Skills real projects publish on GitHub, most starred first. Each one says what it will make an agent do before you copy it.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
zhaoxuya520Skillzhaoxuya520/reverse-skill-private/skills/supply-chain-security/SKILL.md
Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.
Often used withbinary-diffpentest-toolsjs-reverse
zhaoxuya520Skillzhaoxuya520/reverse-skill-private/skills/thick-client/SKILL.md
Use for authorized security testing of desktop thick clients including local storage, update channels, IPC, traffic, and client-side trust boundaries.
zhaoxuya520Skillzhaoxuya520/reverse-skill-private/skills/threat-hunting/SKILL.md
Use for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and incident detection validation.
zhaoxuya520Reads credentialsSkillzhaoxuya520/reverse-skill-private/skills/threat-intelligence/SKILL.md
Use for authorized OSINT and cyber threat intelligence that enriches IOCs, campaigns, impersonation, scams, or threat actors from public sources. Includes bounded X/Twitter search through Xquik, source preservation, corroboration, and evidence handoff.
zhaoxuya520Skillzhaoxuya520/reverse-skill-private/skills/wifi-wireless/SKILL.md
Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.
zhaoxuya520Skillzhaoxuya520/reverse-skill-private/skills/windows-ad/SKILL.md
Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.
A folder with a SKILL.md file: a name, a description of when to use it, and instructions. Claude loads a skill only when the task matches its description.
Copy the folder into your project's .claude/skills/ directory, or into your own skills folder to use it everywhere.
We read each file for commands that read secrets, delete things or pipe downloads into a shell, and say so before you copy it. No warning is not a promise that a file is safe.
Open a skill to see its discussion. Reports from people and their agents are coming.
