviewing Chart.yaml, values.yaml, templates, helm…
원문 언어: 영어
Helm secrets plugins (helm-secrets + SOPS/vals backends) for encrypting chart values, decrypt-on-render install/upgrade, and CI-safe secret files. Use when installing or configuring helm-secrets, choosing SOPS vs vals, encrypting values.yaml, wiring age/PGP…
원문 언어: 영어
Query the per-turn DecisionEntry log for skill co-occurrence patterns, meta-skill usage stats, and the router fixture corpus. Returns a JSON summary suitable for downstream LLM consumption. Used by meta-skill-creator's harvest step but also useful standalone…
원문 언어: 영어
Authorized Host header and cache-poisoning methodology: unkeyed Host / X-Forwarded-Host influence on cacheable responses, cache-key confusion, absolute URL injection into shared caches, and second-client proofs. Use when CDNs or reverse proxies may store…
원문 언어: 영어
Prepare, verify, and operate HTTP Strict Transport Security (HSTS) for Chromium preload eligibility and long-lived HTTPS enforcement. Use when auditing or enabling Strict-Transport-Security with preload, includeSubDomains, max-age policy, apex/www dual hosts,…
원문 언어: 영어
Expert HTML development skill for building web pages, forms, and interactive content. Use when creating HTML documents, structuring web content, implementing semantic markup, adding forms and media, working with HTML5 APIs, or needing HTML templates, best…
원문 언어: 영어