Skills for Claude Code

These skills are associated with Claude Code because their author either published them under the harness's install path or tagged the repository for it on GitHub. Both are statements of intent by the author.

Neither is a test result. We have not run any of these with and without the skill enabled, so nothing here tells you whether a skill improves output, what it adds in tokens, or whether it duplicates behaviour the harness already has. When we run that comparison, the numbers will appear here with the task, the versions and the budget.

Worked on in the last 90 days (60)

Someone pushed a commit recently. This is the shortlist worth trying first.

yusufkaraaslan-skill-seekers-golden-word — last commit 2026-08-03
Use when testing the word golden build
yusufkaraaslan-skill-seekers-skill-builder — last commit 2026-08-03
Automatically detect source types and build AI skills using Skill Seekers. Use when the user wants to create skills from documentation, rep…
yusufkaraaslan-skill-seekers-skill-builder-dc3bec — last commit 2026-08-03
Automatically detect source types and build AI skills using Skill Seekers. Use when the user wants to create skills from documentation, rep…
elementalsouls-claude-bughunter-apk-redteam-pipeline — last commit 2026-08-03
End-to-end Android APK red-team pipeline — automated APK acquisition (Play Store + apkpure + apkmirror fallback), jadx decompilation, secre…
elementalsouls-claude-bughunter-bb-local-toolkit — last commit 2026-08-03
Local-tooling companion to the bug-bounty orchestrator — carries the SAME complete bug-bounty workflow, but reach for THIS variant when you…
elementalsouls-claude-bughunter-bb-methodology — last commit 2026-08-03
Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next. Master orchestrator…
elementalsouls-claude-bughunter-bug-bounty — last commit 2026-08-03
Complete bug bounty workflow — recon (subdomain enumeration, asset discovery, fingerprinting, HackerOne scope, source code audit), pre-hunt…
elementalsouls-claude-bughunter-bugcrowd-reporting — last commit 2026-08-03
Bugcrowd-specific reporting tactics complementing report-writing: VRT category search-and-fallback strategy when no exact match exists, man…
elementalsouls-claude-bughunter-cloud-iam-deep — last commit 2026-08-03
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-credential-discovery privilege ana…
elementalsouls-claude-bughunter-enterprise-vpn-attack — last commit 2026-08-03
External SSL VPN / remote-access appliance attack matrix — Cisco ASA/AnyConnect, Fortinet FortiGate/FortiOS, Citrix NetScaler/ADC, Palo Alt…
elementalsouls-claude-bughunter-evidence-hygiene — last commit 2026-08-03
Evidence-capture and PoC-redaction discipline for bug-bounty submissions: cookie redaction protocol (which fields to mask, Preview annotati…
elementalsouls-claude-bughunter-hunt-api-misconfig — last commit 2026-08-03
Hunt API security misconfiguration — mass assignment, prototype pollution, HTTP verb tampering. Mass assignment: send {is_admin:true, role:…
elementalsouls-claude-bughunter-hunt-aspnet — last commit 2026-08-03
Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass anti-patt…
elementalsouls-claude-bughunter-hunt-ato — last commit 2026-08-03
Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects tok…
elementalsouls-claude-bughunter-hunt-auth-bypass — last commit 2026-08-03
Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterp…
elementalsouls-claude-bughunter-hunt-brute-force — last commit 2026-08-03
Hunt Missing/Weak Rate Limiting — login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token brute, credential stuffing,…
elementalsouls-claude-bughunter-hunt-business-logic — last commit 2026-08-03
Hunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-stacking (Instacart, Stripe,…
elementalsouls-claude-bughunter-hunt-cache-poison — last commit 2026-08-03
Hunting skill for cache poison vulnerabilities. Built from 10 public bug bounty reports including X-Forwarded-Host poisoning, X-HTTP-Method…
elementalsouls-claude-bughunter-hunt-captcha-bypass — last commit 2026-08-03
Hunt CAPTCHA Bypass — 6 distinct patterns: (1) CAPTCHA field simply omitted from the request (server-side validation absent), (2) CAPTCHA t…
elementalsouls-claude-bughunter-hunt-cicd — last commit 2026-08-03
Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted r…
elementalsouls-claude-bughunter-hunt-clickjacking — last commit 2026-08-03
Hunt Clickjacking — missing X-Frame-Options / CSP frame-ancestors lets an attacker embed the target page in an invisible iframe and trick v…
elementalsouls-claude-bughunter-hunt-cloud-misconfig — last commit 2026-08-03
Hunt cloud / infrastructure misconfigurations. AWS: public S3 buckets (s3:GetObject anonymous), permissive bucket policies (PutObjectAcl pu…
elementalsouls-claude-bughunter-hunt-cors — last commit 2026-08-03
Hunt CORS Misconfiguration — origin-reflection with credentials, null-origin trust, subdomain-regex bypass (unanchored vs unescaped-dot vs…
elementalsouls-claude-bughunter-hunt-csrf — last commit 2026-08-03
Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain…
elementalsouls-claude-bughunter-hunt-deserialization — last commit 2026-08-03
Hunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), Python pickle RCE, .NET BinaryFormatter, Rub…
elementalsouls-claude-bughunter-hunt-dispatch — last commit 2026-08-03
Skill-set loader for /hunt orchestrator. Fingerprints the target, picks the right platform attack skills, and loads the Red Team or WAPT sk…
elementalsouls-claude-bughunter-hunt-dom — last commit 2026-08-03
Hunt client-side DOM vulnerabilities — DOM Clobbering (overwrite JS globals via HTML injection), PostMessage hijacking (missing origin chec…
elementalsouls-claude-bughunter-hunt-exceptional-conditions — last commit 2026-08-03
Hunt mishandling of exceptional conditions — feed an endpoint malformed/unexpected input (wrong type, broken JSON, oversized field, null by…
elementalsouls-claude-bughunter-hunt-file-upload — last commit 2026-08-03
Hunt file upload bugs — RCE via webshell, XSS via SVG/HTML, SSRF via XXE in DOCX, path traversal via filename. Bypass tables (10 techniques…
elementalsouls-claude-bughunter-hunt-forgot-password — last commit 2026-08-03
Hunt Forgot Password / Account Recovery Authentication Flaws — 5 distinct patterns: (1) username enumeration via different responses for va…
elementalsouls-claude-bughunter-hunt-graphql — last commit 2026-08-03
Hunting skill for graphql vulnerabilities. Built from 12 public bug bounty reports across IDOR via node() / GID, mutation IDOR including AI…
elementalsouls-claude-bughunter-hunt-grpc — last commit 2026-08-03
Hunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication / metadata-stripping on inte…
elementalsouls-claude-bughunter-hunt-host-header — last commit 2026-08-03
Hunt Host Header Injection — password reset poisoning → ATO, web cache poisoning via unkeyed Host/X-Forwarded-Host, routing-based SSRF (Hos…
juneyaooo-gpt-image2-ppt-skills-gpt-image2-ppt — last commit 2026-08-02
Generate visually striking PPT slides via OpenAI's gpt-image-2 -- use any style in styles/<collection>/STYLE_ID.md or mimic a user-supplied…
davepoon-buildwithclaude-activecampaign-automation — last commit 2026-08-02
Automate ActiveCampaign tasks via Rube MCP (Composio): manage contacts, tags, list subscriptions, automation enrollment, and tasks. Always…
davepoon-buildwithclaude-agent-analytics — last commit 2026-08-02
Analytics your AI agent can actually use. Track, analyze, run A/B experiments, and optimize across all your projects via CLI. Includes a gr…
davepoon-buildwithclaude-airtable-automation — last commit 2026-08-02
Automate Airtable tasks via Rube MCP (Composio): records, bases, tables, fields, views. Always search tools first for current schemas.
davepoon-buildwithclaude-amplitude-automation — last commit 2026-08-02
Automate Amplitude tasks via Rube MCP (Composio): events, user activity, cohorts, user identification. Always search tools first for curren…
davepoon-buildwithclaude-anti-ui-slop — last commit 2026-08-02
Stop coding agents from shipping generic UI. Use UIZZE's 800,000+ real web and iOS screens to build product-specific interfaces, define a d…
davepoon-buildwithclaude-artifacts-builder — last commit 2026-08-02
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS…
davepoon-buildwithclaude-asana-automation — last commit 2026-08-02
Automate Asana tasks via Rube MCP (Composio): tasks, projects, sections, teams, workspaces. Always search tools first for current schemas.
davepoon-buildwithclaude-aurakit — last commit 2026-08-02
Sonnet Amplified fullstack engine. 34 modes, SEC-01~15 OWASP security, 13 runtime hooks, 75% token reduction. Install: npx @smorky85/aurakit
davepoon-buildwithclaude-bamboohr-automation — last commit 2026-08-02
Automate BambooHR tasks via Rube MCP (Composio): employees, time-off, benefits, dependents, employee updates. Always search tools first for…
davepoon-buildwithclaude-basecamp-automation — last commit 2026-08-02
Automate Basecamp project management, to-dos, messages, people, and to-do list organization via Rube MCP (Composio). Always search tools fi…
davepoon-buildwithclaude-bitbucket-automation — last commit 2026-08-02
Automate Bitbucket repositories, pull requests, branches, issues, and workspace management via Rube MCP (Composio). Always search tools fir…
davepoon-buildwithclaude-box-automation — last commit 2026-08-02
Automate Box cloud storage operations including file upload/download, search, folder management, sharing, collaborations, and metadata quer…
davepoon-buildwithclaude-brand-guidelines — last commit 2026-08-02
Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Us…
davepoon-buildwithclaude-brevo-automation — last commit 2026-08-02
Automate Brevo (Sendinblue) tasks via Rube MCP (Composio): manage email campaigns, create/edit templates, track senders, and monitor campai…
davepoon-buildwithclaude-cal-com-automation — last commit 2026-08-02
Automate Cal.com tasks via Rube MCP (Composio): manage bookings, check availability, configure webhooks, and handle teams. Always search to…
davepoon-buildwithclaude-calendly-automation — last commit 2026-08-02
Automate Calendly scheduling, event management, invitee tracking, availability checks, and organization administration via Rube MCP (Compos…
davepoon-buildwithclaude-canva-automation — last commit 2026-08-02
Automate Canva tasks via Rube MCP (Composio): designs, exports, folders, brand templates, autofill. Always search tools first for current s…
davepoon-buildwithclaude-canvas-design — last commit 2026-08-02
Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a po…
davepoon-buildwithclaude-close — last commit 2026-08-02
Commit the session to durable vault memory and prepare a clean resume point
davepoon-buildwithclaude-code-health — last commit 2026-08-02
Scans the codebase for dead code, tech debt, outdated dependencies, and code quality issues. Delegates to the Centinela (QA) agent.
davepoon-buildwithclaude-feature-spec — last commit 2026-08-02
Creates a complete product feature specification with acceptance criteria, scope, dependencies, and risks. Delegates to the Prometeo (PM) a…
davepoon-buildwithclaude-implement-feature — last commit 2026-08-02
Implements a feature from its specification. Reads the spec, designs architecture, writes code and tests. Delegates to the Forja (Dev) agen…
davepoon-buildwithclaude-open — last commit 2026-08-02
Boot the session, load context from the vault, and surface what matters
davepoon-buildwithclaude-release-check — last commit 2026-08-02
Pre-release verification checklist. Validates features, tests, docs, security, and quality gates before shipping. Delegates to the Centinel…
davepoon-buildwithclaude-review-findings — last commit 2026-08-02
Addresses and fixes findings from a QA code review. Reads the review report, fixes critical and warning issues, and prepares for re-verific…
davepoon-buildwithclaude-security-audit — last commit 2026-08-02
Deep security audit covering OWASP Top 10, authentication, authorization, data protection, dependency vulnerabilities, and secrets scanning…

Page 13 of 24

How this page is ordered

Entries are grouped by whether anyone is still working on them, using the date of the most recent push to the repository. They are not ordered by stars, because a star is a bookmark somebody left once and never took back.

Where we have not checked an entry yet, it says so rather than being mixed in with the verified ones.