头脑风暴
01Skill Codex
A brainstorming workflow for clarifying goals, limits, constraints, and possible approaches before work begins. Its trigger name is “brainstorming.”
not rated 800
+5 4mo ago A 51 tokens
800Stars on the repository
35Mods indexed here, across every type
4mo agoLast push, which is what freshness is scored on
customA LICENSE file GitHub cannot name, so bodies are not copied
CTF•AI/ML 攻防
02Skill Claude Code
A practice area for solving CTF challenges involving AI and machine learning. CTFs are security puzzles, and these challenges can involve adversarial examples, model extraction, prompt injection, membership inference, data poisoning, LoRA misuse, or LLM jailbreaks.
not rated 800
+5 4mo ago B 64 tokens
CTF•新手入口
03Skill Claude Code
A Chinese-language starting point for beginners working on capture-the-flag security challenges, which are puzzles involving web, interface, or software weaknesses.
not rated 800
+5 4mo ago A 115 tokens
CTF•密码学
04Skill Claude Code
A cryptography skill for solving capture-the-flag challenges, which are security puzzles that require finding and exploiting weaknesses. It covers algorithms, attacks, mathematical techniques, and zero-knowledge proofs.
not rated 800
+5 4mo ago A 72 tokens
CTF•数字取证
05Skill Claude Code
A digital-forensics skill for solving capture-the-flag challenges involving computer evidence. Capture-the-flag challenges are security puzzles, and digital forensics examines data left on systems or networks.
not rated 800
+5 4mo ago D 71 tokens
CTF•恶意软件分析
06Skill Claude Code
A skill for analysing malware-related capture-the-flag challenges, or CTF puzzles that involve examining suspicious code, files, or network traffic.
not rated 800
+5 4mo ago A 76 tokens
CTF•杂项
07Skill Claude Code
A skill for miscellaneous capture-the-flag (CTF) problems, including unusual coding, security, signal, encoding, puzzle, and sandbox challenges.
not rated 800
+5 4mo ago A ✓ AI review 71 tokens
CTF•开源情报
08Skill Claude Code
A skill for solving capture-the-flag challenges based on open-source intelligence, meaning information gathered from public sources. It covers searches across websites, social media, maps, DNS records, usernames, images, archives, public records, and coordinates.
not rated 800
+5 4mo ago A 62 tokens
CTF•二进制利用
09Skill Claude Code
A guide for solving binary-exploitation challenges in Capture the Flag (CTF) competitions, where players find ways to control a program’s behavior. It covers issues such as buffer overflows, format-string bugs, heap misuse, and sandbox escapes.
not rated 800
+5 4mo ago C 65 tokens
CTF•逆向工程
10Skill Claude Code
A guide for examining software to understand how it works without relying on its source code. It covers programs such as binaries, Android apps, WebAssembly modules, firmware, game clients, and custom virtual machines.
not rated 800
+5 4mo ago A 63 tokens
CTF•超级总控
11Skill Codex
A general entry point for Capture the Flag (CTF) challenges, including challenges that combine several areas. It can route work automatically or begin with brainstorming before choosing a more specific guide.
not rated 800
+5 4mo ago A 117 tokens
CTF•Web 漏洞
12Skill Claude Code
A guide for solving web-application challenges in Capture the Flag (CTF) competitions. It covers attacks such as cross-site scripting, SQL injection, request forgery, authentication bypasses, unsafe file uploads, and token or protocol mistakes.
not rated 800
+5 4mo ago B 65 tokens
CTF•题解写作
13Skill Claude Code
A guide for turning a completed Capture the Flag (CTF) solution into a structured, repeatable write-up. A write-up records the steps and reasoning so someone else can reproduce the result.
not rated 800
+5 4mo ago A 60 tokens
CTF•挑战调度器
14Skill Claude Code
A starting guide for classifying a Capture the Flag (CTF) challenge and doing a quick first review. It identifies the main challenge category and routes the work to a matching guide.
not rated 800
+5 4mo ago A 63 tokens
Skill Claude CodeCodex
A guide for testing JSON Web Token (JWT) and OpenID Connect (OIDC) authentication. JWTs are signed tokens that carry login information, while OIDC is a standard for signing in through an identity provider.
not rated 800
+5 4mo ago A 47 tokens
Strix•新手入口
16Skill Claude CodeCodex
A beginner-oriented Chinese entry point for Strix security-testing guides. It first helps choose the appropriate tool or vulnerability-testing guide, then gives the smallest useful starting steps.
not rated 800
+5 4mo ago A 82 tokens
Skill Claude CodeCodex
A guide for testing function-level authorization, which controls whether a user may perform a particular operation. It focuses on cases where restricted actions, administrator functions, or API operations can be used without the required permission.
not rated 800
+5 4mo ago A 50 tokens
Strix•业务逻辑漏洞
18Skill Claude CodeCodex
Business logic flaws exploit intended functionality to violate domain invariants: move money without paying, exceed limits, retain privileges, or bypass reviews. They require a model of the business, not just payloads.
not rated 800
+5 4mo ago A 42 tokens
Skill Claude CodeCodex
A CSRF testing guide. CSRF, or cross-site request forgery, is an attack that makes a logged-in browser submit an unwanted action to a website.
not rated 800
+5 4mo ago A 49 tokens
Skill Claude CodeCodex
A command guide for ffuf, a tool that sends many crafted requests to find hidden paths, parameters, or files. It covers response matching, filtering, and automation-friendly settings.
not rated 800
+5 4mo ago A 43 tokens
Skill Claude CodeCodex
A command guide for httpx, a tool that checks which web services respond at a list of addresses. It covers probe options, output formats, and safer automation settings.
not rated 800
+5 4mo ago A 41 tokens
Skill Claude CodeCodex
An authorization-testing guide for IDOR and BOLA flaws. These are bugs where changing an object identifier lets one account view or change another account’s data.
not rated 800
+5 4mo ago A 40 tokens
Strix•信息泄露测试
23Skill Claude CodeCodex
Information leaks accelerate exploitation by revealing code, configuration, identifiers, and trust boundaries. Treat every response byte, artifact, and header as potential intelligence. Minimize, normalize, and scope disclosure across all channels.
not rated 800
+5 4mo ago A 43 tokens
Skill Claude CodeCodex
A file-upload security testing guide for checking whether an application accepts dangerous files or stores them unsafely. It covers filename-extension bypasses, content-type changes, and path traversal.
not rated 800
+5 4mo ago A 43 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: