Domain Utilities agent skills

Domain Utilities agent skills indexed by RunLocalModel. 480 indexed; SkillsMP reports 13,065 in this category. This is the stored sample from SkillsMP, not a complete directory.

Back to the Agent Skills browser

• abmahnung-vergleich-wipo by Klotzkette. Updated July 14, 2026. Wenn es um Abmahnung oder Vergleich bei Domainnamen-Streit und WIPO-Schiedsverfahren vorbereiten in Fachanwalt Gewerblicher Rechtsschutz geht: entwickelt Verhandlungsziel, Vergleichskorridor und Eskalationspfad; liefert eine Verhandlungs- oder Eskalationslinie mit Optionen.
• abp-ddd by abpframework. Updated March 22, 2026. ABP DDD patterns - Entities, Aggregate Roots, value objects, Repositories, Domain Services, Domain Events, Specifications. Use when designing domain layer, creating entities, repositories, or domain services in ABP projects.
• abp-pro-layered by WangJunZzz. Updated August 30, 2026. 本项目的分层 DDD 开发规则。新增或修改实体、领域服务、DTO、应用服务、控制器、权限或业务模块时使用。
• ac-4-15-detection-of-unsanctioned-information by CyberStrikeus. Updated August 28, 2026. When transferring information between different security domains, examine the information for the presence of [organization-defined] and prohibit the
• ac-4-26-audit-filtering-actions by CyberStrikeus. Updated August 24, 2026. When transferring information between different security domains, record and audit content filtering actions and results for the information being fil
• ac-4-31-failed-content-transfer-prevention by CyberStrikeus. Updated August 28, 2026. When transferring information between different security domains, prevent the transfer of failed content to the receiving domain.
• ac-6-4-separate-processing-domains by CyberStrikeus. Updated August 24, 2026. Provide separate processing domains to enable finer-grained allocation of user privileges.
• active-directory-attack by AIPentest. Updated July 29, 2026. 内网域攻击:BloodHound,Kerberoast,ADCS ESC1/ESC8,NTLM Relay,Coerce,DACL,DCSync,Zerologon/NoPac/PrintNightmare,mitm6,LLMNR,Linux内网。Use when attacking Active Directory, ADCS, NTLM relay, or internal domain.
• ad-domain by alexandremendoncaalvaro. Updated August 5, 2026. Lazily create or update `CONTEXT.md` (Layer 2 — ubiquitous language per Evans 2003) at the repo root, or `CONTEXT-MAP.md` plus per-context `CONTEXT.md` for multi-context repos. Captures canonical project-specific nouns, the aliases to avoid, the relationships between them, and resolved ambiguities. Triggers on "domain term", "ubiquitous language", "glossary", "what should we call", "naming drift", "canonical noun", "_Avoid_", "/ad-domain", or whenever a grilling/spec/architecture session resolves a vocabulary question. Lazy by design — file only exists when there is something to write.
• ad-domain-attack by wgpsec. Updated April 23, 2026. Active Directory 域环境攻击全链路。当目标主机在域环境中（systeminfo 显示 Domain 非 WORKGROUP）、发现 88/389/636 端口、或获取到域用户凭据时使用。覆盖域信息收集、用户枚举、Kerberoasting、AS-REP Roasting、委派攻击、ACL 滥用、DCSync、Golden/Silver Ticket
• add-cursor-ambassador by cursor. Updated May 19, 2026. Adds Cursor Directory ambassador badges by name or email via Supabase. Resolves the person and sets users.is_ambassador. Use when the user asks to add, grant, or promote an ambassador, ambassador badge, or Cursor Ambassador.
• add-custom-domain by gotempsh. Updated June 5, 2026. Add a custom domain to a Temps project and provision an automatic SSL/TLS certificate via Let's Encrypt, driven entirely from the `@temps-sdk/cli` CLI. Handles subdomains, apex domains, HTTP-01 and DNS-01 challenges, and wildcard domains. Use when the user wants to: (1) Add a custom domain to their Temps app, (2) Set up HTTPS/SSL for a deployment, (3) Point their own domain at a Temps project, (4) Add a wildcard domain, (5) Configure DNS for Temps. Triggers: "add custom domain", "point my domain at temps", "set up ssl", "https for my app", "wildcard domain", "add domain to project".
• add-domain by agenticnotetaking. Updated February 16, 2026. Add a new knowledge domain to your existing system. Derives domain-specific configuration through conversation, generates domain folders, templates, and vocabulary while preserving and connecting to your existing architecture.
• add-domain-field by openfootmanager. Updated August 28, 2026. Add a field to a domain type so it survives save/load. Covers serde(default) for backward compatibility, the five positional edit sites in the db repositories, the SQL migration and MIGRATION_COUNT bump, the round-trip test, and the frontend type plus translated label.
• add-entity by fullstackhero. Updated July 13, 2026. Add a domain entity/aggregate with EF configuration and a migration to an existing FSH module. Use when adding a new database-backed entity. Pairs with add-feature and create-migration.
• adinfo-enum by wgpsec. Updated April 7, 2026. 使用 Adinfo 进行 Active Directory 信息收集。当获得域用户凭据后需要快速收集域环境信息时使用。Adinfo 是一个快速 AD 信息收集工具，一条命令输出域控列表、域管用户、信任关系、GPO、SPN、委派配置等关键信息——比手动 LDAP 查询快得多。发现域环境后第一步信息收集使用此技能
• amazon-international-listings by nexscope-ai. Updated April 9, 2026. Multi-marketplace listing management — translation, pricing localization, BIL (Build International Listings)
• amazon-ses by aws. Updated September 7, 2026. Guides Amazon SES onboarding for domain-based email sending. Covers identity configuration, production access, an optional first test send, and troubleshooting setup, authentication, or sending failures. Use when setting up SES, resuming incomplete onboarding, or leaving the sandbox. Does not cover inbound email or Mail Manager, SMS/voice, WhatsApp, SNS, Pinpoint, or WorkMail.
• analyzing-typosquatting-domains-with-dnstwist by mukul975. Updated August 2, 2026. Generate domain permutations with dnstwist and check DNS resolution to detect typosquatting, homograph phishing, and brand impersonation domains registered against your organization. Use when asked to monitor for lookalike domains, investigate a phishing domain, or assess brand-impersonation risk.
• analyzing-typosquatting-domains-with-dnstwist by xalgorix. Updated August 19, 2026. Detect typosquatting, homograph phishing, and brand impersonation domains using dnstwist to generate domain permutations and identify registered lookalike domains targeting your organization.
• animal-pharmacy-search by NomaDamas. Updated September 15, 2026. 홍익메디케어 공개 MCP 서버로 지역별 동물약국 목록, 동물용의약품 검색, 최근 6개월 구매 이력 기반 취급 약국을 조회한다. 조회 전용.
• animegarden by yjl9903. Updated September 7, 2026. Anime Garden is an anime torrent resources aggregation platform for 動漫花園, 蜜柑计划, 萌番组, and ANi. Use when required task is searching anime resources.
• app-renderer-systems by compozy. Updated September 13, 2026. Create, extend, or debug frontend domain modules organized under systems/. Covers adapters, Query hooks, local state, and public exports; excludes generic components and backend implementation.
• asn-infrastructure-mapping by uphiago. Updated July 25, 2026. Map organization IP infrastructure via ASN, CIDR, TLD expansion, and reverse DNS.
• audit-legacy-controller by PrestaShop. Updated April 27, 2026. Read the legacy `Admin{Domain}sController.php` without modifying it. Extract every field rendered, every action method, and every `Hook::exec()` call.
• azure-dns by MicrosoftDocs. Updated September 22, 2026. Expert knowledge for Azure DNS development including troubleshooting, decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. Use when automating DNS zones/records, configuring Private DNS/resolvers, enabling DNSSEC, or migrating legacy zones, and other Azure DNS related development tasks. Not for Azure Traffic Manager (use azure-traffic-manager), Azure Front Door (use azure-front-door), Azure Virtual Network (use azure-virtual-network), Azure Application Gateway (use azure-application-gateway).
• azure-external-attack-surface-management by MicrosoftDocs. Updated August 31, 2026. Expert knowledge for Azure External Attack Surface Management development including configuration. Use when filtering EASM inventory by ASN, domains, hosts, IPs, pages, SSL certs, or exporting findings to analytics tools, and other Azure External Attack Surface Management related development tasks. Not for Azure Defender For Cloud (use azure-defender-for-cloud), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure Networking (use azure-networking).
• azure-internet-peering by MicrosoftDocs. Updated August 3, 2026. Expert knowledge for Azure Internet Peering development including troubleshooting. Use when validating Peering Service prefixes, checking prefix registration, verifying routing, or fixing reachability issues, and other Azure Internet Peering related development tasks. Not for Azure ExpressRoute (use azure-expressroute), Azure Virtual Network (use azure-virtual-network), Azure Virtual WAN (use azure-virtual-wan), Azure VPN Gateway (use azure-vpn-gateway).
• backlink-gap by indranilbanerjee. Updated August 12, 2026. Find referring domains that link to your competitors but not to you, ranked by an outreach-priority score (0.40 DR + 0.25 link-overlap + 0.20 traffic + 0.15 topical relevance) — outputs a four-gate quality scorecard, a 30-prospect outreach shortlist, broken-link candidates, and pre-filled outreach templates. Triggers on "/digital-marketing-pro:backlink-gap", "where are competitors getting links we aren't", "plan a link-building campaign", "quarterly backlink audit", "first 50 link targets for a new client". Consumes backlink CSV exports from the brand's connected backlink MCP, runs scripts/backlink_gap.py, reads the brand profile for DR thresholds and voice, and hands off to /digital-marketing-pro:digital-pr and /digital-marketing-pro:pr-pitch.
• blitz-list-builder by growthenginenowoslawski. Updated April 17, 2026. Use the Blitz API to find decision-makers at specific companies when you already have a list of company domains. Best for SMB owner-finding, domain-to-people lookup, or supplementing Prospeo results. Outputs a CSV you can feed to the email-waterfall or directly to /cold-email-starter-kit for Smartlead upload. Use when your targeting is company-first (not title-first).
• block-malicious-url-entry by zws-im. Updated August 29, 2026. Block a malicious zws short URL, destination URL, or hostname in production PostgreSQL and Redis.
• blocked-links by thedaviddias. Updated May 29, 2026. Use when reviewing HTML source and JavaScript for links or resource URLs pointing to domains listed in common adblocker filter lists.
• bmad-domain-research by Websoft9. Updated April 21, 2026. Conduct domain and industry research. Use when the user says wants to do domain research for a topic or industry
• brand-asset-management by a5c-ai. Updated June 1, 2026. Digital asset management and brand guideline enforcement tools
• brand-intel-branddev by gooseworks-ai. Updated June 17, 2026. Brand intelligence - logos, colors, fonts, styleguides, and company data from any domain
• building-adversary-infrastructure-tracking-system by mukul975. Updated August 2, 2026. Build an automated adversary infrastructure tracking system in Python (dnspython, python-whois, shodan, networkx) that pivots across passive DNS, certificate transparency logs, WHOIS records, and IP enrichment to map threat-actor C2 networks and flag newly registered domains matching known patterns. Use when pivoting from known indicators to discover related C2 infrastructure or maintaining a continuously updated map of a threat actor's network.
• building-register-search by NomaDamas. Updated September 15, 2026. Use when the user asks to look up a Korean building-register title record by address, PNU, legal-dong code, or parcel number.
• bunny by mrgoonie. Updated April 3, 2026. Integrate Bunny.net services (CDN, Storage, Stream, DNS, Edge Scripting, Shield, Magic Containers, Optimizer, Database). Use when building with Bunny.net APIs, deploying to Bunny CDN, uploading files to Edge Storage, managing video streaming, configuring DNS zones, writing edge scripts, setting up WAF/DDoS protection, deploying containers, or optimizing images. Triggers on "bunny", "bunnycdn", "b-cdn", "pull zone", "edge storage", "bunny stream".
• c2-alternative-channels by BitterSecurity. Updated June 29, 2026. Non-traditional C2 channels — Discord/Telegram bots, DNS-over-HTTPS, blockchain-based C2, email-based C2, and cloud function dead drops for covert command and control.
• c2-domain-fronting by BitterSecurity. Updated June 29, 2026. Domain fronting and CDN abuse for C2 concealment — CloudFront, Azure CDN, Fastly setup, TLS SNI vs Host header technique, CDN-based redirectors, and integration with Cobalt Strike and Sliver.
• cdn-setup by BagelHole. Updated March 24, 2026. Configure CDNs for content delivery. Set up CloudFront, Cloudflare, and Fastly. Use when optimizing global content delivery.
• censys by taracodlabs. Updated May 6, 2026. Censys lookups: hosts, certificates, services on the public internet
• censys by taracodlabs. Updated May 3, 2026. Search Censys for internet-exposed hosts, certificates, and services — host lookups, queries, and certificate analysis
• cf-proxy by davepoon. Updated June 14, 2026. Deploy a free VLESS proxy/VPN node on Cloudflare Pages using edgetunnel. Automates code download, UUID generation, Pages deployment, free domain registration (DNSExit), DNS configuration, custom domain binding, and client setup for Shadowrocket/v2rayN/Clash. Uses Cloudflare Pages (not Workers) because Pages supports CNAME-based custom domains from any DNS provider, avoiding the need to host DNS on Cloudflare.
• check-stablecoins by tradingstrategy-ai. Updated March 17, 2026. Check all stablecoin YAML files for Twitter activity and domain availability, adding a checks section to each file
• china-search by dongsheng123132. Updated March 12, 2026. 国内搜索引擎 - 百度、搜狗、Bing中国搜索，绕过GFW限制
• ci-triage by NewFuture. Updated August 21, 2026. Diagnose and fix required CI failures for the current DDNS branch without weakening tests, platform coverage, caches, or repository policy.
• cis-apache-4-4 by CyberStrikeus. Updated August 28, 2026. Ensure OverRide Is Disabled for All Directories
• cis-apache-5-3 by CyberStrikeus. Updated August 28, 2026. Ensure Options for Other Directories Are Minimized
• cis-apache24-4-4 by CyberStrikeus. Updated August 28, 2026. Ensure OverRide Is Disabled for All Directories
• cis-apache24-5-3 by CyberStrikeus. Updated August 28, 2026. Ensure Options for Other Directories Are Minimized
• cis-aws-euc-4-5 by CyberStrikeus. Updated August 28, 2026. Ensure new users can only be invited from allowed domains
• cis-aws-storage-1-3 by CyberStrikeus. Updated August 28, 2026. Ensure to create backup template and name
• cis-azure-compute-15-6 by CyberStrikeus. Updated August 28, 2026. Ensure private DNS zones for private endpoints that connect to Batch accounts are configured
• cis-azure-compute-2-1-17 by CyberStrikeus. Updated August 28, 2026. Ensure private endpoints used to access App Service apps use private DNS zones
• cis-azure-foundations-6-1-2-10 by CyberStrikeus. Updated August 28, 2026. Ensure Activity Log Alert exists for Delete Public IP Address rule
• cis-azure-foundations-6-1-2-9 by CyberStrikeus. Updated August 28, 2026. Ensure Activity Log Alert exists for Create or Update Public IP Address rule
• cis-azure-foundations-7-7 by CyberStrikeus. Updated August 28, 2026. Ensure Public IP addresses are Evaluated on a Periodic Basis
• cis-azure-foundations-8-1-9-1 by CyberStrikeus. Updated August 28, 2026. Ensure That Microsoft Defender for DNS Is Set To 'On'
• cis-bind-v100-1-4 by CyberStrikeus. Updated August 28, 2026. Use Secure Upstream Caching DNS Servers (Manual)
• cis-bind-v100-2-4 by CyberStrikeus. Updated August 28, 2026. Set root Ownership of BIND Directories (Automated)
• cis-bind-v100-7-4 by CyberStrikeus. Updated August 28, 2026. Ensure Either SPF or DKIM DNS Records are Configured (Automated)
• cis-bind9-v301-1-4 by CyberStrikeus. Updated August 28, 2026. Use Secure Upstream Caching DNS Servers (Manual)
• cis-bind9-v301-2-4 by CyberStrikeus. Updated August 28, 2026. Set root Ownership of BIND Directories (Automated)
• cis-bind9-v301-6-2 by CyberStrikeus. Updated August 28, 2026. Hide Nameserver ID (Scored)
• cis-bind9-v301-7-2 by CyberStrikeus. Updated August 28, 2026. Enable DNSSEC Validation (Scored)
• cis-gcp-cos-6-2-18 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate user names exist
• cis-gcp-cos-6-2-19 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate group names exist
• cis-gcp-cos-6-2-7 by CyberStrikeus. Updated August 28, 2026. Ensure all users' home directories exist
• cis-gcp-foundations-2-12 by CyberStrikeus. Updated August 28, 2026. Ensure That Cloud DNS Logging Is Enabled for All VPC Networks
• cis-gcp-foundations-3-3 by CyberStrikeus. Updated August 28, 2026. Ensure That DNSSEC Is Enabled for Cloud DNS
• cis-gworkspace-3-1-2-1-1-1 by CyberStrikeus. Updated August 28, 2026. Ensure users are warned when they share a file outside their domain
• cis-gworkspace-3-1-2-1-1-3 by CyberStrikeus. Updated August 28, 2026. Ensure document sharing is being controlled by domain with allowlists
• cis-gworkspace-3-1-2-1-1-4 by CyberStrikeus. Updated August 28, 2026. Ensure users are warned when they share a file with users in an allowlisted domain
• cis-gworkspace-3-1-3-2-1 by CyberStrikeus. Updated August 28, 2026. Ensure that DKIM is enabled for all mail enabled domains
• cis-gworkspace-3-1-3-2-2 by CyberStrikeus. Updated August 28, 2026. Ensure the SPF record is configured for all mail enabled domains
• cis-gworkspace-3-1-3-2-3 by CyberStrikeus. Updated August 28, 2026. Ensure the DMARC record is configured for all mail enabled domains
• cis-gworkspace-3-1-3-4-2-3 by CyberStrikeus. Updated August 28, 2026. Ensure warning prompt is shown for any click on links to untrusted domains
• cis-gworkspace-3-1-3-4-3-1 by CyberStrikeus. Updated August 28, 2026. Ensure protection against domain spoofing based on similar domain names is enabled
• cis-gworkspace-3-1-3-4-3-3 by CyberStrikeus. Updated August 28, 2026. Ensure protection against inbound emails spoofing your domain is enabled
• cis-gworkspace-3-1-3-4-3-5 by CyberStrikeus. Updated August 28, 2026. Ensure groups are protected from inbound emails spoofing your domain
• cis-gworkspace-3-1-4-2-1 by CyberStrikeus. Updated August 28, 2026. Ensure Google Chat externally is restricted to allowed domains
• cis-gworkspace-4-2-1-4 by CyberStrikeus. Updated August 28, 2026. Review domain-wide delegation for applications periodically
• cis-k8s-v1110-4-2-7 by CyberStrikeus. Updated April 22, 2026. Ensure that the --hostname-override argument is not set (Manual)
• cis-k8s-v1111-4-2-7 by CyberStrikeus. Updated April 22, 2026. Ensure that the --hostname-override argument is not set (Manual)
• cis-k8s-v1120-4-2-7 by CyberStrikeus. Updated April 22, 2026. Ensure that the --hostname-override argument is not set (Manual)
• cis-k8s-v200-4-2-7 by CyberStrikeus. Updated April 22, 2026. Ensure that the --hostname-override argument is not set (Manual)
• cis-nginx-v300-2-4-2 by CyberStrikeus. Updated April 22, 2026. Ensure requests for unknown host names are rejected (Manual)
• cis-tomcat10-v110-7-6 by CyberStrikeus. Updated April 22, 2026. Ensure directory in logging.properties is a secure location (Automated)
• cis-tomcat101-7-6 by CyberStrikeus. Updated April 22, 2026. Ensure directory in logging.properties is a secure location (Automated)
• cis-tomcat7-v100-2-1 by CyberStrikeus. Updated April 22, 2026. Alter the Advertised server.info String
• cis-tomcat7-v100-7-6 by CyberStrikeus. Updated April 22, 2026. Ensure directory in logging.properties is a secure location
• cis-tomcat7-v110-2-1 by CyberStrikeus. Updated April 22, 2026. Alter the Advertised server.info String
• cis-tomcat7-v110-7-6 by CyberStrikeus. Updated April 22, 2026. Ensure directory in logging.properties is a secure location
• cis-tomcat8-v100-2-1 by CyberStrikeus. Updated April 22, 2026. Alter the Advertised server.info String
• cis-tomcat8-v100-7-6 by CyberStrikeus. Updated April 22, 2026. Ensure directory in logging.properties is a secure location (Automated)
• cis-tomcat8-v110-7-6 by CyberStrikeus. Updated April 22, 2026. Ensure directory in logging.properties is a secure location (Automated)
• cis-tomcat9-v120-7-6 by CyberStrikeus. Updated April 22, 2026. Ensure directory in logging.properties is a secure location (Automated)
• cis-ubuntu-14-04-lts-2-2-8-ensure-dns-server-is-not-enabled by CyberStrikeus. Updated August 28, 2026. Verify that BIND DNS server is disabled when not required
• cis-ubuntu-14-04-lts-6-2-11-ensure-no-users-have-forward-files by CyberStrikeus. Updated August 28, 2026. Verify no users have .forward files in their home directories
• cis-ubuntu-14-04-lts-6-2-12-ensure-no-users-have-netrc-files by CyberStrikeus. Updated August 28, 2026. Verify no users have .netrc files in their home directories
• cis-ubuntu-14-04-lts-6-2-14-ensure-no-users-have-rhosts-files by CyberStrikeus. Updated August 28, 2026. Verify no users have .rhosts files in their home directories
• cis-ubuntu-14-04-lts-6-2-6-ensure-root-path-integrity by CyberStrikeus. Updated August 28, 2026. Verify root PATH does not contain writable or non-root-owned directories
• cis-ubuntu1204-v110-12-8 by CyberStrikeus. Updated August 28, 2026. Find Un-owned Files and Directories
• cis-ubuntu1204-v110-13-12 by CyberStrikeus. Updated August 28, 2026. Check That Users Are Assigned Valid Home Directories
• cis-ubuntu1204-v110-13-13 by CyberStrikeus. Updated August 28, 2026. Check User Home Directory Ownership
• cis-ubuntu1204-v110-13-14 by CyberStrikeus. Updated August 28, 2026. Check for Duplicate UIDs
• cis-ubuntu1204-v110-13-15 by CyberStrikeus. Updated August 28, 2026. Check for Duplicate GIDs
• cis-ubuntu1204-v110-13-17 by CyberStrikeus. Updated August 28, 2026. Check for Duplicate User Names
• cis-ubuntu1204-v110-13-18 by CyberStrikeus. Updated August 28, 2026. Check for Duplicate Group Names
• cis-ubuntu1204-v110-2-10 by CyberStrikeus. Updated August 28, 2026. Add nodev Option to /home
• cis-ubuntu1204-v110-2-17 by CyberStrikeus. Updated August 28, 2026. Set Sticky Bit on All World-Writable Directories
• cis-ubuntu1204-v110-6-8 by CyberStrikeus. Updated August 28, 2026. Ensure DNS Server is not enabled
• cis-ubuntu1204-v110-7-4-4 by CyberStrikeus. Updated August 28, 2026. Create /etc/hosts.deny
• cis-ubuntu1604-v200-2-1-8 by CyberStrikeus. Updated August 28, 2026. Ensure DNS Server is not installed
• cis-ubuntu1604-v200-6-2-15 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate user names exist
• cis-ubuntu1604-v200-6-2-16 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate group names exist
• cis-ubuntu1604-v200-6-2-4 by CyberStrikeus. Updated August 28, 2026. Ensure all users' home directories exist
• cis-ubuntu1804-v220-2-2-7 by CyberStrikeus. Updated August 28, 2026. Ensure DNS Server is not installed
• cis-ubuntu1804-v220-6-2-7 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate user names exist
• cis-ubuntu1804-v220-6-2-8 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate group names exist
• cis-ubuntu2004-v300-7-2-7 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate user names exist
• cis-ubuntu2004-v300-7-2-8 by CyberStrikeus. Updated August 28, 2026. Ensure no duplicate group names exist
• cloud-attack-surface-discovery by xalgorix. Updated September 28, 2026. Black-box discovery of a target's cloud footprint from an ordinary internet-facing domain — DNS, CNAME, headers, TLS, JavaScript, CSP, and error evidence fingerprinted to AWS, Azure, and GCP services, resources, accounts/tenants/projects, and applicable attack methodology
• cloud-storage by TencentCloudBase. Updated August 26, 2026. Use when listing, uploading, or generating temporary URLs for CloudBase cloud storage from DeepSeek Harness.
• cloudflare by Anil-matcha. Updated September 24, 2026. Read Cloudflare zones and DNS records: list zones, list DNS records for a zone. Trigger phrases: cloudflare, dns records, cloudflare zone.
• cloudflare-registrar by steipete. Updated May 23, 2026. Cloudflare Registrar: domain availability, prices, registration via mcporter.
• company-domain-lookup-logodev by gooseworks-ai. Updated June 17, 2026. Logo.dev - search for company domains by brand name
• comprehensive-enrichment by gooseworks-ai. Updated June 17, 2026. Enrich any person or company from any identifier — email, name, LinkedIn URL, domain, company name, Twitter/X handle. Use when asked to enrich, look up, or research a lead, contact, person, or company.
• conducting-domain-persistence-with-dcsync by mukul975. Updated August 2, 2026. Perform DCSync attacks by abusing MS-DRSR replication rights (DS-Replication-Get-Changes/-All) to impersonate a Domain Controller and extract KRBTGT, Domain Admin, and service account hashes for Golden Ticket forging, typically with Mimikatz. Use in authorized engagements after finding principals with replication rights, to establish long-term domain persistence, or to validate detections for replication abuse.
• conducting-domain-persistence-with-dcsync by xalgorix. Updated August 19, 2026. Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT, Domain Admin, and service account hashes for Golden Ticket creation.
• conducting-internal-reconnaissance-with-bloodhound-ce by mukul975. Updated August 2, 2026. Conduct internal Active Directory reconnaissance using BloodHound Community Edition's graph database with the SharpHound (AD) and AzureHound (Entra ID) collectors, mapping ACLs, sessions, and group memberships into attack paths from a low-privileged foothold to Domain Admin. Use after an initial AD foothold to identify privilege escalation chains, or to validate that AD hardening closed known attack paths.
• conducting-internal-reconnaissance-with-bloodhound-ce by xalgorix. Updated August 19, 2026. Conduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identify privilege escalation chains, and discover misconfigurations in domain environments.
• configuration-authentication-cookies by greenpau. Updated September 27, 2026. Configure portal cookie names, prefixes, domains, paths, attributes, and refresh overrides. Use for cookie precedence and coordination with authorization token discovery.
• configuration-credentials by greenpau. Updated September 27, 2026. Configure reusable named username/password credentials for messaging consumers, including optional domains and runtime values. LDAP bind credentials belong to identity stores.
• configuration-identity-stores by greenpau. Updated September 27, 2026. Configure local or LDAP identity stores, realms, databases, binds, TLS trust, searches, and group mappings. Delegates static account entries to configuration-users.
• convex-acquire-domain by openclaw. Updated August 5, 2026. Find and buy a domain for the current Convex app through Convex, then bind it (labs; spend action).
• convex-domains by openclaw. Updated August 18, 2026. Point a domain you already own at your Convex app (DNS records, custom-domain attach, auth-origin rebind).
• create-behat-context by PrestaShop. Updated April 27, 2026. Create the PHP feature context class that implements step definitions for a domain, and register it in behat.yml. Covers the PHP implementation side of Behat tests. Trigger: "create behat context for {Domain}".
• create-cqrs-commands by PrestaShop. Updated April 27, 2026. Set up the full domain layer for a CQRS entity: identity value object, additional value objects, exception hierarchy, commands (Add, Edit, Delete, Toggle, sub-resource, or any custom domain action), and handler interfaces. Covers everything in src/Core/Domain/{Domain}/. Trigger: "create CQRS commands for {Domain}", "set up domain layer for {Domain}".
• create-grid-query-builder by PrestaShop. Updated April 27, 2026. Create the Doctrine DBAL QueryBuilder that fetches grid rows, and optionally a GridDataFactory decorator for post-processing. The column aliases must exactly match the column IDs in the Grid Definition. Trigger: "create grid query builder for {Domain}".
• creator-buddy by SpaceZephyr. Updated August 26, 2026. 创作者全域内容搜索总控 Skill。用户发送平台名+关键词、平台链接，或要求分析博主、文章风格、热度、点赞、收藏、评论、爆款原因、选题方向时触发；根据平台和任务自动路由到小红书热门笔记、全域内容搜索、公众号爆款搜索、公众号赛道分析等分支 Skill。
• crt-sh by taracodlabs. Updated May 6, 2026. Enumerate subdomains and TLS certs via CT logs (no API key needed)
• crt-sh by taracodlabs. Updated May 3, 2026. Search certificate transparency logs to enumerate subdomains and TLS certificates for any domain — no API key required
• cu-sdk-common-knowledge by Azure. Updated June 11, 2026. Domain knowledge for Azure AI Content Understanding. Use this skill to answer questions about Content Understanding concepts, analyzers, field schemas, API operations, and JavaScript SDK usage. Always consult official documentation before answering.
• datenschutz-kameras-digitaler-zwilling-dronen by Klotzkette. Updated July 1, 2026. Wenn es um Datenschutz Sensorik in robotik-recht geht: prüft Frist, Form, Zuständigkeit, Rechtsweg und Sofortmaßnahmen; liefert eine Fristen- und Risikoampel mit Sofortschritten. Auswahlstichwort: Datenschutz Kameras Digitaler Zwilling Dronen; Arbeitsfeld: robotik-recht.
• ddd-context-mapping by revfactory. Updated March 22, 2026. DDD(Domain-Driven Design)의 바운디드 컨텍스트 식별, 컨텍스트 맵 작성, 이벤트 스토밍 수행을 위한 상세 방법론. '바운디드 컨텍스트', 'DDD', '도메인 모델링', '이벤트 스토밍', '컨텍스트 맵', '애그리거트 설계', '유비쿼터스 언어' 등 도메인 분석 시 이 스킬을 사용한다. domain-analyst와 service-architect의 도메인 분석 역량을 강화한다. 단, 인프라 배포나 코드 구현은 이 스킬의 범위가 아니다.
• deepseek-harness by Devin-AXIS. Updated August 19, 2026. Let the OpenCode host delegate code review, development, and research tasks to DeepSeek Harness.
• define-domains by PINA-org. Updated July 17, 2026. Create and manipulate domains for PINA physics-driven problems. Covers domain types (Cartesian, Ellipsoid, Simplex), set operations, partial/update methods, and domain discretisation.
• deploying-custom-domain-rest-api by aws. Updated June 18, 2026. Deploys a Regional REST API with a custom domain name, a Lambda backend function, and a request-based Lambda authorizer using AWS CLI. Covers ACM certificate provisioning, API Gateway REST API creation, Lambda function deployment, request authorizer setup, custom domain configuration, base path mapping, and Route 53 DNS record creation. Trigger keywords: custom domain, REST API, Lambda, Route 53, API Gateway, regional endpoint, request authorizer, base path mapping.
• deploying-honeytokens-and-canarytokens by mukul975. Updated August 2, 2026. Plants Canarytokens-based decoy artifacts (honey credentials, DNS tokens, web-bug URLs, AWS keys, documents, kubeconfigs) using Thinkst's open-source Canarytokens project and alerts via email or webhook when a token is touched. Use for high-fidelity intrusion detection in low-telemetry areas like file shares or credential stores, or to catch credential dumping and data-theft staging.
• design by Yeachan-Heo. Updated June 26, 2026. Adds domain design guidance for ralplan planner phase.
• design by Yeachan-Heo. Updated June 5, 2026. Adds domain design guidance for ralplan planner phase.
• detecting-golden-ticket-attacks-in-kerberos-logs by xalgorix. Updated August 19, 2026. Detect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures in domain controller event logs.
• different-name by earendil-works. Updated December 18, 2025. A skill with a name that doesn't match the directory.
• digitalocean by Anil-matcha. Updated September 24, 2026. Inspect DigitalOcean: list droplets and domains. Trigger phrases: digitalocean, droplet, digitalocean domains.
• disco-like by growthenginenowoslawski. Updated April 17, 2026. Find lookalike companies via DiscoLike's 65M+ business domain database. Search by seed domains ("find companies like clay.com and apollo.io") or natural-language ICP text ("B2B cold email outreach"). Supports negation domains (exclude competitors/existing customers) and country filtering. Use when you already know 3-10 reference companies and want hundreds more that look like them. Outputs CSV ready for /blitz-list-builder or the email waterfall.
• dns-command-and-control-investigation by Sec-Link. Updated September 1, 2026. Analyze suspicious DNS behavior such as high entropy, beaconing, rare domains, unusual record types, and query volume. Distinguish indicators from confirmed C2 and recommend safe validation.
• dns-lookup by mohitagw15856. Updated July 18, 2026. Query DNS records and domain registration data with zero API keys — DNS-over-HTTPS via dns.google and domain registration via RDAP, through plain curl. Use when asked what does this domain resolve to, check the MX or TXT records, who registered this domain, when does it expire, or has DNS propagated. Produces the records decoded (SPF/DKIM/DMARC read, not just dumped), the registration facts from RDAP, and the rerunnable commands.
• dns-lookup by mohitagw15856. Updated July 18, 2026. Query DNS records and domain registration data with zero API keys — DNS-over-HTTPS via dns.google and domain registration via RDAP, through plain curl. Use when asked what does this domain resolve to, check the MX or TXT records, who registered this domain, when does it expire, or has DNS propagated. Produces the records decoded (SPF/DKIM/DMARC read, not just dumped), the registration facts from RDAP, and the rerunnable commands.
• dns-management by BagelHole. Updated March 24, 2026. Configure DNS zones and records. Manage Route53, Cloud DNS, and self-hosted DNS. Use when setting up DNS infrastructure.
• dns-pentesting by wgpsec. Updated April 23, 2026. DNS 服务（53 端口）渗透测试方法论。涵盖 DNS 服务发现与版本识别、区域传送测试（AXFR）、子域名枚举、DNS 缓存侦察、反向查询、DNS 隧道检测、已知漏洞利用。 当 Agent 扫描发现 53 端口开放、需要枚举 DNS 记录与子域名、测试区域传送、或通过 DNS 进行数据传输时，触发此 Skill。
• dns-protocol by a5c-ai. Updated May 7, 2026. Expert skill for DNS protocol implementation, configuration, and service discovery
• dns-provider-dev by certd. Updated July 8, 2026. 用于开发 Certd 系统中的 DNS Provider 插件，在 ACME 申请证书时给域名添加 TXT 解析记录以验证域名所有权。当用户需要创建DNS提供商插件、实现DNS解析、ACME证书验证或修改现有 DNS Provider 插件时触发。
• dns-rebinding-attacks by yaklang. Updated April 9, 2026. DNS rebinding attack playbook. Use when testing applications that trust DNS resolution for origin checks, interact with internal services from browser context, or when SSRF is not possible server-side but the target has client-side fetch/XHR to attacker-controlled domains.
• dns-whois by Aethena-Lab. Updated September 3, 2026. Use dig, nslookup, whois, and related local CLIs for authorized DNS, WHOIS, ASN, mail, nameserver, and ownership triage.
• dnsrobot by LeoYeAI. Updated May 11, 2026. Run DNS, email security, SSL, WHOIS, and network tools via dnsrobot.net API — no API key required
• dnsx by Aethena-Lab. Updated September 3, 2026. Use ProjectDiscovery dnsx for authorized, small-batch DNS resolution, record lookup, and hostname validation at conservative rates.
• dnsx-resolve by wgpsec. Updated April 24, 2026. 使用 dnsx 进行批量 DNS 记录查询和解析。当需要批量 DNS 解析、验证子域名存活、查询 A/AAAA/CNAME/NS/MX/TXT 记录、通配符过滤时使用。dnsx 是 ProjectDiscovery 出品的高速 DNS 工具包，支持多记录类型查询和通配符自动过滤。任何涉及 DNS 解析、子域名验证、DNS 记录收集的场景都应使用此技能
• domain by coreyhaines31. Updated August 12, 2026. When you want to brainstorm and check available .com domains for a new project — brand naming, aftermarket pricing (HugeDomains / Afternic / Sedo / Dan), USPTO trademark screening, and social handle availability. Built on Laura Roeder's "work backwards from availability, not from a name you fell in love with" methodology. Uses Vercel CLI + whois + Domainr API + Namecheap API + agent-browser for the pieces each tool actually reliably supports (multi-tool ensemble because no single tool covers everything cleanly). 11-step workflow: budget → brainstorm → primary availability check → whois cross-check → Domainr aggregation → Namecheap price → aftermarket sweep (+ liveness probe for parked/dead domains, drop-watch for expiring ones) → bucket → negotiate → NAME research (trademark + socials) → buy. Triggers on "/domain," "find a domain," "check domain availability," "brainstorm a domain," "what .com is available for X," "domain hunt," "name my project," "is X.com available," "aftermarket price on X.com," "trademark
• domain by Yeachan-Heo. Updated June 5, 2026. Adds domain execution guidance for executor.
• domain-adaptation-papers-guide by brycewang-stanford. Updated April 3, 2026. Comprehensive collection of domain adaptation research papers
• domain-analysis by tech-leads-club. Updated February 26, 2026. Maps business domains and suggests service boundaries in any codebase using DDD Strategic Design. Use when asking "what are the domains in this codebase?", "where should I draw service boundaries?", "identify bounded contexts", "classify subdomains", "DDD analysis", or analyzing domain cohesion. Do NOT use for grouping existing components into domains (use domain-identification-grouping) or dependency analysis (use coupling-analysis).
• domain-architecture by kostja94. Updated September 25, 2026. When the user wants to decide domain structure for multiple products or brands—subfolder vs subdomain vs independent domain. Also use when the user mentions "subfolder vs subdomain," "subdirectory vs subdomain," "multiple products domain," "multiple websites," "brand architecture," "branded house," "house of brands," "where to host product," "domain structure," or "hub-spoke domain." For brand SERP, use multi-domain-brand-seo.
• domain-attachment by nixopus. Updated May 7, 2026. Domain setup for applications. Preferred path is passing domains at creation time via createProject. Falls back to add_application_domain for post-creation attachment or custom domains.
• domain-checker by davidondrej. Updated September 8, 2026. Check domain registration in batches through public registry RDAP APIs, without API keys or login. Use for domain availability checks, checking candidate domains, or keyless domain lookup from a CLI. Screens registration status, not brand conflicts, trademark clearance, or guaranteed purchase availability.
• domain-creation by hashgraph-online. Updated May 4, 2026. Guides you through creating a Honeydew domain — a governance object that scopes entity/field visibility and applies mandatory filters — ideal for setting up contexts for deep analysis.
• domain-dns-ops by steipete. Updated May 23, 2026. DNS/domain ops: registrars, zones, redirects, DNS/HTTP verify, manager truth.
• domain-docs by openmeterio. Updated July 30, 2026. Locate and maintain OpenMeter's package-level domain documentation. Use for code reviews, planning, implementation, debugging, or explanations that depend on product behavior, domain ownership, or cross-domain contracts, and when creating or editing domain READMEs. Do not use for mechanical changes with no domain behavior.
• domain-hunter by ReScienceLab. Updated February 15, 2026. Search domains, compare prices, find promo codes, get purchase recommendations. Use when user wants to buy a domain, check domain prices, find domain deals, compare registrars, or search for .ai/.com domains.
• domain-intel by math-inc. Updated March 19, 2026. Passive domain reconnaissance using Python stdlib. Subdomain discovery, SSL certificate inspection, WHOIS lookups, DNS records, domain availability checks, and bulk multi-domain analysis. No API keys required.
• domain-intel by NousResearch. Updated August 12, 2026. Passive recon of subdomains, SSL certs, WHOIS, and DNS.
• domain-model-extractor by a5c-ai. Updated June 1, 2026. Extract domain models from monolithic codebases using DDD principles for microservices decomposition
• domain-modeling by mattpocock. Updated August 19, 2026. Build and sharpen a project's domain model. Use when discussing codebase terminology, writing or editing a CONTEXT.md, or recording or editing an ADR.
• domain-name-brainstormer by borghei. Updated June 22, 2026. Generate and score candidate brand, product, and domain names for memorability and pronounceability. Use when naming a new product, company, or feature, brainstorming brand names, or finding an available .com.
• domain-name-brainstormer by davepoon. Updated January 4, 2026. Generates creative domain name ideas for your project and checks availability across multiple TLDs (.com, .io, .dev, .ai, etc.). Saves hours of brainstorming and manual checking.
• domain-name-brainstormer by davila7. Updated January 25, 2026. Generates creative domain name ideas for your project and checks availability across multiple TLDs (.com, .io, .dev, .ai, etc.). Saves hours of brainstorming and manual checking.
• domain-name-brainstormer by nexu-io. Updated August 18, 2026. Generate creative domain name ideas and check availability across multiple TLDs including .com, .io, .dev, and .ai.
• domain-research by kortix-ai. Updated August 3, 2026. Free domain research and availability checking. No API keys or credentials required. Uses RDAP (1195+ TLDs) with whois CLI fallback for universal coverage. Checks if domains are available, searches keywords across TLDs, performs WHOIS/RDAP lookups, checks expiry dates, and finds nameservers. Use when the agent needs to: check if a domain is available, search for domains, find who owns a domain, check domain expiration, get nameservers, bulk check domains, or do any domain research. Triggers on: 'check domain', 'is domain available', 'search domains', 'domain availability', 'who owns this domain', 'whois', 'domain expiry', 'when does domain expire', 'nameservers for', 'domain research', 'find domains for', 'domain ideas', 'bulk domain check'.
• domain-selection by kostja94. Updated September 25, 2026. When the user wants to choose an SEO-friendly domain for a new site—brand vs keyword domain, TLD selection, or domain best practices. Also use when the user mentions "domain choice," "pick domain," "SEO-friendly domain," "brand domain," "EMD," "PMD," "exact match domain," "partial match domain," "TLD," ".ai domain," ".com vs .io," "domain length," "domain history," or "defensive domain registration." For migration, use rebranding-strategy.
• domain-strategy by rampstackco. Updated September 15, 2026. Plan, manage, and optimize a domain portfolio. Use this skill for DNS architecture decisions, redirect strategies, registrar choice, parking unused domains, multi-site setups, and domain consolidation or split planning. Triggers on DNS, domain, registrar, redirect, parking, subdomain, apex, www vs non-www, multi-site, portfolio, hreflang setup, domain migration. Also triggers when planning a new site that needs domain decisions made before launch.
• domain-strategy by rampstackco. Updated June 1, 2026. Plan, manage, and optimize a domain portfolio. Use this skill for DNS architecture decisions, redirect strategies, registrar choice, parking unused domains, multi-site setups, and domain consolidation or split planning. Triggers on DNS, domain, registrar, redirect, parking, subdomain, apex, www vs non-www, multi-site, portfolio, hreflang setup, domain migration. Also triggers when planning a new site that needs domain decisions made before launch.
• domain-tls-routing by nixopus. Updated May 7, 2026. Diagnose domain resolution, TLS certificate provisioning, and reverse proxy routing issues. Use when a domain is not resolving, TLS certificates fail, proxy returns 502/503/504, or custom domains are stuck in pending status.
• domainrecht-loeschung-bgh-i-zr-138-19 by Klotzkette. Updated July 1, 2026. Wenn es um Domainrecht Loeschung BGH I Zr 138 19 in Fachanwalt Gewerblicher Rechtsschutz geht: prüft Frist, Form, Zuständigkeit, Rechtsweg und Sofortmaßnahmen; liefert eine Fristen- und Risikoampel mit Sofortschritten.
• dough-maintain-findings by terryyin. Updated September 16, 2026. Adopts supplied, approved DD-NNN to ODF-NNN finding-name mappings in this project's DearDough.md while preserving evidence and former-code traceability. Use only on explicit skill invocation or an explicit request to adopt or rename finding codes; encountering findings or mapping recommendations does not authorize maintenance. Other finding cleanup and status changes are out of scope.
• drpy-source-creator by LeoYeAI. Updated July 6, 2026. drpy视频源创建与调试技能。当用户需要创建、修改、调试drpy视频源（用于TVBox、海阔视界、ZYPlayer等播放器）时使用此技能。包括drpy源属性配置、模板继承、正则表达式编写、本地代理设置、不同类型源（影视/听书/漫画/小说）支持。
• dsfa-bfdi-und-laender-blacklist by Klotzkette. Updated July 14, 2026. Wenn es um BfDI- und Länder-Blacklist Abgleich in Datenschutzrecht geht: prüft Frist, Form, Zuständigkeit, Rechtsweg und Sofortmaßnahmen; liefert eine Fristen- und Risikoampel mit Sofortschritten.
• duckduckgo-search by NousResearch. Updated September 11, 2026. Free keyless web, news, and image search via ddgs.
• effect-and-errors by latitude-dev. Updated April 27, 2026. Composing Effect programs, domain errors, HttpError, repository error types, or error propagation at HTTP boundaries.
• electron-protocol-handler-setup by a5c-ai. Updated May 7, 2026. Register and handle custom URL protocols (deep linking) across platforms for Electron applications
• eliza-cloud-buy-domain by elizaOS. Updated August 13, 2026. Use whenever a user wants to register or buy a custom domain for an Eliza Cloud app — including in the same request as building the app ("build me X and put it on Y.com"). Uses Cloudflare as registrar after explicit user confirmation, paid from the user's existing cloud credit balance. Pairs with `build-monetized-app` (build first, then buy domain) and `eliza-cloud-manage-domain` (post-purchase: list, edit dns records, detach). Skip when the user is fine with the auto-assigned `*.apps.eliza.app` subdomain.
• eliza-cloud-manage-domain by elizaOS. Updated July 1, 2026. Use after a domain has been purchased through Eliza Cloud (via the `eliza-cloud-buy-domain` skill) when the user wants to look at, edit, or remove a domain or its DNS records. Covers org-wide domain listing, per-app DNS record CRUD on cloudflare-managed zones, status re-sync, external-attachment verification, and detaching a domain from an app. Use this skill any time the user references domains they already own (`my domains`, `edit dns for myapp.com`, `delete that A record`, `is myapp.com still pointing at my app`).
• email-deliverability-audit by growthenginenowoslawski. Updated September 29, 2026. Diagnostic audit for a running cold email program. Checks domain authentication (SPF/DKIM/DMARC), inbox health/reputation from Smartlead, bounce rate by inbox type, and optionally runs a spam placement test via Smartlead's Smart Delivery API. Outputs markdown report + CSV with per-domain/per-inbox scores and concrete action items. Use when reply rates drop, when bounces spike, when onboarding someone else's account, or as a weekly/monthly health check.
• email-domain-security by elementalsouls. Updated August 24, 2026. Rigorous, defensible email-spoofability verdict and SPF supply-chain risk analysis computed from published DNS alone. Deepens the record-level SPF/DMARC/DKIM/BIMI/MTA-STS/DNSSEC fetch recipes in the offensive-osint arsenal (§16.14) with the reasoning that section doesn't do: a priority-ordered composite verdict for whether an attacker can actually land header-From-spoofed mail in an inbox, and by which vector (exact-domain vs subdomain) — grounded in the single most-misunderstood distinction in email security: the envelope MAIL FROM that SPF authenticates vs the visible header From: that only DMARC governs. Explains precisely why SPF -all/~all alone is NOT spoof-proof without DMARC enforcement, and why SPF +all bypasses DMARC even under p=reject pct=100. Covers RFC 7208 §4.6.4's 10-DNS-lookup / 2-void-lookup PermError fail-open condition with a runnable stdlib-only lookup-counter script, plus the SPF-include-takeover supply-chain vector (an attacker re-registering a dead include inherits SPF-pass authority ov
• email-finder-hunter by gooseworks-ai. Updated June 17, 2026. Email finder and verifier - find emails, verify deliverability, discover companies
• email-finder-tomba by gooseworks-ai. Updated June 17, 2026. Email finder and verifier - find emails from domains, LinkedIn, or company search
• email-setup by vellum-ai. Updated June 3, 2026. Set up this assistant's own `[name].vellum.me` domain and email address (one-time setup)
• emergency-room-beds by NomaDamas. Updated September 15, 2026. Use when the user asks for nearby Korean emergency rooms, 응급실, ER, or emergency bed/병상 status near a location. Ask for the user's current location first unless a location was already provided.
• eni-redteam-ad-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized Active Directory red-team security testing, including Kerberos attacks, domain privilege escalation, lateral movement, and GPO abuse. Use when a task belongs to the AD testing domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-cache-poison-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized web cache poisoning testing, including unkeyed headers, unkeyed parameters, cache deception, and CDN-specific behavior. Use when a task belongs to the cache poisoning domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-injection-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized general injection testing outside SQL injection, including NoSQL, LDAP, XPath, and expression language injection. Use when a task belongs to the general injection domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-network-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized network-layer security testing, including exposed services, protocol downgrade, man-in-the-middle risks, and segmentation bypasses. Use when a task belongs to the network testing domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-open-redirect-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized open redirect testing, including parameter redirects, meta or JavaScript redirects, and OAuth redirect_uri abuse. Use when a task belongs to the open redirect domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-recon-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized reconnaissance and information gathering, including subdomain enumeration, port scanning, directory discovery, fingerprinting, and OSINT. Use when a task belongs to the recon domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-ssrf-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized SSRF testing, including basic SSRF, blind SSRF, protocol smuggling, and cloud metadata access paths. Use when a task belongs to the SSRF domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-subdomain-takeover-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized subdomain takeover testing, including dangling CNAME records, NS takeover, and cloud service takeover paths such as S3, Azure, and Heroku. Use when a task belongs to the subdomain takeover domain and needs scope, evidence, pivot, or exit criteria.
• eni-redteam-xss-detail-pack by aimeoa. Updated September 21, 2026. [DOCUMENTATION ONLY] [仅文档] Domain routing and boundary guidance for authorized cross-site scripting testing, including reflected, stored, DOM-based, mXSS, and CSP bypass variants. Use when a task belongs to the XSS domain and needs scope, evidence, pivot, or exit criteria.
• enrich-lead by anthropics. Updated February 24, 2026. Instant lead enrichment. Drop a name, company, LinkedIn URL, or email and get the full contact card with email, phone, title, company intel, and next actions.
• ens-primary-name by BankrBot. Updated June 17, 2026. Set your primary ENS name on Base and other L2s. Use when user wants to set their ENS name, configure reverse resolution, set primary name, or make their address resolve to an ENS name. Supports Base, Arbitrum, Optimism, and Ethereum mainnet.
• exa-policy-guardrails by jeremylongshore. Updated July 17, 2026. Implement content policy enforcement, domain filtering, and usage guardrails for Exa. Use when setting up content safety rules, restricting search domains, or enforcing query and budget policies for Exa integrations. Trigger with phrases like "exa policy", "exa content filter", "exa guardrails", "exa domain allowlist", "exa content moderation".
• exa-policy-guardrails by jeremylongshore. Updated August 19, 2026. Implement content policy enforcement, domain filtering, and usage guardrails for Exa. Use when setting up content safety rules, restricting search domains, or enforcing query and budget policies for Exa integrations. Trigger with phrases like "exa policy", "exa content filter", "exa guardrails", "exa domain allowlist", "exa content moderation".
• exchange-owa-attack by uphiago. Updated July 30, 2026. Exchange/OWA NTLM AD leak, spray attack when mail subdomain.
• exploiting-subdomain-takeover-vulnerabilities by xalgorix. Updated August 19, 2026. Identifying and exploiting dangling DNS records pointing to unclaimed cloud services, enabling subdomain takeover for phishing, cookie stealing, and authentication bypass during authorized penetration tests.
• extradition-case-law-search-matei-clej by lawve-ai. Updated September 4, 2026. Searches the domestic courts of 122 jurisdictions — 153 databases, 49 automated — for extradition and arrest-warrant surrender decisions, each in its own language and vocabulary. Answers the question no commercial database does: how are OTHER executing states treating this requesting state, or this ground? Searching by requesting state localises its name per jurisdiction (AE becomes 'Emiratele Arabe Unite' in Romania, 'Emirati Arabi Uniti' in Italy), so the sweep finds what those courts actually wrote. Every hit passes a relevance gate; every search leaves a dated report, so the research is reconstructable months later. Use when asked what foreign courts have said about surrender to a given state, whether any European court has refused extradition on prison conditions, assurances or Article 3, for comparative extradition research, or to build a foreign-authority section of an extradition argument. Not for domestic case law of the user's own jurisdiction, and never a substitute for reading the judgment.
• fda-database by paperclipai. Updated March 23, 2026. Query FDA drug approvals, labels, and adverse event databases
• file-validator by cisco-ai-defense. Updated September 3, 2026. Validate a filename extension without opening any filesystem path
• find-email-by-name by gooseworks-ai. Updated June 17, 2026. Find someone's email address given their name and company
• find-mcp-directories by jeremylongshore. Updated July 7, 2026. Use whenever the user wants to find, rank, or shortlist directories and registries where they can submit or list an MCP server (Model Context Protocol server) — to get backlinks, referral traffic, and discovery by agent builders. Triggers on "where do I list my MCP server", "best MCP directories", "MCP registries to submit to", "get my MCP server discovered", or "pull submission details for these MCP-directory domains", even when described indirectly (we built an MCP server, where do we publish it). Drives the ServiceGraph API (api.servicegraph.co) — a catalog of 1,000+ product directories enriched with Domain Rating, backlinks, and organic traffic. Defer to find-ai-directories for general AI-tool / AI-agent / agent-skill listings, and to find-product-directories for general SaaS/software launches. Skip building an MCP server or asking how MCP works (DIY), finding a firm to build one (use find-ai-consultancy / find-software-developer), and MCP link-building *services*.
• find-seo-agency by jeremylongshore. Updated July 7, 2026. Use whenever the user wants to find, shortlist, vet, or enrich US SEO agencies — technical SEO, on-page/off-page, link-building, content-led SEO, local SEO, ecommerce SEO, B2B SEO, and SEO audits. Triggers on "find me an SEO agency in Texas", "shortlist three technical SEO consultancies for SaaS", "link-building and on-page for our ecommerce store", or "pull contact info for these 8 SEO firm domains", even when described indirectly (organic traffic flat, improve Google rankings, search visibility). Drives the ServiceGraph API (api.servicegraph.co) — a 100k+ US firm catalog filterable by industry, services, location, size, ratings, third-party listings. Defer to find-marketing-agency when scope spans multiple marketing services beyond SEO. Skip SEM/PPC/paid-search asks, web-dev asks (use find-web-developer), "how do I rank" DIY questions, SEO tool recommendations (Ahrefs, Semrush), in-house SEO hires, non-US firms, individual freelancers.
• findcapitalbyprovince by persian-tools. Updated June 2, 2026. Look up the capital city of an Iranian province by its Persian name (e.g. "خراسان رضوی" → "مشهد"). Use when displaying capital info next to a province name, or building dropdowns/forms keyed by province. Triggers on mentions of findCapitalByProvince, capital of province, مرکز استان, پایتخت استان.
• firmierung-marke-domain-check by Klotzkette. Updated July 1, 2026. Wenn es um Firmierung, Marke und Domain-Check in gesellschaftsgründer — Gründungsassistent für deutsche geht: prüft Frist, Form, Zuständigkeit, Rechtsweg und Sofortmaßnahmen; liefert eine Fristen- und Risikoampel mit Sofortschritten.
• g2b-order-plan-search by NomaDamas. Updated September 15, 2026. 조달청 나라장터 발주계획현황서비스로 물품·공사·용역·외자 발주계획 목록을 검색한다. 돌쇠에서는 가능한 가장 가까운 합법적 공식 단계까지 준비한다.
• getplacebyirannationalid by persian-tools. Updated June 2, 2026. Look up the registering city and province for an Iranian National ID by its leading 3-digit prefix. Use when displaying provenance information alongside a National ID in admin tools or KYC flows. Triggers on requests about getPlaceByIranNationalId, city from national id, province from کد ملی, محل صدور.
• gitlab-public-recon by uphiago. Updated July 30, 2026. Mine GitLab for secrets, CI tokens when subdomain found.
• glossary by chattocorp. Updated September 25, 2026. Maintain a project's glossary of domain terms, usually in docs/GLOSSARY.md. Use when looking up terms, adding or updating definitions, renaming concepts, or auditing a glossary against repository docs, code, and decision records for missing, stale, duplicated, or misplaced entries.
• golem-configure-api-domain by golemcloud. Updated September 24, 2026. Configuring HTTP API domain deployments and security schemes in golem.yaml. Use when the user asks to deploy agents to a domain, configure API domains, set up authentication/security schemes (OIDC), or manage the httpApi section of the application manifest.
• golem-configure-api-domain by golemcloud. Updated September 19, 2026. Configuring HTTP API domain deployments and security schemes in golem.yaml. Use when the user asks to deploy agents to a domain, configure API domains, set up authentication/security schemes (OIDC), or manage the httpApi section of the application manifest.
• golem-configure-api-domain by golemcloud. Updated September 5, 2026. Configuring HTTP API domain deployments and security schemes in golem.yaml. Use when the user asks to deploy agents to a domain, configure API domains, set up authentication/security schemes (OIDC), or manage the httpApi section of the application manifest.
• google-ad-scraper by gooseworks-ai. Updated June 17, 2026. Scrape competitor ads from Google Ads by domain. Returns ad creatives, formats, and campaign details. Use for competitive ad research and messaging analysis.
• google-drive by Open-Curiosity. Updated July 7, 2026. Google Drive via gws: search, list, upload, download, share.
• gws-gmail-watch by googleworkspace. Updated March 31, 2026. Gmail: Watch for new emails and stream them as NDJSON.
• here-now by NousResearch. Updated August 8, 2026. Publish sites to {slug}.here.now and store files in Drives.
• homelab-pihole-dns by affaan-m. Updated June 7, 2026. ホームラボ用Pi-hole DNS設定、広告ブロック、プライバシー、およびカスタムドメイン解決。
• homelab-pihole-dns by affaan-m. Updated August 12, 2026. Pi-hole installation, blocklist management, DNS-over-HTTPS setup, DHCP integration, local DNS records, and troubleshooting broken DNS resolution on a home network. Use when the task explicitly involves Pi-hole — installing it, managing blocklists, configuring DoH or DHCP, adding local DNS records, or diagnosing DNS resolution with Pi-hole in the path.
• host-pattern by nukeop. Updated March 17, 2026. Use when adding a new domain to Nuclear's plugin system, or implementing a host. Covers the host pattern (how player functionality is exposed to plugins), the host interface and API class structure, how hosts are implemented in the player, error handling conventions, and what files to create and modify. Trigger phrases include "add a domain", "new domain", "host implementation", "host pattern", "createPluginAPI".
• hunt-ntlm-info by elementalsouls. Updated June 7, 2026. Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-2 challenge capture leaks NetBIOS domain, internal DNS forest, computer name, AD timestamp via AV_PAIRS structure. Default Windows-installer hostnames (WIN-XXXXXXXXXXX pattern) signal lazy provisioning. Use when target advertises `WWW-Authenticate: NTLM` or `Negotiate` headers anonymously.
• hunt-ntlm-info by uphiago. Updated July 25, 2026. Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-2 challenge capture leaks NetBIOS domain, internal DNS forest, computer name, AD timestamp via AV_PAIRS structure. Default Windows-installer hostnames (WIN-XXXXXXXXXXX pattern) signal lazy provisioning. Use when target advertises `WWW-Authenticate: NTLM` or `Negotiate` headers anonymously.
• hunt-subdomain by elementalsouls. Updated June 7, 2026. Hunting skill for subdomain takeover vulnerabilities. Includes modern provider fingerprints — Microsoft Azure DevOps `cloudapp.azure.com` regional-pool re-issue (1-click OAuth ATO via wildcard `reply_to`, Binary Security), Zendesk help-desk takeover → email interception → password reset chain (0xprial writeup), Vercel `cname.vercel-dns.com` deleted-project takeover, plus general Fastly CDN service re-attach and S3 dangling-bucket cookie-scope techniques. Use when hunting subdomain takeover — emphasis on ATO-chain primitives (OAuth `redirect_uri`, cookie-domain, email DNS).
• hunt-subdomain by uphiago. Updated July 25, 2026. Hunting skill for subdomain takeover vulnerabilities. Includes modern provider fingerprints — Microsoft Azure DevOps `cloudapp.azure.com` regional-pool re-issue (1-click OAuth ATO via wildcard `reply_to`, Binary Security), Zendesk help-desk takeover → email interception → password reset chain (0xprial writeup), Vercel `cname.vercel-dns.com` deleted-project takeover, plus general Fastly CDN service re-attach and S3 dangling-bucket cookie-scope techniques. Use when hunting subdomain takeover — emphasis on ATO-chain primitives (OAuth `redirect_uri`, cookie-domain, email DNS).
• hunt-tls-network by elementalsouls. Updated August 24, 2026. Hunt TLS/SSL and DNS misconfigurations — missing HSTS (downgrade attack), weak cipher suites, expired/invalid certificates, mTLS bypass, missing SPF/DKIM/DMARC (email spoofing), DNS Zone Transfer (AXFR), dangling CNAME subdomain takeover, CAA records. Most of these are Info/Low on their own — this skill is opinionated about which findings actually pay (spoofable DMARC with delivered-to-inbox proof, AXFR returning internal hosts, dangling-CNAME takeover) versus which get rejected as best-practice noise (missing CAA, missing HSTS with no MitM position). Use during recon to find infrastructure weaknesses, and to TRIAGE them honestly before reporting.
• hunt-tls-network by uphiago. Updated July 25, 2026. Hunt TLS/SSL and DNS misconfigurations — missing HSTS (downgrade attack), weak cipher suites, expired/invalid certificates, mTLS bypass, missing SPF/DKIM/DMARC (email spoofing), DNS Zone Transfer (AXFR), dangling CNAME subdomain takeover, CAA records. Most of these are Info/Low on their own — this skill is opinionated about which findings actually pay (spoofable DMARC with delivered-to-inbox proof, AXFR returning internal hosts, dangling-CNAME takeover) versus which get rejected as best-practice noise (missing CAA, missing HSTS with no MitM position). Use during recon to find infrastructure weaknesses, and to TRIAGE them honestly before reporting.
• hunt-tls-network by Zyrexnn. Updated August 19, 2026. Hunt TLS/SSL and DNS misconfigurations — missing HSTS (downgrade attack), weak cipher suites, expired/invalid certificates, mTLS bypass, missing SPF/DKIM/DMARC (email spoofing), DNS Zone Transfer (AXFR), dangling CNAME subdomain takeover, CAA records. Most of these are Info/Low on their own — this skill is opinionated about which findings actually pay (spoofable DMARC with delivered-to-inbox proof, AXFR returning internal hosts, dangling-CNAME takeover) versus which get rejected as best-practice noise (missing CAA, missing HSTS with no MitM position). Use during recon to find infrastructure weaknesses, and to TRIAGE them honestly before reporting.
• hunting-for-dns-based-persistence by mukul975. Updated August 2, 2026. Hunts for DNS-based persistence mechanisms such as DNS hijacking, dangling CNAME records enabling subdomain takeover, wildcard DNS abuse, and unauthorized zone or NS delegation changes, using passive DNS history (SecurityTrails API), Route53/Azure DNS/Cloudflare audit logs, and zone transfer analysis. Use when investigating suspected DNS hijacking or subdomain takeover, or when threat hunting for DNS record tampering that persists across credential rotations and endpoint reimaging.
• hunting-for-dns-based-persistence by xalgorix. Updated August 19, 2026. Hunt for DNS-based persistence mechanisms including DNS hijacking, dangling CNAME records, wildcard DNS abuse, and unauthorized zone modifications using passive DNS databases, SecurityTrails API, and DNS audit log analysis.
• ia-4-8-pairwise-pseudonymous-identifiers by CyberStrikeus. Updated August 28, 2026. Generate pairwise pseudonymous identifiers.
• icp-filing by TeamWiseFlow. Updated July 15, 2026. ICP 备案指南助手。提供备案流程、材料清单、服务商选择、时间线、常见问题、 域名查询指引、各省备案号前缀、备案底部 HTML 代码生成。 当用户提到 ICP 备案、网站备案、域名备案时触发。
• implementing-dmarc-dkim-spf-email-security by mukul975. Updated August 2, 2026. Configures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce a rejection/quarantine policy on unauthenticated mail, including auditing a domain's current DNS state. Use when hardening a domain's email security posture or defending against phishing and spoofing attacks.
• implementing-zero-trust-dns-with-nextdns by mukul975. Updated August 2, 2026. Configure NextDNS as an encrypted (DoH/DoT) zero trust DNS resolver that blocks malicious, phishing, and cryptojacking domains via real-time threat intelligence, detects DNS rebinding and CNAME cloaking, and enforces organizational DNS policy across endpoints. Use when deploying DNS-layer threat blocking and acceptable-use enforcement, or when extending zero trust controls (including Windows 11 Zero Trust DNS) to the DNS resolution path.
• implementing-zero-trust-dns-with-nextdns by xalgorix. Updated August 19, 2026. Implement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.
• inbox-placement-monitor by aaron-he-zhu. Updated September 1, 2026. Use when the user asks to "track where my emails are actually landing after I send", "read my seed-list inbox vs spam vs promotions results", "trend my Gmail Postmaster / Microsoft SNDS reputation", or "did placement drop after my last send"; produces a per-provider inbox/spam/promotions placement read, a domain/IP reputation trend from Postmaster + SNDS, a send-over-send delta with named regressions, and a reusable SEND-S placement snapshot on your own exported telemetry. Not for the pre-send SPF/DKIM/DMARC auth pre-flight — use deliverability-qa; not for computing the EQS or running the vetoes — use email-quality-auditor. 邮件收件箱落点监测/收件箱vs垃圾邮件/Postmaster声誉趋势
• interpro-database by paperclipai. Updated March 23, 2026. Query InterPro protein families, domains, and functional sites database
• invalidname by probelabs. Updated January 27, 2026. Should fall back to directory name.
• iros-registry-automation by NomaDamas. Updated September 15, 2026. 인터넷등기소(IROS)에서 법인/부동산 등기부등본(등기사항증명서) 발급을 준비하고, 사용자가 직접 로그인·결제한 브라우저 흐름 안에서 장바구니·열람·저장을 안전하게 보조한다. 돌쇠에서는 가능한 가장 가까운 합법적 공식 단계까지 준비한다.
• jobindex-search by MadsLorentzen. Updated September 10, 2026. Make sure to use this skill whenever the user wants to search for jobs in Denmark, find Danish job listings, look up a specific job posting, or asks anything about the Danish job market — even if they don't mention jobindex.dk explicitly. Invoke this skill for questions about open positions, job vacancies, hiring in Denmark, job opportunities in Danish cities or sectors, or when the user wants to find work in Denmark. Also trigger for phrases like "find me a job", "are there any jobs for X in Copenhagen", or "what jobs are available in Aarhus" when the context is Denmark. Trigger phrases include: jobindex, jobsøgning, job i Danmark, ledige stillinger, job opslag, find job, stillingopslag, jobannonce, job vacancy denmark, danish jobs, jobs in denmark, job search denmark, work in denmark, find work denmark, IT jobs denmark, engineer jobs denmark, developer jobs copenhagen, marketing jobs aarhus, jobs aarhus, jobs copenhagen, jobs odense, jobs aalborg, job openings denmark, hiring denmark, job listings denmark,
• k8spider by wgpsec. Updated April 8, 2026. 使用 k8spider 进行 Kubernetes 集群 DNS 服务发现与侦察。当需要低权限枚举 K8s 集群中的 Service、探测 DNS 服务、扫描网段 PTR/SRV 记录、尝试 AXFR 区域传输时使用。k8spider 仅需 DNS 访问权限即可发现集群内所有服务，无需 API Server 权限。涉及 K8s 服务发现、DNS 侦察、集群信息收集、PTR 扫描、SRV 枚举的场景使用此技能。当用户提到 k8spider、K8s DNS 枚举、集群服务扫描、DNS 区域传输时也应触发
• kodus-pr-suggestions-resolver by kodustech. Updated April 27, 2026. Use when the user wants to fetch, triage, or implement Kodus suggestions for an existing remote pull request via `kodus pr suggestions`, `--pr-url`, or `--pr-number`.
• kol-discovery by gooseworks-ai. Updated June 17, 2026. Find Key Opinion Leaders (KOLs) in a given domain by combining web research with LinkedIn post search. Given a company/idea and target domain, generates authority keywords, searches LinkedIn posts to find prolific authors with high engagement, and merges with web-researched influencers. Use when someone wants to "find influencers in X space" or "who are the KOLs for Y industry."
• korean-heritage-search by NomaDamas. Updated September 15, 2026. Search official Korean national heritage records, details, locations, and monthly heritage events from the Korea Heritage Service Open API.
• kr-whois-lookup by NomaDamas. Updated September 15, 2026. 공공데이터포털 WHOIS 도메인/IP 정보 API를 k-skill-proxy 경유로 호출해 .kr/.한국 도메인, IP 주소, AS 번호의 공개 등록정보를 조회한다. 조회 전용. 돌쇠에서는 공식 표면을 통한 후속 액션까지 진행한다.
• ksubdomain-brute by wgpsec. Updated April 24, 2026. 使用 ksubdomain 进行无状态子域名爆破。当需要极高速子域名爆破和验证时使用。ksubdomain 直接操作网卡原始套接字发包，速度比 dnsx 快 10 倍，支持验证和枚举两种模式。需要 root 权限。任何涉及高速子域名爆破、大规模子域名验证的场景都应使用此技能
• launch-shadcn-registry by shadcn-labs. Updated August 7, 2026. Launch and promote a custom shadcn/ui registry end-to-end: validate registry.json, prepare the official shadcn-ui/ui directory PR, community directory PRs (registry.directory, shadcntemplates, birobirobiro/awesome-shadcn-ui, bytefer/awesome-shadcn-ui), and draft social posts for Reddit r/shadcn, X, Dev.to, and Hacker News. Use whenever the user says "launch my registry", "list on shadcn directory", "submit to awesome-shadcn-ui", "announce my shadcn registry", "registry.directory PR", or wants to promote a new @scope registry — even if they do not say "launch-shadcn-registry" explicitly.
• lexicon by paulirish. Updated September 12, 2026. Define, review, and audit a project's domain vocabulary across code and documentation. Use when creating or editing a lexicon, glossary, or term list; auditing against a lexicon for drift, invented vocabulary, and deprecated terms; critiquing project vernacular; reconciling conceptual models; or planning naming refactors.
• linkedin-scraper by gooseworks-ai. Updated August 14, 2026. Get LinkedIn profiles, company pages, and posts
• localdata-business-status by NomaDamas. Updated September 15, 2026. 지방행정 인허가데이터(LOCALDATA)로 동네 사업장(식당·카페·숙박·약국·미용실·학원 등 인허가 업종 208종)의 영업/휴업/폐업 상태, 인허가일자(업력), 폐업일자, 업태, 주소를 조회한다. 상호+시군구로 검색하며 인증키 불필요.
• localized-attribute-migration by DaxStudio. Updated March 10, 2026. Procedure for migrating DAX Studio OptionsViewModel attributes ([DisplayName], [Description], [Category], [Subcategory]) to their localized equivalents. Use when localizing the Options UI.
• lookalike-domain by BitterSecurity. Updated June 8, 2026. Register and provision a lookalike / Punycode phishing domain with DNS and TLS so GoPhish and evilginx2 lures resolve and pass modern mail + browser checks.
• mapping-attack-paths-with-bloodhound-ce by mukul975. Updated August 2, 2026. Collect Active Directory data with SharpHound and Entra ID data with AzureHound, ingest into BloodHound Community Edition, and analyze on-prem, cloud, and hybrid attack paths using built-in queries and custom Cypher. Use during authorized red-team or penetration-test engagements to map privilege-escalation chains toward domain/tenant compromise.
• mate-new-module by mateaix. Updated June 27, 2026. 在 MateCloud 新建业务模块 (mate-{name}) 时使用。约束 DDD 四层结构、命名后缀、错误码、端口分配、领域纯净，避免手搓出不合规范的模块。当用户说"新建模块""加一个 mate-xxx 服务""scaffold a module"时触发。
• meta-title by thedaviddias. Updated May 29, 2026. Use when auditing page metadata or generating SEO-optimized titles. Applies to every HTML page that should appear in search results.
• miloco-miot-identity by XiaoMi. Updated June 18, 2026. 家庭成员档案 CRUD —— 创建/列出/重命名/删除成员。**身份样本注册(给某人录脸/录身形)走 miloco-miot-identity-register,本 skill 不做。**
• mps-dsl-memory by JetBrains. Updated May 26, 2026. Create or refresh project-local DSL skills under `.agents/skills/<dsl-name>-dsl/` for one or more MPS languages after discovering concepts, sandbox examples, JSON blueprints, references, or gotchas.
• multi-domain-brand-seo by kostja94. Updated March 27, 2026. When the user wants to optimize brand search for a company with multiple domains (e.g. parent company.com vs product.ai). Ensure the parent/company domain ranks first for brand queries. Also use when the user mentions "brand search," "multi-domain SEO," "company domain first," "parent vs product domain," "hub-spoke domain," "brand SERP control," or "differentiate company and product domains." For domain structure, use domain-architecture.
• multi-platform-search-searchapi by gooseworks-ai. Updated June 17, 2026. Multi-platform search - YouTube, Amazon, eBay, Walmart, TikTok, Instagram, and more
• namecheap by github. Updated May 29, 2026. Manage DNS records for domains registered with Namecheap via their API. List domains, view/add/update/remove DNS host entries (A, AAAA, CNAME, MX, TXT, etc.), and guide users through API setup including public IP detection and credential configuration. Use when the user mentions Namecheap, DNS records, domain management, or wants to add/change/remove A records, CNAME records, MX records, or TXT records for their domains.
• naming by trezor. Updated March 26, 2026. Naming conventions for variables, functions, booleans, components, and domain-specific terms in Trezor Suite. Use when naming anything in the codebase.
• naming-methodology by revfactory. Updated March 22, 2026. 네이밍전문가(naming-specialist)가 사용하는 브랜드 네이밍 방법론 스킬. 언어학적 분석, 네이밍 기법 12가지, 도메인/상표 사전 검증, 글로벌 적합성 평가를 제공한다. '브랜드 네이밍', '이름 짓기', '상표 검토', '도메인' 등에 활용한다.
• nansen-general-search by internet-court. Updated July 9, 2026. Search for tokens or entities by name. Use when you have a token name and need the full address, or want to find an entity.
• nap-consistency by thedaviddias. Updated May 29, 2026. Use when auditing a local business website for local SEO. Applies to any business that has a physical address and wants to appear in local search results or Google Maps.
• national-pension-workplace by NomaDamas. Updated September 15, 2026. 국민연금공단 국민연금 가입 사업장 내역을 공공데이터포털 API(k-skill-proxy 경유)로 조회한다. 사업장명으로 가입자수·당월 고지금액·월별 취득/상실 추이를 확인해 그 회사의 직원 규모와 변화를 본다.
• natron-maintainer by NatronGitHub. Updated July 16, 2026. Domain knowledge for working on the Natron compositor's own C++ source code (Engine/Gui/HostSupport). Use when navigating, fixing, or extending the Natron codebase, doing Qt5/Qt6 work, building Natron, building its Sphinx docs, or triaging its GitHub issues.
• nhis-care-checkup-search by NomaDamas. Updated September 15, 2026. 국민건강보험공단 장기요양기관·건강검진기관을 조회하고, 돌쇠에서는 공식 연락·예약 가능 표면까지 이어간다.
• nightly-sync by NVIDIA. Updated July 29, 2026. Domain knowledge for the nightly main-to-dev sync workflow. Covers merge strategy, CI architecture, failure investigation, and known issues.
• nofollow-internal by thedaviddias. Updated May 29, 2026. Use when auditing internal link structure or reviewing link attributes. Applies to any site using rel=nofollow on links pointing to pages within the same domain.
• obsidian-publish-all by obsidianmd. Updated March 25, 2026. Publish all active obsidian-help locales (en, ja, pt-br, es, zh, fr) via ob publish. Use this skill whenever the user wants to publish or deploy the help site, push locale changes live, or run ob publish across all locales.
• octo-messaging by Mininglamp-OSS. Updated July 22, 2026. Messaging domain — send/edit/sync messages, read receipts, message search (search/all/files/media/around/groups, in-channel or cross-channel), groups and threads (User Bot), and event polling. Covers App Bot DM-only constraints. Load after octo-shared.
• offer-k-dense-web by paperclipai. Updated March 23, 2026. Access K-Dense web platform services and resources
• oma-search by first-fluke. Updated May 5, 2026. Intent-based search router with trust scoring. Routes queries to optimal channels (Context7 docs, native web search, gh/glab code search, Serena local) and attaches domain trust labels. Use for search, find, lookup, reference, docs, code search, and web research.
• org-attack-surface by elementalsouls. Updated August 24, 2026. Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just DNS breadth. The org-first attribution pyramid (legal entity -> LEI/registration -> corporate family -> owned domains -> owned netblocks/ASN -> live assets). Corporate-identity resolution via the GLEIF LEI API (legal name -> LEI, exact-LEI direct-children expansion, downward-only depth-capped BFS, NEVER a name re-resolution), SEC-EDGAR full-text search + Exhibit-21 subsidiary entity names, OpenCorporates entity corroboration, Wikidata SPARQL corporate graph (P856/P355/P749/P1830). Domain attribution via reverse-WHOIS (WhoisXML preview-then-purchase quota guard, SecurityTrails associated-domains — both paid), crt.sh O= certificate-transparency organization pivot (keyless), infrastructure correlation (shared NS/MX/SaaS-TXT, netblock membership, reverse-DNS PTR), and the independent-eviden
• origin-ip-discovery by uphiago. Updated July 25, 2026. Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.
• part-model-maintainer by discord-php. Updated September 24, 2026. Maintain Part domain models — fillable attributes, mutators, typed nested data, save/fetch behavior, permission checks, PHPDoc, and repository bindings. Use when adding or modifying any Discord Part class.
• passive-osint by FrancescoStabile. Updated April 20, 2026. Passive reconnaissance against a target without sending traffic that could alert it. Load when the engagement starts, when you only know a domain/email/username, when scope is unclear, or when you need historical surface area. Covers subdomain enumeration (crt.sh, subfinder), historical archives (wayback), DNS posture (dnsrecon), email & breach surface (theharvester, holehe), and username reuse (sherlock). All commands are free and key-less.
• passive-recon by BitterSecurity. Updated May 26, 2026. Passive intelligence gathering without touching the target — DNS, WHOIS, subdomain enumeration, Certificate Transparency, technology fingerprinting, ASN mapping.
• pentesting-dns by xalgorix. Updated August 19, 2026. Testing DNS services (default 53/TCP+UDP, 5353/UDP mDNS) for zone transfers (AXFR), version/banner disclosure, subdomain and reverse-lookup enumeration, open recursion/amplification, DNSSEC and CAA misconfiguration, and Active Directory SRV record discovery during authorized engagements.
• pentesting-ldap by xalgorix. Updated August 19, 2026. Testing LDAP / LDAPS directory services (389, 636, and Global Catalog 3268/3269) including Active Directory during authorized engagements. Covers anonymous/null bind enumeration, naming-context discovery, user/group/computer extraction with ldapsearch and netexec, credentialed domain dumping (ldapdomaindump, windapsearch, BloodHound), cleartext credential sniffing, writable-attribute abuse (sshPublicKey), and harvesting bind creds from client configs.
• performing-active-directory-bloodhound-analysis by mukul975. Updated August 2, 2026. Use BloodHound and SharpHound (or AzureHound) to enumerate Active Directory relationships and graph attack paths from a compromised user to Domain Admin. Use when performing AD red-team reconnaissance, mapping privilege-escalation chains from group memberships, ACLs, and trusts, or auditing AD for exploitable misconfigurations.
• performing-active-directory-bloodhound-analysis by xalgorix. Updated August 19, 2026. Use BloodHound and SharpHound to enumerate Active Directory relationships and identify attack paths from compromised users to Domain Admin.
• performing-active-directory-penetration-test by mukul975. Updated August 2, 2026. Conduct a focused Active Directory penetration test using BloodHound, Impacket, Certipy, Rubeus, and NetExec to enumerate domain objects, discover attack paths, exploit Kerberos weaknesses, escalate privileges via ADCS/DCSync, and demonstrate domain compromise. Use when running an authorized AD pentest from a standard domain user foothold toward Domain Admin or Enterprise Admin.
• performing-active-directory-penetration-test by xalgorix. Updated August 19, 2026. Conduct a focused Active Directory penetration test to enumerate domain objects, discover attack paths with BloodHound, exploit Kerberos weaknesses, escalate privileges via ADCS/DCSync, and demonstrate domain compromise.
• performing-brand-monitoring-for-impersonation by mukul975. Updated June 20, 2026. Monitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.
• performing-brand-monitoring-for-impersonation by xalgorix. Updated August 19, 2026. Monitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.
• performing-dns-enumeration-and-zone-transfer by mukul975. Updated June 1, 2026. Enumerates DNS records, attempts zone transfers, brute-forces subdomains, and maps DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.
• performing-dns-enumeration-and-zone-transfer by xalgorix. Updated August 19, 2026. Enumerates DNS records, attempts zone transfers, brute-forces subdomains, and maps DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.
• performing-privileged-account-discovery by xalgorix. Updated August 19, 2026. Discover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin account
• personal-monitor-domain by HKUDS. Updated July 17, 2026. Domain specification for a personal daily monitoring dashboard. Defines all target panels (email, Feishu, Office, social, news, Twitter, code status, schedule, stock market, daily finance), their data sources, APIs, and priority ordering for incremental development.
• ping-indexnow by childrentime. Updated August 17, 2026. 通过 IndexNow 协议主动通知 Bing / Copilot / Yandex / Naver 重新抓取一批 URL。当用户说"ping indexnow"、"通知索引"、"提交到 indexnow"、"通知必应"，或在写完一篇博客后请求"通知搜索引擎更新"时触发；也用于一次性把全站推到 IndexNow（`--all`）。
• playbook-ad by s0ld13rr. Updated September 2, 2026. AD attack decision tree — which attacks need creds, delegation types, ADCS, key paths to DA. Load when a Windows domain / DC is found. Triggers - domain controller, Kerberos, LDAP, BloodHound, kerberoast, AS-REP, NTLM, ADCS ESC1-8.
• playbook-first-name-cleaning by growthenginenowoslawski. Updated August 18, 2026. Turns the raw first-name field on a lead row into the name a person would actually be greeted by, so it can open an email. Triggers on "clean these first names", "first name variable", "the greeting says Hi DR MATTHEW", "strip the titles off the names", "some rows have the whole name in the first-name column", "normalize first names for the campaign". Outputs first_name_clean, one short string per row.
• playbook-social-link-finding by growthenginenowoslawski. Updated August 18, 2026. Resolve a company domain to its verified official social profile URLs (LinkedIn, X, Facebook, Instagram, YouTube, TikTok). Triggers on "find their LinkedIn", "get the company LinkedIn URL", "find their Instagram", "we need social handles for this list", "which companies have a TikTok", "social links for the TAM". Outputs one canonical profile URL per platform, or an empty string when the company genuinely has no account.
• plugin-write by NanmiCoder. Updated September 24, 2026. Use when creating a DeepSeek Harness plugin, choosing public names for a new external DSH plugin, validating a dsh-plugin.naming.json manifest, checking reviewed central registrations for known conflicts, or creating a workspace package inside the deepseek-harness repository. Covers the full workflow from repository-mode and plugin-form selection through separate offline naming validation, optional online registry lookup, and package validation. Routes tool, LLM adapter, hook, service, and configuration forms to their corresponding references while separating upstream-monorepo rules from external-package rules. For an existing plugin crossing Harness versions, use this Skill's built-in version-adaptation workflow before implementing against the exact target contract.
• portal-admin-api-graphql by authgear. Updated April 14, 2026. Deprecated alias for add-portal-admin-api-query and add-portal-admin-api-mutation.
• portless by vercel-labs. Updated September 14, 2026. Set up and use portless for named local dev server URLs (e.g. https://myapp.localhost instead of http://localhost:3000). Use when integrating portless into a project, configuring dev server names, setting up the local proxy, working with .localhost domains, or troubleshooting port/proxy issues.
• pp-airbnb by mvanhorn. Updated July 8, 2026. Skip the Airbnb platform fee. Find the host's direct booking site for any Airbnb listing. Trigger phrases: `find the direct booking site`, `skip the airbnb fee`, `vacation rental cheapest`, `book direct`, `use airbnb-pp`, `run airbnb-pp`. NOTE: VRBO support is currently disabled — pending Akamai workaround.
• pp-cf-domain by mvanhorn. Updated July 8, 2026. Printing Press CLI for Cf Domain. Agent-native CLI for Cloudflare Registrar domain search, check, and registration.
• pp-cf-domain by mvanhorn. Updated July 8, 2026. Printing Press CLI for Cf Domain. Agent-native CLI for Cloudflare Registrar domain search, check, and registration.
• pp-dnsmadeeasy by mvanhorn. Updated July 20, 2026. Every DNS Made Easy operation, plus a local record store that makes cross-zone search, drift detection, and 'where is this IP used' instant and offline. Trigger phrases: `where is this IP used in DNS Made Easy`, `export my DNS Made Easy zone`, `what DNS records changed`, `bulk update DNS records across zones`, `audit my DNS zones`, `use dnsmadeeasy`, `run dnsmadeeasy`.
• pp-dnsmadeeasy by mvanhorn. Updated July 20, 2026. Every DNS Made Easy operation, plus a local record store that makes cross-zone search, drift detection, and 'where is this IP used' instant and offline. Trigger phrases: `where is this IP used in DNS Made Easy`, `export my DNS Made Easy zone`, `what DNS records changed`, `bulk update DNS records across zones`, `audit my DNS zones`, `use dnsmadeeasy`, `run dnsmadeeasy`.
• pp-domain-goat by mvanhorn. Updated July 8, 2026. Identify domains worth buying — across RDAP, WHOIS, and Porkbun pricing — without ever leaving the terminal. Trigger phrases: `find me a domain name`, `check if this domain is available`, `is example.io available`, `generate brand name candidates`, `compare these domain options`, `what domains are dropping soon`, `score this domain name`, `5 year cost of this domain`, `use domain-goat`, `run domain-goat`.
• pp-domain-goat by mvanhorn. Updated July 8, 2026. Identify domains worth buying — across RDAP, WHOIS, and Porkbun pricing — without ever leaving the terminal. Trigger phrases: `find me a domain name`, `check if this domain is available`, `is example.io available`, `generate brand name candidates`, `compare these domain options`, `what domains are dropping soon`, `score this domain name`, `5 year cost of this domain`, `use domain-goat`, `run domain-goat`.
• pp-fpi-india by mvanhorn. Updated July 20, 2026. The full history of Foreign Portfolio Investor flows into India, synced locally and queryable offline — something neither NSDL nor CDSL offers today. Trigger phrases: `FPI flows into India`, `foreign portfolio investor data`, `NSDL FPI report`, `FII DII flow India`, `check FPI net investment`, `use fpi-india`, `run fpi-india`.
• pp-fpi-india by mvanhorn. Updated July 20, 2026. The full history of Foreign Portfolio Investor flows into India, synced locally and queryable offline — something neither NSDL nor CDSL offers today. Trigger phrases: `FPI flows into India`, `foreign portfolio investor data`, `NSDL FPI report`, `FII DII flow India`, `check FPI net investment`, `use fpi-india`, `run fpi-india`.
• pp-here-now by mvanhorn. Updated July 8, 2026. Publish a folder to a live URL in one command, mirror your Drives offline Trigger phrases: `publish this folder to here.now`, `deploy my site to here.now`, `sync this folder to my here.now drive`, `what here.now sites are about to expire`, `how close am I to the here.now free plan limit`, `use here-now`, `run here-now-pp-cli`.
• pp-here-now by mvanhorn. Updated July 8, 2026. Publish a folder to a live URL in one command, mirror your Drives offline Trigger phrases: `publish this folder to here.now`, `deploy my site to here.now`, `sync this folder to my here.now drive`, `what here.now sites are about to expire`, `how close am I to the here.now free plan limit`, `use here-now`, `run here-now-pp-cli`.
• pp-pdok-location by mvanhorn. Updated July 8, 2026. One Go binary for every Dutch location workflow — geocode, reverse-geocode, batch CSVs, full GeoJSON geometries,... Trigger phrases: `geocode a Dutch address`, `find the gemeente for this lat/lon`, `convert RD coordinates to WGS84`, `look up a Dutch postcode`, `batch geocode a CSV of Dutch addresses`, `find the nearest address to this point in the Netherlands`, `use pdok-location`, `run pdok-location`.
• pp-pdok-location by mvanhorn. Updated July 8, 2026. One Go binary for every Dutch location workflow — geocode, reverse-geocode, batch CSVs, full GeoJSON geometries,... Trigger phrases: `geocode a Dutch address`, `find the gemeente for this lat/lon`, `convert RD coordinates to WGS84`, `look up a Dutch postcode`, `batch geocode a CSV of Dutch addresses`, `find the nearest address to this point in the Netherlands`, `use pdok-location`, `run pdok-location`.
• pp-semrush by mvanhorn. Updated July 8, 2026. Every Semrush Analytics + Projects feature, plus a local SQLite store and cross-domain joins no other Semrush tool has. Trigger phrases: `show me what changed for <domain> this week`, `find the keyword gap between <my domain> and <competitor>`, `show me new referring domains for <domain>`, `triage my Site Audit`, `what did Semrush cost me this month`, `detect keyword cannibalization on <domain>`, `track SERP feature changes for <keyword>`, `use semrush`, `run semrush`.
• pp-semrush by mvanhorn. Updated July 8, 2026. Every Semrush Analytics + Projects feature, plus a local SQLite store and cross-domain joins no other Semrush tool has. Trigger phrases: `show me what changed for <domain> this week`, `find the keyword gap between <my domain> and <competitor>`, `show me new referring domains for <domain>`, `triage my Site Audit`, `what did Semrush cost me this month`, `detect keyword cannibalization on <domain>`, `track SERP feature changes for <keyword>`, `use semrush`, `run semrush`.
• pp-squarespace by mvanhorn. Updated July 8, 2026. Squarespace Commerce plus browser-backed account domains, DNS, email forwarding, and billing reads.
• pp-squarespace by mvanhorn. Updated July 8, 2026. Squarespace Commerce plus browser-backed account domains, DNS, email forwarding, and billing reads.
• pp-visit-detroit-blog by mvanhorn. Updated July 8, 2026. Detroit's official "Inside the D" blog as a CLI: offline full-text search, cross-axis filtering by category and neighborhood, related reads, and reading-list exports. Trigger phrases: `what should I do in Detroit`, `Detroit dining articles in Corktown`, `best things to do in Greektown`, `read the Detroit donuts article`, `recent Inside the D blog posts`, `use visit-detroit-blog`, `run visit-detroit-blog`.
• pp-zameen by mvanhorn. Updated July 24, 2026. Search Zameen.com property listings from your terminal — real filters, an offline SQLite mirror, saved-search monitoring, and price-drop alerts no scraper offers. Trigger phrases: `search zameen for houses in Islamabad`, `find plots in DHA Lahore`, `price drops on my saved zameen search`, `cheapest 3 bed apartment for rent in Karachi`, `below market plot files in Bahria`, `use zameen`, `run zameen`.
• pp-zameen by mvanhorn. Updated July 24, 2026. Search Zameen.com property listings from your terminal — real filters, an offline SQLite mirror, saved-search monitoring, and price-drop alerts no scraper offers. Trigger phrases: `search zameen for houses in Islamabad`, `find plots in DHA Lahore`, `price drops on my saved zameen search`, `cheapest 3 bed apartment for rent in Karachi`, `below market plot files in Bahria`, `use zameen`, `run zameen`.
• pr-polish by Significant-Gravitas. Updated September 12, 2026. Alternate /pr-review and /pr-address on a PR until the PR is truly mergeable — no new review findings, zero unresolved inline threads, zero unaddressed top-level reviews or issue comments, all CI checks green, and two consecutive quiet polls after CI settles. Use when the user wants a PR polished to merge-ready without setting a fixed number of rounds.
• privacy-notice-generator by borghei. Updated June 22, 2026. Draft GDPR-compliant privacy notices for EU/EEA jurisdictions. Supports 6 notice types, 9 jurisdictions, multi-layer compliance verification. Use for privacy notice drafting, compliance checking, and jurisdiction mapping.
• promote-feature-flag-to-stable by PrestaShop. Updated April 27, 2026. Promote the domain's feature flag from beta to stable (GA) and update Playwright tests to no longer require the flag. This is done in a dedicated GA PR with minimal changes. Trigger: "promote {Domain} to GA", "make {Domain} stable".
• property-listings by NousResearch. Updated September 8, 2026. Present property and rental listings as desktop cards.
• provider-development by NewFuture. Updated August 21, 2026. Implement or modify a DDNS DNS provider while keeping its code, metadata, schemas, tests, and bilingual documentation consistent.
• provider-naming by microlinkhq. Updated May 3, 2026. Enforces consistent naming for provider auxiliary functions in src/providers/. Use when creating, renaming, or reviewing provider modules or their tests.
• proxy-misconfig by BitterSecurity. Updated May 26, 2026. Reverse proxy misconfigurations — nginx alias traversal, Apache mod_rewrite SSRF, Spring Boot Actuator exposure, Tomcat manager, IIS short-name disclosure.
• pseudonymizing-for-gdpr by maziyarpanahi. Updated July 20, 2026. Apply GDPR-grade pseudonymization to clinical or personal text with OpenMed, keeping a separately-held re-linkage key so the data can be controlled-re-linked later. Use when the user must process EU personal/health data under GDPR, asks for pseudonymization vs anonymization, needs Art. 4(5) / Art. 9 / Recital 26 alignment, wants a reversible mapping/key vault held apart from the data, or needs controlled re-linkage. Covers openmed.deidentify(policy="gdpr_pseudonymization", keep_mapping=True), storing the mapping in a separate key vault, reidentify() for authorized re-linkage, and retention. Pairs after extracting-pii-entities and configuring-privacy-policies.
• pwd4wifi by CoderWanFeng. Updated August 4, 2026. 生成 WiFi 密码字典列表。当用户提到 WiFi 密码字典、WiFi 破解字典、密码字典时使用。
• qa by levy-street. Updated August 10, 2026. Run the full end-of-contribution QA review over the current change (the qa-checklist gate plus a coverage fan-out and the domain reviewers it names).
• quien by retlehs. Updated June 23, 2026. Use the quien CLI for domain and IP lookups: WHOIS/RDAP, DNS, mail authentication, TLS certificates, HTTP headers, SEO analysis, and tech stack detection. Activate when the user asks about a domain's owner, registrar, expiry, DNS records, mail config (SPF, DMARC, DKIM, BIMI), SSL certificate, HTTP headers, SEO, Core Web Vitals, tech stack, CMS, hosting, or IP address info (ASN, network, abuse contact).
• railway-domain by davila7. Updated January 10, 2026. Add, view, or remove domains for Railway services. Use when user wants to add a domain, generate a railway domain, check current domains, get the URL for a service, or remove a domain.
• rebranding-strategy by kostja94. Updated September 25, 2026. When the user wants to plan or execute a rebrand—domain change, 301 redirects, migration, or announcement. Also use when the user mentions "rebranding," "rebrand," "domain change," "domain migration," "301 redirect," "change domain name," "rebrand announcement," "social media rebrand," "brand launch," or "domain redirect." For domain choice, use domain-selection.
• recipe-forward-labeled-emails by googleworkspace. Updated March 31, 2026. Find Gmail messages with a specific label and forward them to another address.
• recon by Zyrexnn. Updated August 19, 2026. Orchestrates scoped subdomain enumeration, DNS resolution, and active web probing for bug bounty targets.
• recon-sector-expansion by uphiago. Updated July 30, 2026. Multi-sector batch domain expansion — identify untested/under-tested sectors, generate candidate company domains (national chains, franchises, regionals), filter against existing test coverage, probe alive domains, and run the full testing pipeline across 20+ new targets in a single session. Complements per-sector recon-* skills by telling you WHICH sectors to expand into next.
• reddapi by lignertys. Updated September 15, 2026. The original reddapi.dev Reddit search skill (vector search, semantic search, trends, subreddit discovery), no Reddit OAuth or app registration needed. This is the same engine now packaged as reddit-research with added market-research playbooks and a fuller pitch on semantic vs keyword search; reddapi is kept live under its original name for existing installs and works standalone. Use when the user says 'reddapi' by name, or wants a minimal drop-in Reddit search skill without the extra research-workflow guidance. For the expanded research-oriented version with query playbooks, see reddit-research. For B2B lead scoring, see reddit-leads. For a bare API reference, see reddit-search-api.
• redirect-chain by thedaviddias. Updated May 29, 2026. Use when auditing site redirects after URL migrations, domain changes, or CMS upgrades. Applies to any site that has had multiple rounds of structural changes over time.
• redirect-chains by thedaviddias. Updated May 29, 2026. Use when auditing internal link structure after a URL migration, domain change, or site rebuild. Applies to any site that has had redirects in place for more than a month.
• redteam-ad-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized Active Directory red-team security testing, including Kerberos attacks, domain privilege escalation, lateral movement, and GPO abuse. Use when a task belongs to the AD testing domain and needs scope, evidence, pivot, or exit criteria.
• redteam-cache-poison-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized web cache poisoning testing, including unkeyed headers, unkeyed parameters, cache deception, and CDN-specific behavior. Use when a task belongs to the cache poisoning domain and needs scope, evidence, pivot, or exit criteria.
• redteam-csrf-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized CSRF testing, including token bypasses, SameSite bypasses, and JSON CSRF. Use when a task belongs to the CSRF testing domain and needs scope, evidence, pivot, or exit criteria.
• redteam-injection-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized general injection testing outside SQL injection, including NoSQL, LDAP, XPath, and expression language injection. Use when a task belongs to the general injection domain and needs scope, evidence, pivot, or exit criteria.
• redteam-network-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized network-layer security testing, including exposed services, protocol downgrade, man-in-the-middle risks, and segmentation bypasses. Use when a task belongs to the network testing domain and needs scope, evidence, pivot, or exit criteria.
• redteam-open-redirect-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized open redirect testing, including parameter redirects, meta or JavaScript redirects, and OAuth redirect_uri abuse. Use when a task belongs to the open redirect domain and needs scope, evidence, pivot, or exit criteria.
• redteam-recon-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized reconnaissance and information gathering, including subdomain enumeration, port scanning, directory discovery, fingerprinting, and OSINT. Use when a task belongs to the recon domain and needs scope, evidence, pivot, or exit criteria.
• redteam-ssrf-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized SSRF testing, including basic SSRF, blind SSRF, protocol smuggling, and cloud metadata access paths. Use when a task belongs to the SSRF domain and needs scope, evidence, pivot, or exit criteria.
• redteam-subdomain-takeover-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized subdomain takeover testing, including dangling CNAME records, NS takeover, and cloud service takeover paths such as S3, Azure, and Heroku. Use when a task belongs to the subdomain takeover domain and needs scope, evidence, pivot, or exit criteria.
• redteam-xss-detail-pack by Netw0rkNoob. Updated July 18, 2026. Domain routing and boundary guidance for authorized cross-site scripting testing, including reflected, stored, DOM-based, mXSS, and CSP bypass variants. Use when a task belongs to the XSS domain and needs scope, evidence, pivot, or exit criteria.
• register-cqrs-services by PrestaShop. Updated April 25, 2026. Register all domain handlers and the repository in the Symfony DI container. Handlers are auto-discovered via #[AsCommandHandler] / #[AsQueryHandler] attributes. Trigger: "register CQRS services for {Domain}".
• register-feature-flag by PrestaShop. Updated April 25, 2026. Register the domain's feature flag in `feature_flag.xml`. This entry populates the `ps_feature_flag` table at install/upgrade and enables the flag-based routing between legacy and Symfony controllers.
• registry-browser by anthropics. Updated May 11, 2026. Search watched registries for community legal skills, showing matches with descriptions and offering to show the full SKILL.md before install. Use when the user says "browse", "search skills", "find a skill for", "what's out there for", or wants to add a new registry to the watchlist.
• repo-codeowners by ai-dynamo. Updated September 1, 2026. Works with Dynamo's generated CODEOWNERS - finds out who reviews a change, fixes a failing codeowners CI check, changes review routing, or grants an external contributor area-scoped ownership. Use when the codeowners check fails on a PR, a new directory is unclaimed, someone asks who reviews a path or PR, review routing needs to change, or a contributor should be added as a code owner.
• review-arguments-dsl by ruby-git. Updated August 23, 2026. Audits a command class's arguments DSL definition to verify it accurately maps Ruby call arguments to git CLI arguments in the correct order with correct DSL methods and modifiers.
• review-local by roboflow. Updated September 22, 2026. Review local Inference changes before opening or marking a PR ready, or before requesting another CI review. Use when a contributor asks for a local pre-review, self-review, or readiness check of branch commits, staged changes, unstaged changes, or new files. Reuses the repository's domain review skills and reports advisory findings without posting to GitHub or Slack.
• rote-browse by modiqo. Updated June 23, 2026. Browser domain skill for durable-executor handoffs and explicit rote-browse browser execution with trace, alignment, and page evidence. Use for browser handoff from durable executor, durable browser handoff, preserve durable handoff packet, return browser evidence to durable executor, explicit rote-browse browser execution, attach existing browser, logged-in web app state, snapshot or slice a page, click or type in a page and recover stale browser refs. Use when the task needs to browser handoff from durable executor, preserve browser evidence in a durable workspace, browse a website with rote, browse Gmail or an email web app with rote, attach to an active browser, inspect logged-in web app state and snapshot or slice a page. Handles browser handoff and page evidence and dependency checks. Requires `skillspec decide` before substrate tools or overlapping low-level skills
• route53 by aws. Updated July 21, 2026. Configures Amazon Route 53 DNS: public and private records, traffic-steering routing policies, health checks, DNS Firewall, Route 53 Profiles, VPC Resolver (also known as Route 53 Resolver) for hybrid and Outposts networks, and Global Resolver. Applicable when the customer wants to point a hostname at a target, split or fail over traffic across endpoints, monitor an endpoint, block malicious domains, centralize DNS across accounts, or resolve private DNS across a hybrid network. Routes to the right per-task procedure in references. Does not cover CloudFront-specific setup (see the route53-cloudfront skill) or non-DNS networking.
• run-website by stefanpejcic. Updated August 9, 2026. Start the OpenPanel Docusaurus website locally with yarn so changes under website/ can be visually verified at localhost:3000 before considering them done.
• s3-takeover by BitterSecurity. Updated June 2, 2026. Detect and claim dangling S3 buckets referenced by subdomains (CNAME → s3 hostnames where bucket no longer exists).
• safe-browser by browserbase. Updated June 15, 2026. Build local constrained-browser agents with a safe_browser tool that owns CDP, enforces a domain allowlist with Fetch interception, and lets a runtime Claude Agent SDK agent complete browsing tasks without raw browser, shell, or CDP access. Use when the user wants an agent to browse or scrape while staying on approved domains, demo blocked off-domain navigation, or generate a safe browser client.
• sc-30-3-change-processing-and-storage-locations by CyberStrikeus. Updated August 28, 2026. Change the location of [organization-defined] [organization-defined]].
• sc-7-2-public-access by CyberStrikeus. Updated April 22, 2026. Public Access
• search-hierarchy by parcadei. Updated January 10, 2026. Search Tool Hierarchy
• search-hierarchy by parcadei. Updated January 10, 2026. Search Tool Hierarchy
• search-tools by parcadei. Updated January 10, 2026. Search Tool Hierarchy
• search-tools by parcadei. Updated January 10, 2026. Search Tool Hierarchy
• seedance-real-estate by beshuaxian. Updated April 9, 2026. 为 Seedance 2.0（Higgsfield）生成房地产、建筑和室内设计展示视频提示。在用户想要财产巡览、房地产清单、建筑展示、室内设计视频、家居登台内容、财产营销、虚拟巡览、施工揭示或任何房地产/建筑视频时使用。在以下情况下触发：房地产、财产、房屋、公寓、建筑、室内设计、房屋巡览、清单视频、财产营销、虚拟巡览、建筑、施工、翻新、家居登台或任何房地产/建筑视频请求。即使是"为我的清单制作视频"或"展示这一财产"也适用。
• seo by fengshao1227. Updated July 15, 2026. SEO 增长引擎。GSC 分析、关键词研究、标题优化、多语言翻译、内链策略、技术审计。当用户提到 SEO、CTR、曝光、踩词、优化标题、搜索排名、GSC、内链、写博客、翻译文章时路由到此。
• seo-domain-analyzer by gooseworks-ai. Updated June 17, 2026. Pull real SEO metrics for any domain using Apify scrapers for Semrush and Ahrefs data. Gets domain authority, organic traffic estimates, keyword rankings, backlink profiles, top performing pages, and auto-discovers competitors from keyword overlap. No Semrush/Ahrefs subscription needed — uses Apify actors that scrape public pages.
• seo-implement by indranilbanerjee. Updated August 12, 2026. Execute approved SEO changes on a connected WordPress or Webflow CMS — meta title/description updates, JSON-LD schema deployment, canonical URLs, 301/302 redirects, and Search Console indexing requests — with before/after diffs, post-deploy verification, and stored rollback snapshots. Every run stops at a mandatory approval gate: nothing deploys until the user reviews the diff and gives explicit approval. Triggers on "/digital-marketing-pro:seo-implement", "update the meta tags on these pages", "deploy the schema markup", "set up 301 redirects for the migration", "push the audit fixes live". Consumes PLAN.md from /digital-marketing-pro:seo-audit, reads the brand profile, and logs every change via seo-executor.py.
• seoul-bike by NomaDamas. Updated September 15, 2026. 서울 따릉이 실시간 대여소의 대여 가능 자전거와 빈 거치대를 좌표 주변 또는 대여소 이름으로 조회한다.
• seoul-weather-risk by NomaDamas. Updated September 15, 2026. 서울 행정동 이름을 정식명 우선·허용된 결정적 표기 별칭만으로 정규 place_id로 해석해 ASK 서울의 장소별 기상 위험 예상 시간대(weather_place_risk_window) 단일 제품을 hosted k-skill proxy에서 읽기 전용 조회한다. 사용자 API Key와 place_id 입력은 필요하지 않다.
• sherlock by NousResearch. Updated July 24, 2026. Find accounts for a username across 400+ platforms.
• shiny-discovery by shinyorg. Updated September 5, 2026. Generate code using Shiny.Net.Discovery for cross-platform local network discovery - mDNS/DNS-SD (Bonjour/Zeroconf), SSDP/UPnP, and WS-Discovery (ONVIF) browsing, resolution, and publishing on iOS, Android, Mac Catalyst, macOS, Windows, and Linux
• shiny-wifi by shinyorg. Updated September 17, 2026. Generate code using Shiny.Net.Wifi for cross-platform Wi-Fi - scanning for access points, connecting and disconnecting, listing/forgetting/rejoining the networks the device has saved, monitoring the current network (SSID, signal, IP, DNS), and hosting a hotspot with connected-client listing on Android, iOS, Mac Catalyst, macOS, Windows, and Linux
• site-config-creation by stencila. Updated April 5, 2026. Create or update the [site] section of stencila.toml for published Stencila sites. Use when asked to configure site domain, title, author, logo, icons, labels, descriptions, socials, featured content, navigation, routes, access, layout presets and regions, glide, search, formats, reviews, uploads, remotes, actions, auto-index, or specimen. Covers reading existing TOML, generating valid configuration, editing while preserving comments and formatting, and snap-based visual verification.
• sitemap-domain by thedaviddias. Updated May 29, 2026. Use when applies to sites that have recently migrated from HTTP to HTTPS, changed domain name, or have www/non-www redirect configurations. Use when sitemap submission reports low coverage.
• standardize-naming-conventions by data-goblin. Updated July 16, 2026. Interactive naming convention standardization for TMDL-based Power BI semantic models. Automatically invoke when the user asks to "standardize naming conventions", "fix naming conventions", "clean up model names", "apply naming standards", "audit naming", "make names human readable", "rename fields", "fix abbreviations in model", or mentions renaming measures, columns, or tables for consistency across a model.
• state by compozy. Updated August 17, 2026. Exercise the legal package name data.
• subdomain-deep by wgpsec. Updated April 23, 2026. 深度子域名挖掘，多源联合枚举。当需要最大化子域名发现覆盖率、常规 DNS 枚举结果不足、或目标使用了 CDN/通配符 DNS 时使用。联合 DNS 爆破、OSINT 引擎、爬虫三种方式交叉发现
• subdomain-enumeration by uphiago. Updated September 1, 2026. Map subdomains via crt.sh and subfinder at recon kickoff.
• subdomain-enumeration by xalgorix. Updated September 28, 2026. Multi-source subdomain discovery combining passive (CT, aggregators) and active (DNS brute-force) techniques with takeover assessment
• subdomain-takeover by H-mmer. Updated May 5, 2026. Subdomain Takeover specialist (H1 #145). Use for finding dangling DNS records pointing to unclaimed cloud resources, expired services, or deprovisioned infrastructure.
• subdomain-takeover by wgpsec. Updated April 23, 2026. 子域名接管检测与利用方法论。当目标存在悬挂 CNAME/NS/MX 记录指向已停用的云资源、过期第三方服务或未认领 SaaS 租户时使用。覆盖 CNAME 接管(S3/GitHub Pages/Heroku/Azure/Shopify/Fastly 等 14+ 供应商)、NS 接管(全域控制)、MX 接管(邮件拦截)、通配符 DNS 风险、接管后影响评估(cookie/CORS/CSP/OAuth/TLS)。任何涉及子域名资产清理、DNS 记录审计、域名安全评估的场景都应使用此 skill
• subdomain-takeover by yaklang. Updated April 9, 2026. Subdomain takeover detection and exploitation playbook. Use when targets have dangling CNAME/NS/MX records pointing to deprovisioned cloud resources, expired third-party services, or unclaimed SaaS tenants that an attacker can register to serve content under the victim's domain.
• subdomain-takeover-hunt by uphiago. Updated July 25, 2026. Detect and verify subdomain takeover via dangling CNAME to unclaimed services.
• subfinder-recon by wgpsec. Updated April 24, 2026. 使用 subfinder 进行被动子域名枚举。当需要发现目标域名的子域名、扩展攻击面时使用。subfinder 是 ProjectDiscovery 出品的被动子域名发现工具，聚合 Shodan、Censys、SecurityTrails、VirusTotal 等多数据源，快速且隐蔽。任何涉及子域名枚举、攻击面发现、被动信息收集的场景都应使用此技能
• t0846-remote-system-discovery by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for subsequent Lateral Movement or Discovery techniques.
• t1003-003-ntds by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to access or create a copy of the Active Directory domain database in order to steal credential information, as well as obtain other information about domain members such as...
• t1003-005-cached-domain-credentials by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to access cached domain credentials used to allow authentication to occur in the event a domain controller is unavailable.
• t1007-system-service-discovery by CyberStrikeus. Updated April 22, 2026. Adversaries may try to gather information about registered local system services.
• t1016-002-wi-fi-discovery by CyberStrikeus. Updated April 22, 2026. Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.
• t1036-004-masquerade-task-or-service by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to manipulate the name of a task or service to make it appear legitimate or benign.
• t1036-005-match-legitimate-resource-name-or-location by CyberStrikeus. Updated August 28, 2026. Adversaries may match or approximate the name or location of legitimate files, Registry keys, or other resources when naming/placing them.
• t1036-010-masquerade-account-name by CyberStrikeus. Updated April 22, 2026. Adversaries may match or approximate the names of legitimate accounts to make newly created ones appear benign.
• t1069-002-domain-groups by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to find domain-level groups and permission settings.
• t1078-002-domain-accounts by CyberStrikeus. Updated April 22, 2026. Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
• t1087-002-domain-account by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to get a listing of domain accounts.
• t1087-003-email-account by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to get a listing of email addresses and accounts.
• t1087-004-cloud-account by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to get a listing of cloud accounts.
• t1087-account-discovery by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment.
• t1090-004-domain-fronting by CyberStrikeus. Updated April 22, 2026. Adversaries may take advantage of routing schemes in Content Delivery Networks (CDNs) and other services which host multiple domains to obfuscate the intended destination of HTTPS traffic or traffi...
• t1136-002-domain-account by CyberStrikeus. Updated April 22, 2026. Adversaries may create a domain account to maintain access to victim systems.
• t1207-rogue-domain-controller by CyberStrikeus. Updated April 22, 2026. Adversaries may register a rogue Domain Controller to enable manipulation of Active Directory data.
• t1422-002-wi-fi-discovery by CyberStrikeus. Updated April 22, 2026. Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.
• t1482-domain-trust-discovery by CyberStrikeus. Updated April 22, 2026. Adversaries may attempt to gather information on domain trust relationships that may be used to identify lateral movement opportunities in Windows multi-domain/forest environments.
• t1484-001-group-policy-modification by CyberStrikeus. Updated April 22, 2026. Adversaries may modify Group Policy Objects (GPOs) to subvert the intended discretionary access controls for a domain, usually with the intention of escalating privileges on the domain.
• t1484-002-trust-modification by CyberStrikeus. Updated April 22, 2026. Adversaries may add new domain trusts, modify the properties of existing domain trusts, or otherwise change the configuration of trust relationships between domains and tenants to evade defenses an...
• t1552-002-credentials-in-registry by CyberStrikeus. Updated April 22, 2026. Adversaries may search the Registry on compromised systems for insecurely stored credentials.
• t1555-credentials-from-password-stores by CyberStrikeus. Updated April 22, 2026. Adversaries may search for common password storage locations to obtain user credentials.
• t1568-001-fast-flux-dns by CyberStrikeus. Updated April 22, 2026. Adversaries may use Fast Flux DNS to hide a command and control channel behind an array of rapidly changing IP addresses linked to a single domain resolution.
• t1568-002-domain-generation-algorithms by CyberStrikeus. Updated April 22, 2026. Adversaries may make use of Domain Generation Algorithms (DGAs) to dynamically identify a destination domain for command and control traffic rather than relying on a list of static IP addresses or ...
• t1568-003-dns-calculation by CyberStrikeus. Updated April 22, 2026. Adversaries may perform calculations on addresses returned in DNS results to determine which port and IP address to use for command and control, rather than relying on a predetermined port number o...
• t1574-001-dll by CyberStrikeus. Updated April 22, 2026. Adversaries may abuse dynamic-link library files (DLLs) in order to achieve persistence, escalate privileges, and evade defenses.
• t1583-001-domains by CyberStrikeus. Updated April 22, 2026. Adversaries may acquire domains that can be used during targeting.
• t1583-002-dns-server by CyberStrikeus. Updated April 22, 2026. Adversaries may set up their own Domain Name System (DNS) servers that can be used during targeting.
• t1584-001-domains by CyberStrikeus. Updated April 22, 2026. Adversaries may hijack domains and/or subdomains that can be used during targeting.
• t1584-002-dns-server by CyberStrikeus. Updated April 22, 2026. Adversaries may compromise third-party DNS servers that can be used during targeting.
• t1585-002-email-accounts by CyberStrikeus. Updated April 22, 2026. Adversaries may create email accounts that can be used during targeting.
• t1586-002-email-accounts by CyberStrikeus. Updated April 22, 2026. Adversaries may compromise email accounts that can be used during targeting.
• t1589-002-email-addresses by CyberStrikeus. Updated April 22, 2026. Adversaries may gather email addresses that can be used during targeting.
• t1590-001-domain-properties by CyberStrikeus. Updated April 22, 2026. Adversaries may gather information about the victim's network domain(s) that can be used during targeting.
• t1590-002-dns by CyberStrikeus. Updated April 22, 2026. Adversaries may gather information about the victim's DNS that can be used during targeting.
• t1590-005-ip-addresses by CyberStrikeus. Updated April 22, 2026. Adversaries may gather the victim's IP addresses that can be used during targeting.
• t1593-search-open-websitesdomains by CyberStrikeus. Updated April 22, 2026. Adversaries may search freely available websites and/or domains for information about victims that can be used during targeting.
• t1594-search-victim-owned-websites by CyberStrikeus. Updated April 22, 2026. Adversaries may search websites owned by the victim for information that can be used during targeting.
• t1596-001-dnspassive-dns by CyberStrikeus. Updated April 22, 2026. Adversaries may search DNS data for information about victims that can be used during targeting.
• t1596-002-whois by CyberStrikeus. Updated April 22, 2026. Adversaries may search public WHOIS data for information about victims that can be used during targeting.
• t1596-004-cdns by CyberStrikeus. Updated April 22, 2026. Adversaries may search content delivery network (CDN) data about victims that can be used during targeting.
• t1634-credentials-from-password-store by CyberStrikeus. Updated April 22, 2026. Adversaries may search common password storage locations to obtain user credentials.
• t1637-001-domain-generation-algorithms by CyberStrikeus. Updated April 22, 2026. Adversaries may use Domain Generation Algorithms (DGAs) to procedurally generate domain names for uses such as command and control communication or malicious application distribution.
• tactical-ddd by tech-leads-club. Updated April 28, 2026. Detects anemic domain models, validates and refactors them into rich domain models, and enforces tactical DDD patterns (Entities, Value Objects, Aggregates, Domain Services, Domain Events). Use when the user asks to validate, review, or check domain models or DDD code; detect anemia; refactor domain objects; improve encapsulation; or mentions terms like "anemic model", "rich domain", "aggregate", "value object", "domain event", "ubiquitous language", "is this good DDD", "does this follow DDD", or "check my domain". Do NOT use for module or service boundary design, architectural decomposition, strategic DDD context mapping, or code outside the domain layer (DTOs, controllers, infrastructure adapters).
• takeover by PentesterFlow. Updated June 1, 2026. Subdomain takeover playbook — sweep subdomains for dangling CNAMEs / NS records pointing at unclaimed third-party resources (GitHub Pages, S3, Heroku, Azure, Netlify, Shopify, ...), confirm with the engine's HTTP fingerprint, then prove impact by claiming the resource in scope. Use when enumerating subdomains for dangling CNAME/NS records pointing at unclaimed third-party services.
• taste by TryCaspian. Updated August 21, 2026. Domain-first store/port design for any codebase: product-shaped APIs, swappable backends, schema at boundaries, one vocabulary catalog (derive don’t re-author), no infrastructure names on the domain surface. Use when adding or refactoring persistence, cache, policy resolve, registries, or anything that might leak Redis/SQL/HTTP/SDK names into shared contracts. Taste: one fact one place, HOF as shared ritual not twin wrappers, call-site clarity, dumb engines, challenge early / cut ruthlessly, DX (cascading IntelliSense) as correctness, policy resolve → push-down query plan (not load-all-then-filter), no hardcodes when dims/rows already name the filter.
• the-pirate-bay by glittercowboy. Updated April 1, 2026. Search The Pirate Bay for torrents and extract magnet links via the apibay.org JSON API. Use when asked to "find a torrent", "search pirate bay", "get a magnet link", "download torrent", "find seeders", "top torrents", or any torrent search task. Can operate via CLI tool or direct API calls.
• tia-laender-bewertung-china-india-brazil-uk by Klotzkette. Updated July 1, 2026. Wenn es um TIA-Länderbewertung: UK, China, Indien, Brasilien in Datenschutzrecht geht: ordnet Sachverhalt, Norm, Beweislast, Gegenargumente und nächsten Schritt; liefert ein direkt nutzbares Arbeitsprodukt mit Prüfpunkten, Risiken und nächstem Schritt.
• tiktok-influencer-finder by gooseworks-ai. Updated June 17, 2026. Find TikTok influencers using Apify's Influencer Discovery Agent. Use when the user wants to discover TikTok creators or influencers in any niche.
• torch-domain-auction-bot by LeoYeAI. Updated May 5, 2026. Domain lending protocol on Solana. Domains become tokens. Tokens become collateral. Top holder controls the domain. Borrow SOL against your position -- but get liquidated and you lose the domain. Built on torchsdk v3.7.23 and the Torch Market protocol.
• trailing-slash by thedaviddias. Updated May 29, 2026. Use when applies to all static and dynamic websites. Use when auditing a site for duplicate content, setting up a new site, or after migrating platforms that changed URL conventions.
• true by olimorris. Updated September 11, 2026. A name that YAML reads as a boolean rather than a string
• ubiquitous-language by citypaul. Updated August 9, 2026. One ubiquitous language per bounded context, with a repository-declared glossary as the naming authority and explicit decisions for language changes. Covers the five-step language protocol (detect, propose, decide, record, rename), optional glossary-driven lint ratchets, and safe context-wide renames. Use when naming domain concepts, when a term is missing from or fights the glossary, when spotting synonyms or near-duplicates, when bootstrapping a glossary, or when renaming across a bounded context. For DDD building blocks see domain-driven-design; for acceptance-DSL vocabulary use the project's relevant installed skill.
• understand-domain by Egonex-AI. Updated July 17, 2026. Extract business domain knowledge from a codebase and generate an interactive domain flow graph. Works standalone (lightweight scan) or derives from an existing /understand knowledge graph.
• universal-media-downloader by cat-xierluo. Updated September 29, 2026. 输入各类视频网站/播客平台链接后，自动下载对应媒体文件并交付给用户。优先使用 yt-dlp 覆盖抖音(Douyin)、B站(Bilibili)、YouTube 等常见视频网站，也可用于可直接暴露音频地址的播客平台（如小宇宙单集链接）。当遇到 403/登录/年龄或地区限制时，支持使用 cookies.txt 重试；对于可能存在 DRM/加密或条款限制的平台（例如部分 Spotify 内容），应提示用户仅下载其有权保存的内容，并在不可下载时建议改用官方离线/导出渠道或提供原始 RSS/直链。抖音视频在 yt-dlp 撞签名墙（"Fresh cookies needed"）时自动三级 fallback：无登录直连 aweme.snssdk.com/v1/play → 本机浏览器游客 cookie（无需登录抖音）重跑 yt-dlp，全程无感；抖音图文笔记暂不支持自动下载，需手动处理。
• update-cask by isen-ng. Updated May 28, 2026. Create an update PR for an existing cask in homebrew-dotnet-sdk-versions. Use this skill whenever asked to manually bump a cask to a newer version, update sha256/url/version fields, force-update a cask the auto-updater missed, or open a PR to update a specific dotnet-sdk cask version.
• update-entities by duckduckgo. Updated March 4, 2026. How to add or remove domains from an entity (company/organization) in Tracker Radar. Use when modifying domain-to-entity mappings.
• url2ip by CoderWanFeng. Updated August 4, 2026. 将 URL 解析为对应的 IP 地址。当用户提到 URL 转 IP、域名解析 IP、查 IP 时使用。
• uspto-database by affaan-m. Updated May 17, 2026. 公式記録の検索、PatentSearch クエリ、TSDR チェック、譲渡データ、および再現可能な IP 調査ログのための USPTO 特許・商標データワークフロー。
• verify-email by gooseworks-ai. Updated June 17, 2026. Verify if an email address is valid and deliverable
• vhost-enumeration by uphiago. Updated July 25, 2026. Discover hidden virtual hosts via Host header fuzzing and SSL certificate parsing.
• virustotal by taracodlabs. Updated May 3, 2026. Check file hashes, URLs, domains, and IP addresses against 70+ antivirus engines and threat intelligence feeds via VirusTotal
• wb-preview-url-modifier by webiny. Updated July 24, 2026. Covers the PreviewUrlModifier extension point in Website Builder. Use when a user wants to inject custom query parameters into live preview URLs — e.g. signed tokens, tenant identifiers, feature flags — from their Webiny project. Handles the full registration pattern: implementing the interface, wiring via createFeature + RegisterFeature, and registering via webiny.config.tsx. Supports async modifier methods (e.g. remote token fetch).
• web-search by dirac-run. Updated August 3, 2026. Enable provider-native web search when current or externally verifiable information is needed
• web-search-jina by gooseworks-ai. Updated June 17, 2026. Jina Search - fast web search returning SERP results
• web-subdomain-takeover by BitterSecurity. Updated June 1, 2026. Subdomain takeover via dangling DNS/CNAME — GitHub Pages, Heroku, Azure, Fastly, Shopify, Netlify, Surge, Tumblr, Beanstalk, Zendesk, etc.
• wiki-retrieve by AgriciDaniel. Updated July 29, 2026. Build and query a vault-local contextual BM25 retrieval index with optional multilingual Nomic cosine reranking; use for retrieve, hybrid retrieval, BM25, rerank, contextual retrieval, chunk search, vault search, semantic search, find relevant passages, or retrieval diagnostics. Derived caches stay under .vault-meta, remote egress requires explicit consent, and unavailable reranking falls back deterministically.
• windows-ad by zhaoxuya520. Updated August 8, 2026. Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.
• wp-mass-recon by uphiago. Updated July 30, 2026. Batch WP recon: users, CORS, XMLRPC, leaks across domains.
• x-dns by x-cmd. Updated July 18, 2026. DNS configuration management utilities. View current DNS settings, list available DNS servers, and refresh DNS cache on the system. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
• zapper by BankrBot. Updated June 17, 2026. Placeholder for Zapper skill.