A security-testing guide for XXE, a flaw where an XML parser is tricked into reading files or making network requests. It covers XML inputs such as APIs, uploads, SOAP services, office documents, SVGs, and PDFs.
A security boundary for OpenClaw that checks data before it leaves the local device. It allows safe data, can remove sensitive details when possible, and blocks dangerous secrets or data it cannot safely sanitize.
Define Model Context Protocol terms precisely (host, client, server, resource, tool, prompt, sampling, elicitation, extension, SEP). Use when the user asks what an MCP term means or how MCP concepts relate.
Control the user's REAL browser (existing logins/cookies) via kimi-webbridge MCP tools (wb). Use when the user wants to open pages, click, type, scrape, screenshot, fill forms, debug a live page, or interact with any website - including simple asks like "open this URL" or "click that button". Prefer this over curl…
An image-analysis skill for models that cannot normally view images. It reads screenshots, documents, charts, and user interfaces, including text found through OCR, which means turning text in an image into editable words.
Manage OpenProject tasks, user stories, agile boards, comments, time entries, users, progress tracking, project creation, and project status via OpenProject MCP tools. Activate when user requests creating tasks, user stories, managing sprint boards, logging time, commenting, or tracking project progress in OpenProject.
Computational chemistry with MolCrafts: find the real package API before writing science code. Covers molecular structure, topology, force fields, trajectories, RDF/MSD and other analysis, packing/solvation, 3D visualization, cluster jobs, and experiment workspaces.
Run the four mandatory checks (random-feature baseline, control-token norm, structural-rigidity α-sweep, and the paper-11 structure-matched control + naming gate) and return a verdict in {causal, weak-causal, confounded-structural, epiphenomenal-softmax, epiphenomenal-template, inconclusive-unverified, undetermined}.
An image-understanding skill that sends images to a vision tool so their contents can be described. It is intended for situations where the main model cannot see images directly.
Manage the Tuma250 grocery cart and orders via the configured tuma250 MCP server (through mcporter). Use when the user wants to search Tuma250 products, choose variants/sizes, add/remove/update cart quantities, inspect the current basket totals/shipping options, or review recent orders and order details.
A command-line tool for publishing 3D digital-twin tiles with DTS Engine 6.1, software for preparing large geospatial and 3D datasets for viewing. It works with formats such as shapefiles, terrain rasters, building models, and point clouds.
Call an HTTP/JSON API with explicit timeouts, retries with backoff, and progress reporting. Use for any outbound API call from a skill, and read this before writing a script that hangs.
Make payments with ClawPay via Stripe and PayPal. Use when user wants to pay, send money, charge, refund, check balance, view transactions, set up payment method, or configure PayPal. Triggers: pay, send money, charge, refund, balance, transactions, set up payment, set up paypal, google pay, apple pay, alipay.
Rend un CV impossible à écarter — par l'ATS (parseur) ET le recruteur/screener LLM 2026 — honnêtement. USE WHENEVER the user wants to beat the ATS, pass résumé screening, tailor a CV to a job offer, fix a CV that keeps getting rejected/ghosted, optimize a resume for 2026 ATS + AI/LLM screeners, get an "unrejectable"…
Coordinate material work with humans, Codex, Claude Code, and other active coding-agent sessions through one local room per Git project. Use it to announce bounded work, inspect active handles and worktree targets, report collisions or blockers, and post provenance-rich handoffs without treating chat as authority.
★not rated 0 7d agoA61 tokens
originalApache-2.0
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: