zebbern/termstack

An open-source agentic vibe coding platform that helps you build your own platform (Claude Code, GLM, Codex)

This repository also configures its own agents. See what termstack tells them →

4Stars on the repository
163Mods indexed here, across every type
6mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied

pr-writer

73

zebbern/termstack

Skill Claude CodeCodex

ALWAYS use this skill when creating or updating pull requests — never create or edit a PR directly without it. Follows Sentry conventions for PR titles, descriptions, and issue references. Trigger on any create PR, open PR, submit PR, make PR,...

not rated 4 6mo ago A 56 tokens

zebbern/termstack

Skill Claude CodeCodex

Use this skill when reviewing Python code for common anti-patterns to avoid. Use as a checklist when reviewing code, before finalizing implementations, or when debugging issues that might stem from known bad practices.

not rated 4 6mo ago A 46 tokens

zebbern/termstack

Skill Claude CodeCodex

Python background job patterns including task queues, workers, and event-driven architecture. Use when implementing async task processing, job queues, long-running operations, or decoupling work from request/response cycles.

not rated 4 6mo ago A 45 tokens

zebbern/termstack

Skill Claude CodeCodex

Python design patterns including KISS, Separation of Concerns, Single Responsibility, and composition over inheritance. Use this skill when designing a new service or component from scratch and choosing how to layer responsibilities, when refactoring a God class or monolithic function that has grown too large, when…

not rated 4 6mo ago A 121 tokens

zebbern/termstack

Skill Claude CodeCodex

Python error handling patterns including input validation, exception hierarchies, and partial failure handling. Use when implementing validation logic, designing exception strategies, handling batch processing failures, or building robust APIs.

not rated 4 6mo ago B 43 tokens

zebbern/termstack

Skill Claude CodeCodex

Profile and optimize Python code using cProfile, memory profilers, and performance best practices. Use when debugging slow Python code, optimizing bottlenecks, or improving application performance.

not rated 4 6mo ago A 40 tokens

zebbern/termstack

Skill Claude CodeCodex

Python resource management with context managers, cleanup patterns, and streaming. Use when managing connections, file handles, implementing cleanup logic, or building streaming responses with accumulated state.

not rated 4 6mo ago A 37 tokens

zebbern/termstack

Skill Claude CodeCodex

Implement comprehensive testing strategies with pytest, fixtures, mocking, and test-driven development. Use when writing Python tests, setting up test suites, or implementing testing best practices.

not rated 4 6mo ago A 38 tokens

rce-poc

81

zebbern/termstack

Skill Claude CodeCodex

Exploit OS Command Injection vulnerabilities to achieve Remote Code Execution (RCE). Command injection occurs when user input is passed unsafely to system shell commands, allowing attackers to execute arbitrary commands on the target server.

not rated 4 6mo ago B 4 tokens

zebbern/termstack

Skill Claude CodeCodex

React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance…

not rated 4 6mo ago A 67 tokens

zebbern/termstack

Skill Claude CodeCodex

React Native and Expo best practices for building performant mobile apps. Use when building React Native components, optimizing list performance, implementing animations, or working with native modules. Triggers on tasks involving React Native, Expo, mobile performance, or native platform APIs.

not rated 4 6mo ago A 57 tokens

retest-vuln

84

zebbern/termstack

Skill Claude CodeCodex

Verify vulnerability fixes, validate remediation effectiveness, and perform regression testing. Use when a fix has been deployed, patch verification is needed, or confirming vulnerability closure for bug bounty programs.

not rated 4 6mo ago C 41 tokens

scope-check

85

zebbern/termstack

Skill Claude CodeCodex

Validate targets against bug bounty program scope, verify domain/IP ownership, check wildcard rules, and identify out-of-scope exclusions. Use when validating new targets, checking discovered assets, or before testing any endpoint.

not rated 4 6mo ago A 44 tokens

skill-creator

86

zebbern/termstack

Skill Claude CodeCodex

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.

not rated 4 6mo ago A 64 tokens

slack-gif-creator

87

zebbern/termstack

Skill Claude CodeCodex

Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like "make me a GIF of X doing Y for Slack.".

not rated 4 6mo ago A 51 tokens

sqli-poc

88

zebbern/termstack

Skill Claude CodeCodex

Detect and exploit SQL injection vulnerabilities using automated and manual techniques. Use when testing for SQL injection, when parameters appear injectable, when database enumeration is needed, or when proving SQL injection impact.

not rated 4 6mo ago A 42 tokens

ssl-check

89

zebbern/termstack

Skill Claude CodeCodex

Analyze SSL/TLS configurations for security weaknesses and compliance. Use when testing HTTPS endpoints, when checking for TLS vulnerabilities, when validating certificates, or when auditing cipher suite configurations.

not rated 4 6mo ago A 37 tokens

ssrf-poc

90

zebbern/termstack

Skill Claude CodeCodex

Detect and exploit SSRF vulnerabilities using OOB interaction detection with interactsh and manual bypass techniques. Use when testing for server-side request forgery, accessing cloud metadata, probing internal services, or validating SSRF with out-of-band callbacks.

not rated 4 6mo ago C 52 tokens

ssti-poc

91

zebbern/termstack

Skill Claude CodeCodex

Exploit Server-Side Template Injection (SSTI) vulnerabilities to achieve Remote Code Execution. SSTI occurs when user input is unsafely embedded into server-side templates, allowing attackers to inject template expressions that execute on the server.

not rated 4 6mo ago A 4 tokens

state-persistence

92

zebbern/termstack

Skill Claude Code

Provides patterns for reading, writing, and recovering AgLoop state from state.json and plan.yaml. Includes checkpoint management and corruption recovery. Use when implementing state management logic or hook scripts.

not rated 4 6mo ago A 40 tokens

subdomain-enum

93

zebbern/termstack

Skill Claude CodeCodex

Enumerate subdomains for a target domain using passive and active reconnaissance techniques. Use when starting reconnaissance on a new target, when you need to discover the attack surface, when expanding scope from a root domain, or when the user provides a domain to investigate.

not rated 4 6mo ago A 56 tokens

synack-report

94

zebbern/termstack

Skill Claude CodeCodex

Generate professional vulnerability reports following Synack Red Team (SRT) format and standards. Synack operates differently from traditional bug bounty programs - it's an elite, vetted researcher community with higher quality expectations, mission-based work, and premium payouts.

not rated 4 6mo ago A 3 tokens

task-planning

95

zebbern/termstack

Skill Claude Code

Guides agents through DAG task decomposition, dependency analysis, effort estimation, and pre-mortem failure analysis. Use when creating or revising implementation plans from feature requirements.

not rated 4 6mo ago A 38 tokens

tech-fingerprint

96

zebbern/termstack

Skill Claude CodeCodex

Identify technologies, frameworks, and software versions running on web targets. Use when you need to discover the technology stack of a website, when mapping attack surface for known CVEs, when identifying CMS or framework versions, or when the user asks about what technologies a site is running.

not rated 4 6mo ago A 59 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: