agentic-awesome-skills 16.0.0 → 16.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (291) hide show
  1. package/README.md +15 -12
  2. package/data/aas-v1/catalog-manifest.v1.json +1 -1
  3. package/data/aas-v1/skill-content-index.v1.json +1 -1
  4. package/data/aas-v1/skill-content.v1.ndjson +51 -3
  5. package/data/catalog.json +1554 -5
  6. package/data/plugin-compatibility.json +915 -3
  7. package/data/skills_index.json +1281 -3
  8. package/package.json +2 -2
  9. package/skills/api-rate-limit-handler/SKILL.md +282 -0
  10. package/skills/api-security/SKILL.md +205 -0
  11. package/skills/api-security/references/jwt-oauth-testing.md +123 -0
  12. package/skills/api-security/references/rest-graphql-testing.md +137 -0
  13. package/skills/apk-reverse/SKILL.md +438 -0
  14. package/skills/apk-reverse/references/android-advanced.md +365 -0
  15. package/skills/apk-reverse/references/apk-security-checklist.md +230 -0
  16. package/skills/apk-reverse/references/frida-bypass-kit.md +70 -0
  17. package/skills/apk-reverse/references/frida-cookbook.md +472 -0
  18. package/skills/attack-chain/SKILL.md +185 -0
  19. package/skills/attack-chain/references/attack-playbooks.md +126 -0
  20. package/skills/attack-chain/references/evasion-cheatsheet.md +133 -0
  21. package/skills/attack-chain/references/lifecycle-checklist.md +37 -0
  22. package/skills/attack-chain/references/phases.md +490 -0
  23. package/skills/binary-diff/SKILL.md +320 -0
  24. package/skills/binary-diff/references/prompt-template.md +173 -0
  25. package/skills/browser-extension-reverse/SKILL.md +99 -0
  26. package/skills/browser-extension-reverse/references/extension-analysis.md +10 -0
  27. package/skills/case-review/SKILL.md +167 -0
  28. package/skills/cloud-k8s/SKILL.md +124 -0
  29. package/skills/cloud-k8s/references/k8s-cloud-checklist.md +16 -0
  30. package/skills/code-audit/SKILL.md +92 -0
  31. package/skills/code-audit/references/sast-review-checklist.md +10 -0
  32. package/skills/database-security/SKILL.md +81 -0
  33. package/skills/database-security/references/db-misconfig-checklist.md +9 -0
  34. package/skills/diagram-generator/SKILL.md +199 -0
  35. package/skills/diagram-generator/references/README.md +3 -0
  36. package/skills/diagram-generator/references/diagram-patterns.md +254 -0
  37. package/skills/digital-forensics/SKILL.md +93 -0
  38. package/skills/digital-forensics/references/forensics-triage.md +10 -0
  39. package/skills/docs-generator/SKILL.md +197 -0
  40. package/skills/docs-generator/references/security-report-templates.md +348 -0
  41. package/skills/docs-generator/references/templates.md +102 -0
  42. package/skills/docs-generator/references/vendor-report-rules.md +263 -0
  43. package/skills/dotnet-reverse/SKILL.md +197 -0
  44. package/skills/dotnet-reverse/references/common-workflow.md +171 -0
  45. package/skills/dotnet-reverse/references/obfuscators.md +145 -0
  46. package/skills/dotnet-reverse/references/sharp-tools.md +164 -0
  47. package/skills/edr-bypass-re/SKILL.md +248 -0
  48. package/skills/edr-bypass-re/references/hook-survey.md +226 -0
  49. package/skills/edr-bypass-re/references/telemetry-blinding.md +346 -0
  50. package/skills/edr-bypass-re/references/unhook-techniques.md +338 -0
  51. package/skills/email-security/SKILL.md +81 -0
  52. package/skills/email-security/references/email-auth-checklist.md +8 -0
  53. package/skills/firmware-pentest/SKILL.md +381 -0
  54. package/skills/firmware-pentest/references/emba-automated-analysis.md +192 -0
  55. package/skills/firmware-pentest/references/emulation-and-fuzz.md +337 -0
  56. package/skills/firmware-pentest/references/extraction-methodology.md +285 -0
  57. package/skills/ghidra-reverse/SKILL.md +98 -0
  58. package/skills/ghidra-reverse/references/ghidra-cheatsheet.md +12 -0
  59. package/skills/go-rust-reverse/SKILL.md +82 -0
  60. package/skills/go-rust-reverse/references/go-rust-notes.md +5 -0
  61. package/skills/hardware-security/SKILL.md +80 -0
  62. package/skills/hardware-security/references/debug-interface-triage.md +7 -0
  63. package/skills/ida-reverse/SKILL.md +401 -0
  64. package/skills/ida-reverse/references/LOCAL-SETUP.md +66 -0
  65. package/skills/ida-reverse/references/ida-mcp-cheatsheet.md +515 -0
  66. package/skills/identity-federation/SKILL.md +81 -0
  67. package/skills/identity-federation/references/sso-flow-checklist.md +9 -0
  68. package/skills/instructree/SKILL.md +94 -0
  69. package/skills/js-reverse/SKILL.md +239 -0
  70. package/skills/js-reverse/references/ast-deobfuscation.md +3 -0
  71. package/skills/js-reverse/references/automation-entry.md +12 -0
  72. package/skills/js-reverse/references/env-patching.md +6 -0
  73. package/skills/js-reverse/references/fallbacks.md +8 -0
  74. package/skills/js-reverse/references/instrumentation.md +9 -0
  75. package/skills/js-reverse/references/local-rebuild.md +11 -0
  76. package/skills/js-reverse/references/mcp-task-template.md +30 -0
  77. package/skills/js-reverse/references/node-env-rebuild.md +9 -0
  78. package/skills/js-reverse/references/output-contract.md +9 -0
  79. package/skills/js-reverse/references/task-artifacts.md +11 -0
  80. package/skills/js-reverse/references/task-input-template.md +11 -0
  81. package/skills/js-reverse/references/tool-defaults.md +7 -0
  82. package/skills/llm-security/SKILL.md +160 -0
  83. package/skills/llm-security/references/agent-obedience-engineering.md +243 -0
  84. package/skills/llm-security/references/agent-security-testing.md +116 -0
  85. package/skills/llm-security/references/owasp-llm-top10.md +48 -0
  86. package/skills/llm-security/references/prompt-injection-methodology.md +107 -0
  87. package/skills/loki-mode/examples/todo-app-generated/backend/package-lock.json +4 -4
  88. package/skills/loki-mode/examples/todo-app-generated/backend/package.json +1 -1
  89. package/skills/lore/SKILL.md +104 -298
  90. package/skills/lore/references/audit-template.md +21 -4
  91. package/skills/lore/references/compatibility.md +51 -121
  92. package/skills/lore/references/config.md +22 -23
  93. package/skills/lore/references/entry-format.md +33 -3
  94. package/skills/lore/references/history-command.md +98 -2
  95. package/skills/lore/references/platform-mirrors.md +45 -16
  96. package/skills/lore/references/stale-new-markers.md +10 -8
  97. package/skills/lore/references/summary-template.md +8 -1
  98. package/skills/lore/references/workflows.md +192 -0
  99. package/skills/lore/scripts/README.md +14 -13
  100. package/skills/lore/scripts/README.zh-CN.md +14 -13
  101. package/skills/lore/scripts/find_duplicates.py +14 -4
  102. package/skills/lore/scripts/find_stale.py +68 -16
  103. package/skills/lore/scripts/history.py +235 -23
  104. package/skills/lore/scripts/id_hash.py +7 -4
  105. package/skills/lore/scripts/list_entries.py +82 -13
  106. package/skills/macos-reverse/SKILL.md +85 -0
  107. package/skills/macos-reverse/references/macho-triage.md +10 -0
  108. package/skills/malware-analysis/SKILL.md +311 -0
  109. package/skills/malware-analysis/references/anti-analysis-techniques.md +205 -0
  110. package/skills/malware-analysis/references/sandbox-orchestration.md +204 -0
  111. package/skills/malware-analysis/references/yara-sigma-rules.md +232 -0
  112. package/skills/mobile-reverse/SKILL.md +222 -0
  113. package/skills/mobile-reverse/references/anti-detection-bypass.md +182 -0
  114. package/skills/mobile-reverse/references/frida-objection-deep.md +218 -0
  115. package/skills/mobile-reverse/references/ios-reverse-guide.md +177 -0
  116. package/skills/muapi-media/SKILL.md +311 -0
  117. package/skills/ot-ics/SKILL.md +117 -0
  118. package/skills/ot-ics/references/ot-safe-assessment.md +10 -0
  119. package/skills/patch-diff-exploit/SKILL.md +278 -0
  120. package/skills/patch-diff-exploit/references/diff-tools-comparison.md +271 -0
  121. package/skills/patch-diff-exploit/references/patch-tuesday-workflow.md +253 -0
  122. package/skills/patch-diff-exploit/references/root-cause-and-poc.md +198 -0
  123. package/skills/pentest-tools/SKILL.md +346 -0
  124. package/skills/pentest-tools/references/ai-pentest-agents.md +148 -0
  125. package/skills/pentest-tools/references/ai-pentesting-landscape-2026.md +73 -0
  126. package/skills/pentest-tools/references/automation-loop-pattern.md +153 -0
  127. package/skills/pentest-tools/references/awesome-pentest-digest.md +175 -0
  128. package/skills/pentest-tools/references/burpsuite-mcp-guide.md +769 -0
  129. package/skills/pentest-tools/references/client-side-lab-playbook.md +155 -0
  130. package/skills/pentest-tools/references/kali-mcp-ecosystem.md +119 -0
  131. package/skills/pentest-tools/references/msf-protocol.md +169 -0
  132. package/skills/pentest-tools/references/network-attack-defense.md +350 -0
  133. package/skills/pentest-tools/references/nuclei-guide-2026.md +157 -0
  134. package/skills/pentest-tools/references/payloads.md +32 -0
  135. package/skills/pentest-tools/references/pentest-ai-agents-matrix.md +117 -0
  136. package/skills/pentest-tools/references/pentest-loop.md +270 -0
  137. package/skills/pentest-tools/references/recon-pipeline.md +154 -0
  138. package/skills/pentest-tools/references/templates/findings.md +21 -0
  139. package/skills/pentest-tools/references/templates/progress.md +17 -0
  140. package/skills/pentest-tools/references/templates/rules.md +35 -0
  141. package/skills/pentest-tools/references/templates/scope.md +29 -0
  142. package/skills/pentest-tools/references/templates/task_plan.md +27 -0
  143. package/skills/pentest-tools/references/web-attack-cheatsheet.md +387 -0
  144. package/skills/pentest-tools/src-hunter/SKILL.md +243 -0
  145. package/skills/pentest-tools/src-hunter/references/README.en.md +115 -0
  146. package/skills/pentest-tools/src-hunter/references/README.md +148 -0
  147. package/skills/pentest-tools/src-hunter/references/dictionaries/00-index.md +44 -0
  148. package/skills/pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md +515 -0
  149. package/skills/pentest-tools/src-hunter/references/dictionaries/default-credentials-cn.md +274 -0
  150. package/skills/pentest-tools/src-hunter/references/industry/00-index.md +66 -0
  151. package/skills/pentest-tools/src-hunter/references/industry/banking-finance.md +338 -0
  152. package/skills/pentest-tools/src-hunter/references/industry/telecom-isp.md +315 -0
  153. package/skills/pentest-tools/src-hunter/references/methodology/00-index.md +68 -0
  154. package/skills/pentest-tools/src-hunter/references/methodology/01-attack-priority.md +143 -0
  155. package/skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md +357 -0
  156. package/skills/pentest-tools/src-hunter/references/methodology/03-evidence-discipline.md +205 -0
  157. package/skills/pentest-tools/src-hunter/references/methodology/04-control-gap-hunting.md +238 -0
  158. package/skills/pentest-tools/src-hunter/references/methodology/05-srctimebox-priority.md +161 -0
  159. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/adcs/346/224/273/345/207/273.md +254 -0
  160. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange/346/224/273/345/207/273.md +254 -0
  161. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/sharepoint/346/224/273/345/207/273.md +113 -0
  162. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//344/277/241/346/201/257/346/224/266/351/233/206.md +947 -0
  163. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//345/205/215/346/235/200/344/270/216/350/247/204/351/201/277.md +780 -0
  164. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//345/207/255/350/257/201/347/252/203/345/217/226.md +1259 -0
  165. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//345/237/237/346/270/227/351/200/217/346/224/273/345/207/273.md +753 -0
  166. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//346/235/203/351/231/220/346/217/220/345/215/207.md +819 -0
  167. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//346/235/203/351/231/220/347/273/264/346/214/201.md +577 -0
  168. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//346/250/252/345/220/221/347/247/273/345/212/250.md +838 -0
  169. package/skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//351/232/247/351/201/223/344/273/243/347/220/206.md +604 -0
  170. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ai/345/256/211/345/205/250.md +698 -0
  171. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/api/345/256/211/345/205/250.md +1935 -0
  172. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/csrf/350/267/250/347/253/231/350/257/267/346/261/202/344/274/252/351/200/240.md +952 -0
  173. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/jwt/345/256/211/345/205/250.md +496 -0
  174. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi/346/226/207/344/273/266/345/214/205/345/220/253.md +1365 -0
  175. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce/350/277/234/347/250/213/344/273/243/347/240/201/346/211/247/350/241/214.md +1329 -0
  176. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/sql-nosql/346/263/250/345/205/245.md +1924 -0
  177. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssrf/346/234/215/345/212/241/347/253/257/350/257/267/346/261/202/344/274/252/351/200/240.md +1256 -0
  178. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti/346/250/241/346/235/277/346/263/250/345/205/245.md +1151 -0
  179. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/websocket/345/256/211/345/205/250.md +487 -0
  180. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss/350/267/250/347/253/231/350/204/232/346/234/254.md +1465 -0
  181. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xxe/345/256/236/344/275/223/346/263/250/345/205/245.md +815 -0
  182. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//344/270/232/345/212/241/351/200/273/350/276/221/346/274/217/346/264/236.md +594 -0
  183. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//344/272/221/345/256/211/345/205/250/346/274/217/346/264/236.md +561 -0
  184. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//344/276/233/345/272/224/351/223/276/346/224/273/345/207/273.md +399 -0
  185. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//345/216/237/345/236/213/351/223/276/346/261/241/346/237/223.md +401 -0
  186. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//345/274/200/346/224/276/351/207/215/345/256/232/345/220/221.md +396 -0
  187. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//346/226/207/344/273/266/346/274/217/346/264/236.md +0 -0
  188. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//346/241/206/346/236/266/346/274/217/346/264/236.md +2304 -0
  189. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//347/202/271/345/207/273/345/212/253/346/214/201.md +339 -0
  190. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//347/274/223/345/255/230/344/270/216cdn/345/256/211/345/205/250.md +497 -0
  191. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//350/256/244/350/257/201/346/274/217/346/264/236.md +1778 -0
  192. package/skills/pentest-tools/src-hunter/references/payloader/by-category/web//350/257/267/346/261/202/350/265/260/347/247/201.md +854 -0
  193. package/skills/pentest-tools/src-hunter/references/payloader/index.md +69 -0
  194. package/skills/pentest-tools/src-hunter/references/payloader/tools/web/346/270/227/351/200/217.md +662 -0
  195. package/skills/pentest-tools/src-hunter/references/payloader/tools/windows/346/270/227/351/200/217.md +100 -0
  196. package/skills/pentest-tools/src-hunter/references/payloader/tools//344/277/241/346/201/257/346/224/266/351/233/206.md +852 -0
  197. package/skills/pentest-tools/src-hunter/references/payloader/tools//345/206/205/347/275/221/346/270/227/351/200/217.md +873 -0
  198. package/skills/pentest-tools/src-hunter/references/payloader/tools//345/207/255/350/257/201/347/252/203/345/217/226.md +186 -0
  199. package/skills/pentest-tools/src-hunter/references/payloader/tools//345/237/237/346/270/227/351/200/217.md +50 -0
  200. package/skills/pentest-tools/src-hunter/references/payloader/tools//345/257/206/347/240/201/346/224/273/345/207/273.md +462 -0
  201. package/skills/pentest-tools/src-hunter/references/payloader/tools//346/235/203/351/231/220/346/217/220/345/215/207.md +168 -0
  202. package/skills/pentest-tools/src-hunter/references/payloader/tools//346/274/217/346/264/236/345/210/251/347/224/250.md +445 -0
  203. package/skills/pentest-tools/src-hunter/references/payloader/tools//347/263/273/347/273/237/345/221/275/344/273/244.md +410 -0
  204. package/skills/pentest-tools/src-hunter/references/payloader/tools//347/272/242/351/230/237/345/267/245/345/205/267.md +64 -0
  205. package/skills/pentest-tools/src-hunter/references/payloader/tools//347/274/226/347/240/201/350/247/243/347/240/201.md +226 -0
  206. package/skills/pentest-tools/src-hunter/references/payloader/tools//351/232/247/351/201/223/344/273/243/347/220/206.md +84 -0
  207. package/skills/pentest-tools/src-hunter/references/payloader/waf-bypass.md +6504 -0
  208. package/skills/pentest-tools/src-hunter/references/playbooks/00-index.md +57 -0
  209. package/skills/pentest-tools/src-hunter/references/playbooks/api-rest.md +2050 -0
  210. package/skills/pentest-tools/src-hunter/references/playbooks/arbitrary-x-authz.md +481 -0
  211. package/skills/pentest-tools/src-hunter/references/playbooks/dos.md +615 -0
  212. package/skills/pentest-tools/src-hunter/references/playbooks/file-upload.md +1365 -0
  213. package/skills/pentest-tools/src-hunter/references/playbooks/graphql.md +253 -0
  214. package/skills/pentest-tools/src-hunter/references/playbooks/http-smuggling.md +924 -0
  215. package/skills/pentest-tools/src-hunter/references/playbooks/info-disclosure.md +432 -0
  216. package/skills/pentest-tools/src-hunter/references/playbooks/intranet-postexp.md +4845 -0
  217. package/skills/pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.md +1394 -0
  218. package/skills/pentest-tools/src-hunter/references/playbooks/logic-flaws.md +1796 -0
  219. package/skills/pentest-tools/src-hunter/references/playbooks/mobile.md +397 -0
  220. package/skills/pentest-tools/src-hunter/references/playbooks/oauth-saml-jwt.md +2504 -0
  221. package/skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md +1297 -0
  222. package/skills/pentest-tools/src-hunter/references/playbooks/race-conditions.md +207 -0
  223. package/skills/pentest-tools/src-hunter/references/playbooks/rce.md +4829 -0
  224. package/skills/pentest-tools/src-hunter/references/playbooks/sqli.md +1620 -0
  225. package/skills/pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md +2098 -0
  226. package/skills/pentest-tools/src-hunter/references/playbooks/unauth-access.md +330 -0
  227. package/skills/pentest-tools/src-hunter/references/playbooks/xss.md +1159 -0
  228. package/skills/pentest-tools/src-hunter/references/templates/report-submission.md +346 -0
  229. package/skills/pentest-tools/src-hunter/references/tools/mcp-jshook.md +174 -0
  230. package/skills/poka-yoke/SKILL.md +172 -0
  231. package/skills/project-state-governor/SKILL.md +1 -1
  232. package/skills/project-state-governor/references/project-state-schema.md +1 -1
  233. package/skills/protocol-reverse/SKILL.md +108 -0
  234. package/skills/protocol-reverse/references/protocol-workflow.md +29 -0
  235. package/skills/pwn-chain/SKILL.md +209 -0
  236. package/skills/pwn-chain/references/heap-pwn.md +283 -0
  237. package/skills/pwn-chain/references/kernel-pwn.md +370 -0
  238. package/skills/pwn-chain/references/stack-pwn.md +312 -0
  239. package/skills/radare2/SKILL.md +460 -0
  240. package/skills/radare2/references/cheatsheet.md +129 -0
  241. package/skills/radio-sdr/SKILL.md +77 -0
  242. package/skills/radio-sdr/references/sdr-lab-rules.md +6 -0
  243. package/skills/reverse-browser-automation/SKILL.md +249 -0
  244. package/skills/reverse-browser-automation/references/playwright-cheatsheet.md +425 -0
  245. package/skills/reverse-engineering/SKILL.md +213 -0
  246. package/skills/reverse-engineering/dsl-vm-reverse/SKILL.md +388 -0
  247. package/skills/reverse-engineering/references/ai-assisted-re.md +149 -0
  248. package/skills/reverse-engineering/references/anti-analysis.md +836 -0
  249. package/skills/reverse-engineering/references/awesome-re-resources.md +135 -0
  250. package/skills/reverse-engineering/references/crypto-decode-tools.md +220 -0
  251. package/skills/reverse-engineering/references/elf-analysis.md +296 -0
  252. package/skills/reverse-engineering/references/field-notes.md +540 -0
  253. package/skills/reverse-engineering/references/go-reverse.md +240 -0
  254. package/skills/reverse-engineering/references/kernel-driver-reverse.md +298 -0
  255. package/skills/reverse-engineering/references/languages-compiled.md +587 -0
  256. package/skills/reverse-engineering/references/languages-platforms.md +486 -0
  257. package/skills/reverse-engineering/references/languages.md +499 -0
  258. package/skills/reverse-engineering/references/nonpe-format-cookbook.md +301 -0
  259. package/skills/reverse-engineering/references/ollvm-deobfuscation.md +501 -0
  260. package/skills/reverse-engineering/references/patterns-ctf-2.md +397 -0
  261. package/skills/reverse-engineering/references/patterns-ctf-3.md +719 -0
  262. package/skills/reverse-engineering/references/patterns-ctf.md +532 -0
  263. package/skills/reverse-engineering/references/patterns.md +801 -0
  264. package/skills/reverse-engineering/references/platforms-hardware.md +304 -0
  265. package/skills/reverse-engineering/references/platforms.md +442 -0
  266. package/skills/reverse-engineering/references/re-agent-workflow.md +240 -0
  267. package/skills/reverse-engineering/references/tools-advanced.md +822 -0
  268. package/skills/reverse-engineering/references/tools-dynamic.md +846 -0
  269. package/skills/reverse-engineering/references/tools.md +546 -0
  270. package/skills/spec-driven-loop/SKILL.md +203 -0
  271. package/skills/spec-driven-loop/references/agent-and-judge-contracts.md +120 -0
  272. package/skills/spec-driven-loop/references/document-templates.md +184 -0
  273. package/skills/supply-chain-security/SKILL.md +180 -0
  274. package/skills/supply-chain-security/references/cicd-pipeline-security.md +137 -0
  275. package/skills/supply-chain-security/references/sbom-sca-methodology.md +74 -0
  276. package/skills/thick-client/SKILL.md +104 -0
  277. package/skills/thick-client/references/thick-client-checklist.md +9 -0
  278. package/skills/threat-hunting/SKILL.md +94 -0
  279. package/skills/threat-hunting/references/hunting-loop.md +5 -0
  280. package/skills/threat-intelligence/SKILL.md +176 -0
  281. package/skills/threat-intelligence/references/x-public-intelligence.md +93 -0
  282. package/skills/tree-ring-memory/SKILL.md +29 -9
  283. package/skills/wifi-wireless/SKILL.md +80 -0
  284. package/skills/wifi-wireless/references/wireless-lab-rules.md +6 -0
  285. package/skills/windows-ad/SKILL.md +109 -0
  286. package/skills/windows-ad/references/ad-attack-paths.md +12 -0
  287. package/skills_index.json +1281 -3
  288. package/skills/lore/README.md +0 -386
  289. package/skills/lore/README.zh-CN.md +0 -386
  290. package/skills/lore/WORKFLOWS.md +0 -216
  291. package/skills/lore/WORKFLOWS.zh-CN.md +0 -216
package/README.md CHANGED
@@ -1,13 +1,13 @@
1
- <!-- registry-sync: version=16.0.0; skills=2026; stars=45322; updated_at=2026-08-24T05:22:46+00:00 -->
1
+ <!-- registry-sync: version=16.2.0; skills=2074; stars=45467; updated_at=2026-08-26T18:31:49+00:00 -->
2
2
  # AAS Core — Agentic Awesome Skills
3
3
 
4
4
  > **Local, agent-owned skill stacks for coding agents—from complete catalog access to a reproducible, reviewable plan.**
5
5
 
6
- **Current release: V16.0.0.** This release includes AAS Core for complete local catalog search, agent-owned selection, manifest validation, planning, and diagnosis. Apply and recovery remain experimental and outside the supported preview path.
6
+ **Current release: V16.2.0.** This release includes AAS Core for complete local catalog search, agent-owned selection, manifest validation, planning, and diagnosis. Apply and recovery remain experimental and outside the supported preview path.
7
7
 
8
8
  Codex or Claude inspects your project and chooses exact skills from the complete local AAS catalog. AAS Core does not rank or recommend them: its read-only `compose_stack` tool validates the agent-owned selection in memory, and a client or the `aas` CLI can persist it as `aas-stack.json` and produce an immutable plan before any target change.
9
9
 
10
- **[Read the AAS Core preview guide →](https://github.com/sickn33/agentic-awesome-skills/blob/v16.0.0/docs/users/aas-core.md)**
10
+ **[Read the AAS Core preview guide →](https://github.com/sickn33/agentic-awesome-skills/blob/v16.2.0/docs/users/aas-core.md)**
11
11
 
12
12
  ```text
13
13
  Project
@@ -67,7 +67,7 @@ AAS Core gives the repository one product model:
67
67
  | Apply and recovery | Experimental, explicit opt-in, outside the supported safety claim |
68
68
  | Semantic suitability certification | Not provided |
69
69
 
70
- Read the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.0.0/docs/users/aas-core.md) for the exact trust boundaries, current preview status, Codex/Claude setup model, and CLI lifecycle.
70
+ Read the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.2.0/docs/users/aas-core.md) for the exact trust boundaries, current preview status, Codex/Claude setup model, and CLI lifecycle.
71
71
 
72
72
  ## Why This Repo
73
73
 
@@ -76,7 +76,7 @@ Read the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob
76
76
  - **Approval before writes**: the durable artifacts are an approved stack and immutable plan, not an opaque one-shot install.
77
77
  - **Installable, not just inspirational**: use the compatible legacy installer or plugin distributions when direct delivery is the right path.
78
78
  - **Built for major agent workflows**: Claude Code, Cursor, Codex CLI, Autohand Code, Gemini CLI, Antigravity, Kiro, OpenCode, Copilot, and more.
79
- - **Broad coverage with real utility**: 2,026+ skills across development, testing, security, infrastructure, product, and marketing.
79
+ - **Broad coverage with real utility**: 2,074+ skills across development, testing, security, infrastructure, product, and marketing.
80
80
  - **Inspect before installing**: the hosted [Skill Workbench](https://sickn33.github.io/agentic-awesome-skills/workbench) reviews agent-produced stack manifests and immutable plans without browser-side installation.
81
81
  - **Focused delivery remains available**: specialized plugins package proven sets for web, security, data, docs, DevOps, QA, OSS, or agent/MCP workflows.
82
82
  - **Useful whether you want breadth or curation**: install the full catalog, choose a specialized plugin, start with bundles, or compare alternatives before installing.
@@ -94,7 +94,7 @@ Direct file search can find candidate prose, but it leaves the result in the con
94
94
  - [Choose Your Tool](#choose-your-tool)
95
95
  - [Quick FAQ](#quick-faq)
96
96
  - [Bundles & Workflows](#bundles--workflows)
97
- - [Browse 2,026+ Skills](#browse-2026-skills)
97
+ - [Browse 2,074+ Skills](#browse-2074-skills)
98
98
  - [Troubleshooting](#troubleshooting)
99
99
  - [Stable Skills Manifest v1](#stable-skills-manifest-v1)
100
100
  - [Support the Project](#support-the-project)
@@ -107,7 +107,7 @@ Direct file search can find candidate prose, but it leaves the result in the con
107
107
 
108
108
  ## Installation
109
109
 
110
- For Codex and Claude, start with the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.0.0/docs/users/aas-core.md): configure the local MCP, ask the agent to inspect the project and choose exact IDs from the full catalog, review the proposed `aas-stack.json`, then run CLI validation and planning. The MCP and validation are read-only. Planning writes only the requested plan artifact; it does not materialize skill payloads or AAS managed state in the target.
110
+ For Codex and Claude, start with the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.2.0/docs/users/aas-core.md): configure the local MCP, ask the agent to inspect the project and choose exact IDs from the full catalog, review the proposed `aas-stack.json`, then run CLI validation and planning. The MCP and validation are read-only. Planning writes only the requested plan artifact; it does not materialize skill payloads or AAS managed state in the target.
111
111
 
112
112
  Use direct installation when your host does not yet have a native AAS Core adapter, when you already know the exact skill IDs, or when you deliberately prefer manual selection:
113
113
 
@@ -261,7 +261,7 @@ The supported path covers complete local catalog search and inspection, agent-ow
261
261
 
262
262
  ### How do I install it?
263
263
 
264
- For AAS Core, follow the [preview guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.0.0/docs/users/aas-core.md) and use only a package release whose notes explicitly state that it includes Core. Release 14.6.0 predates Core; Core-capable releases begin with the 15.x line.
264
+ For AAS Core, follow the [preview guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.2.0/docs/users/aas-core.md) and use only a package release whose notes explicitly state that it includes Core. Release 14.6.0 predates Core; Core-capable releases begin with the 15.x line.
265
265
 
266
266
  For direct skill distribution, use a tool-specific flag such as `--codex`,
267
267
  `--cursor`, `--gemini`, or `--claude` to place skills in the directory your
@@ -339,7 +339,7 @@ Remove `--dry-run` only after reviewing the install, update, and removal plan. U
339
339
 
340
340
  The hosted [Skill Workbench](https://sickn33.github.io/agentic-awesome-skills/workbench) imports and reviews AAS Core stack manifests and immutable plans in browser memory. It does not access the filesystem, generate an approved plan, or install skills.
341
341
 
342
- ## Browse 2,026+ Skills
342
+ ## Browse 2,074+ Skills
343
343
 
344
344
  Use the root repo as a landing page, then jump into the deeper surface that matches your intent.
345
345
 
@@ -377,7 +377,7 @@ Use the root repo as a landing page, then jump into the deeper surface that matc
377
377
  Keep the root README short; use the dedicated docs for recovery and platform-specific guidance.
378
378
 
379
379
  - If you are confused after installation, start with the [Usage Guide](docs/users/usage.md).
380
- - For Core setup, trust boundaries, stack manifests, and preview status, use the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.0.0/docs/users/aas-core.md).
380
+ - For Core setup, trust boundaries, stack manifests, and preview status, use the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.2.0/docs/users/aas-core.md).
381
381
  - On native Windows, `AAS_ADAPTER_WINDOWS_ACL_FAILED` refers to the configuration path checked with PowerShell `Get-Acl`, not the cache and not `icacls`; do not approve until preview returns an approval digest.
382
382
  - If you integrate agentic-awesome-skills into a host, read the discovery contract first: [Stable Skills Manifest v1](docs/users/discovery-manifest.md).
383
383
  - For Windows truncation or context crash loops, use [docs/users/windows-truncation-recovery.md](docs/users/windows-truncation-recovery.md).
@@ -388,7 +388,7 @@ Keep the root README short; use the dedicated docs for recovery and platform-spe
388
388
 
389
389
  ## Stable Skills Manifest v1
390
390
 
391
- This is the stable **direct-host discovery manifest** for integrations that load individual `SKILL.md` files. It is not `aas-stack.json`, the verified AAS Core catalog, or the Core composition contract. Core users should start with the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.0.0/docs/users/aas-core.md); custom host integrations can continue using the manifest below.
391
+ This is the stable **direct-host discovery manifest** for integrations that load individual `SKILL.md` files. It is not `aas-stack.json`, the verified AAS Core catalog, or the Core composition contract. Core users should start with the [AAS Core guide](https://github.com/sickn33/agentic-awesome-skills/blob/v16.2.0/docs/users/aas-core.md); custom host integrations can continue using the manifest below.
392
392
 
393
393
  Host integrations should use:
394
394
 
@@ -506,11 +506,13 @@ Key source families include:
506
506
  - **[OJPalenzuela/agents-generator](https://github.com/OJPalenzuela/agents-generator)**: Source for the `agents-generator` skill - project-specific `AGENTS.md` and companion rule generation with package-manager detection, monorepo handling, dry-run/update modes, backups, and validated commands (MIT).
507
507
  - **[agentbody/skills](https://github.com/agentbody/skills)**: Source for the `people-data` skill - LinkedIn and YouTube professional-profile and public business-contact research via the Agent Body MCP server (MIT).
508
508
  - **[sudosubin/gh-attach](https://github.com/sudosubin/gh-attach)**: Source for the `gh-attach` skill - GitHub CLI uploads and downloads of `user-attachments` (screenshots, PDFs, zips, videos), producing repo-scoped URLs for PRs, issues, and READMEs, with GitHub Enterprise Server support (MIT).
509
+ - **[zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill)**: Source for 43 security skills covering reverse engineering, binary analysis, offensive assessment orchestration, and threat-intelligence workflows, adapted with English metadata and upstream safety gates (MIT).
509
510
  - **[abhinaykrupa/cowork-to-code-bridge](https://github.com/abhinaykrupa/cowork-to-code-bridge)**: Source for the `cowork-to-code-bridge` skill - consent-bound execution on the user's own machine with pinned provenance, narrow scopes, and explicit local-agent limitations (MIT).
510
511
  - **[maleksaadi0109/hyprfedora](https://github.com/maleksaadi0109/hyprfedora)**: Source for the `fedora-hyprland-installer` skill - GPU-aware Fedora Hyprland installation, configuration, verification, repair, and removal workflows (MIT).
511
512
  - **[merc1305/findMate](https://github.com/merc1305/findMate)**: Source for the `find-complementary-founders` skill - private-first own-owner assessment, approved expiring profiles, and evidence-backed human founder matching (MIT).
512
513
  - **[provencher/codex-skills](https://github.com/provencher/codex-skills)**: Source for the `orchestrate` skill - focused Codex multi-agent delegation with non-overlapping ownership, coordinator integration, and user-held approval gates (MIT).
513
514
  - **[Phelan164/codex-howto](https://github.com/Phelan164/codex-howto)**: Source for the `maintain-codex-wiki` skill - review-first engineering knowledge with provenance, explicit capture and promotion, and deterministic structural checks (MIT).
515
+ - **[kotobuki09/instructree](https://github.com/kotobuki09/instructree)**: Source for the `instructree` skill - local instruction-scope mapping, metadata and link validation, recursive Copilot import audits, and SARIF reports (MIT).
514
516
  - **[0xsarwagya/ontoly](https://github.com/0xsarwagya/ontoly)**: Source for the `ontoly-software-graph` skill - deterministic TypeScript software graphs, MCP-backed architecture review, request tracing, impact analysis, and dependency analysis (MIT).
515
517
  - [amElnagdy/guard-skills](https://github.com/amElnagdy/guard-skills) — Code Quality & Testing Guard Skills (by amElnagdy)
516
518
 
@@ -554,6 +556,7 @@ Key source families include:
554
556
  - **[JunsW/feature-track](https://github.com/JunsW/feature-track)**: Source for the `feature-tracking` skill - lightweight repository-native feature memory for current status, source-of-truth documents, decisions, risks, and cross-session handoff (MIT).
555
557
  - **[JularDepick/user-thoughts.SKILL](https://github.com/JularDepick/user-thoughts.SKILL)**: Source for the `user-thoughts` skill - persistent project idea repository workflows for capturing decisions, tech stack notes, UI/UX rationale, and MDBASE-backed project memory (MIT).
556
558
  - **[TheaDust/lore](https://github.com/TheaDust/lore)**: Source for the `lore` skill - Markdown-only, zero-dependency long-term project memory for AI coding agents, with monorepo scopes, two-section platform mirrors, and stdlib Python helpers (MIT).
559
+ - **[rainmanjam/poka-yoke](https://github.com/rainmanjam/poka-yoke)**: Source for the `poka-yoke` skill - software mistake-proofing through control, warning, detection, and source-inspection guardrails (MIT).
557
560
  - **[ZeroPointRepo/youtube-skills](https://github.com/ZeroPointRepo/youtube-skills)**: Source for the `youtube-full` skill - TranscriptAPI-backed YouTube transcripts, search, channel browsing, playlists, and cloud-safe video research workflows (MIT).
558
561
  - **[ZeroPointRepo/zillow-skills](https://github.com/ZeroPointRepo/zillow-skills)**: Source for the `us-property-data` skill - U.S. property lookup, valuation, listing, tax, school, photo, and price-history guidance through the independent Zillapi API (MIT-0).
559
562
  - **[Antheurus/anywrite](https://github.com/Antheurus/anywrite)**: Source for the `anywrite` skill - low-context CLI access to Anytype's local API for objects, properties, files, search, chat, and other workspace operations (MIT).
@@ -672,7 +675,7 @@ Key source families include:
672
675
  - **[sanjay3290/ai-skills](https://github.com/sanjay3290/ai-skills)**: Apache-licensed collection of agent skills for AI coding assistants.
673
676
  - **[scarletkc/vexor](https://github.com/scarletkc/vexor)**: Semantic search engine for files and code, referenced in release history.
674
677
  - **[sstklen/infinite-gratitude](https://github.com/sstklen/infinite-gratitude)**: Multi-agent research skill from the AI Dojo series (MIT).
675
- - **[TerminallyLazy/Tree-Ring-Memory](https://github.com/TerminallyLazy/Tree-Ring-Memory)**: Source for the `tree-ring-memory` skill — local-first memory lifecycle guidance for recall, evidence, audit, forgetting, consolidation, and privacy-safe agent memory operations (Apache-2.0).
678
+ - **[TerminallyLazy/Tree-Ring-Memory](https://github.com/TerminallyLazy/Tree-Ring-Memory)**: Source for the `tree-ring-memory` skill — local-first memory lifecycle guidance for recall, evidence, audit, forgetting, consolidation, and privacy-safe agent memory operations (MIT).
676
679
  - **[wrsmith108/linear-claude-skill](https://github.com/wrsmith108/linear-claude-skill)**: Linear issue/project/team management skill with MCP and GraphQL workflows (MIT).
677
680
  - **[wrsmith108/varlock-claude-skill](https://github.com/wrsmith108/varlock-claude-skill)**: Secure environment-variable management skill for Claude Code (MIT).
678
681
  - **[xwmxcz/papers-skill](https://github.com/xwmxcz/papers-skill)**: Source for the `papers-skill` skill — academic research workflows over Semantic Scholar (200M+ papers) and arXiv, with citation lookup, arXiv PDF download, and PyMuPDF text extraction via a bundled Python CLI (MIT).
@@ -1 +1 @@
1
- {"assets":[{"path":"data/aas-v1/skill-content-index.v1.json","sha256":"sha256-c2b353f21ae5c3e919b127785f081e79740246c1416d64c0e204d857e75c636a","size":279357},{"path":"data/aas-v1/skill-content.v1.ndjson","sha256":"sha256-513ca80fa0d29c5f87ea0d3c64563a6abc13e3f8f52436739ec9b8a848155dc3","size":19686185},{"path":"data/catalog.json","sha256":"sha256-32ad385bbddc7742368aa8ffce929499e62d522d45374a8835892fde31768dc1","size":1686310},{"path":"tools/lib/aas-v1/ontology.v1.json","sha256":"sha256-25169aad0a3d2e8420b0acd65a35f7ce4ecb08fcbe0018ee978808ce0c8944ed","size":7109}],"catalogDigest":"sha256-b9a0c8ff55ad2f7aed3dc529dbc9a4c7bfed40925daa8928ada4c6e6b799b3e8","catalogSchemaVersion":"2.0.0","digestVersion":1,"package":"agentic-awesome-skills","packageVersion":"16.0.0","schemaVersion":1,"skillCount":2026}
1
+ {"assets":[{"path":"data/aas-v1/skill-content-index.v1.json","sha256":"sha256-69fd36b132f48ee4f9a369452daef100cad08fbc718cf4ef56780636263163c9","size":285798},{"path":"data/aas-v1/skill-content.v1.ndjson","sha256":"sha256-668abc7c145ab14c6a72295a4ad4171562aa9cd60fa5ac071d1c6a5f6dfaeb5a","size":20053204},{"path":"data/catalog.json","sha256":"sha256-2832006ced8ed5208eacd5ea84d6b950c4a5b67493ac331edefe34428f46f1d0","size":1734135},{"path":"tools/lib/aas-v1/ontology.v1.json","sha256":"sha256-25169aad0a3d2e8420b0acd65a35f7ce4ecb08fcbe0018ee978808ce0c8944ed","size":7109}],"catalogDigest":"sha256-6da533a43702385c71ac56a7eb2a387047add3bfeecdd6dd061fd0984eacbcba","catalogSchemaVersion":"2.0.0","digestVersion":1,"package":"agentic-awesome-skills","packageVersion":"16.2.0","schemaVersion":1,"skillCount":2074}