菜单
CVE research, standalone PoC script and report generation. Given a CVE ID, researches NVD and advisories, generates a safe Python PoC, and writes a detailed vulnerability report.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | cve-poc-generator |
| description | CVE research, standalone PoC script and report generation. Given a CVE ID, researches NVD and advisories, generates a safe Python PoC, and writes a detailed vulnerability report. |
Research a CVE by ID, generate a standalone Python proof-of-concept script, and produce a detailed vulnerability report.
poc.py) that demonstrates the vulnerability safely. Follow the script standards in reference/poc-methodology.md.report.md) with metadata, root cause analysis, risk assessment, and remediation guidance.| Field | Source | Usage |
|---|---|---|
| CVE ID | NVD | Primary identifier |
| CVSS v3.1 Score + Vector | NVD | Risk scoring |
| CWE ID(s) | NVD | Vulnerability classification |
| CPE Matches | NVD | Affected products and versions |
| Advisory URLs | NVD references | Research sources |
| Patch Links | NVD references / vendor | Remediation guidance |
| Description | NVD | Vulnerability summary |
| Published / Modified dates | NVD | Timeline |
outputs/
processed/cve-pocs/CVE-XXXX-XXXXX/
poc.py # Standalone Python PoC script
reports/cve-pocs/CVE-XXXX-XXXXX/
report.md # Detailed vulnerability report
/cve-poc-generator CVE-2024-XXXXX
The skill accepts a single CVE ID as argument. Multiple CVEs should be processed with separate invocations.
requests. No framework dependencies.--confirm flag.Build a private, self-hosted "watch a movie together in sync" site for two people in different countries — synced play/pause/seek over WebSocket, WebRTC camera+mic call with a coturn TURN relay, a shared laser pointer, ffmpeg smooth-bitrate transcoding so it never buffers, and a token-gated room link. Use when someone wants to watch local video files in sync with a partner/friend remotely, replace Kosmi/Teleparty/Twoseven with something they own, stream a personal movie library over the web with synced controls, or add a video-call overlay to a video player. Triggers: "watch movies together long distance", "sync video playback two browsers", "self-hosted watch party", "Kosmi alternative", "stream my movie to my girlfriend with subtitles and sync".
Subject-aware reframing of horizontal video to vertical (9:16 / 4:5 / 1:1) using YOLOv8 person detection. Per-scene decision between TRACK (crop tightly on subject) and LETTERBOX (scale + black bars) so people stay centered through cuts and motion. Trigger when user says "reframe to vertical", "16:9 to 9:16", "convert landscape to portrait", "shorts crop", "smart crop for TikTok", "vertical YouTube short from horizontal", "auto-crop interview clip", "reframe podcast video", "make this video vertical", or any equivalent intent. Use as a STAGE inside viral-clipper / book-video / channel-breakdown pipelines whenever the source has more than one person on screen or the subject moves around the frame.
Receive and verify Clerk webhooks. Use when setting up Clerk webhook handlers, debugging signature verification, or handling user events like user.created, user.updated, session.created, or organization.created.
Automatically extract reusable patterns from Claude Code sessions and save them as learned skills for future use.
Strip AI voice from text — humanize while preserving meaning. Combines glebis's RU/EN/DE/ES/FR/PT/JP/IT diagnostic pipeline with the author's Humanizer Prompt + the Buddha-at-2-AM shipped-manuscript reverse-engineering + the (redacted) Russian-original voice analysis. Use for KDP books, the publication series, marketing copy, or any text that needs to read like a real person wrote it. Pairs with locked voice voice spec.
Invoke DeerFlow — ByteDance's multi-agent research harness running Claude Sonnet 4.6. Use for deep research tasks, multi-step web research, document analysis, and report generation. Spins up a local LangGraph agent that decomposes the task into sub-agents in parallel. Requires the backend to be running first.