io.github.yaklang/yaklang/sql-injection

SQL 注入漏洞测试技能。覆盖联合注入、布尔盲注、时间盲注、报错注入、堆叠查询等攻击向量， 提供 MySQL/PostgreSQL/MSSQL/Oracle/SQLite 多数据库的特征 Payload， 包含 WAF 绕过策略和系统化测试流程，适用于 Web 应用 SQL 注入漏洞的发现与确认。

io.github.rolling-scopes/rsschool-app/typescript-advanced-types

Master TypeScript's advanced type system including generics, conditional types, mapped types, template literals, and utility types for building type-safe applications. Use when implementing complex type logic, creating reusable type utilities, or ensuring compile-time type safety in TypeScript projects.

io.github.joshsymonds/nix-config/nix-patterns

Patterns for this nix-config flake repository. Use when editing .nix files, adding packages, creating modules, or debugging flake issues.

io.github.vercel-labs/json-render/react-three-fiber

React Three Fiber 3D renderer for json-render. Use when working with @json-render/react-three-fiber, building 3D scenes from JSON specs, rendering meshes/lights/models/environments, or integrating Three.js with json-render catalogs.

io.github.langwatch/langwatch/browser-test

Validate a feature works by driving a real browser with Playwright MCP. No test files — just interactive verification.

io.github.web-infra-dev/rstest/typescript

TypeScript anti-slop guardrails. Use when writing or reviewing .ts, .tsx, and .mts files. Covers patterns that Biome, tsc, and rslint do not catch.

io.github.wanikua/danghuangshang/browser-use

Automates browser interactions for social media management across Instagram, LinkedIn, and X. Handles posting, DMs, connection requests, lead scraping, and monitoring. Use when the user needs to navigate, interact with, or extract data from approved websites.

io.github.beita6969/ScienceClaw/writing

# Academic Writing

io.github.RSSNext/Folo/mobile-e2e

Run apps/mobile Maestro end-to-end tests in this repo. Use when an agent needs to validate mobile auth flows on iOS Simulator or Android Emulator. Current maintained coverage is register, sign out, and sign in.

io.github.LeoYeAI/openclaw-master-skills/security-auditor

Use when reviewing code for security vulnerabilities, implementing authentication flows, auditing OWASP Top 10, configuring CORS/CSP headers, handling secrets, input validation, SQL injection prevention, XSS protection, or any security-related code review.

io.github.LeoYeAI/openclaw-master-skills/pdf-extract

Extract text from PDF files for LLM processing

io.github.LeoYeAI/openclaw-master-skills/pdf-text-extractor

Extract text from PDFs with OCR support. Perfect for digitizing documents, processing invoices, or analyzing content. Zero dependencies required.

io.github.vchelaru/FlatRedBall/refactor

This skill should be used when the user asks to refactor code, do a refactor pass, clean up code, extract a class or service, inject a dependency, or make incremental improvements to existing code structure.

io.github.davepoon/buildwithclaude/security-guardrails

Adversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII leakage, workflow bypass, and social engineering attacks.

io.github.sethdford/claude-skills/automation-architecture

Design scalable, maintainable test automation architecture. Use when planning automation framework structure and patterns.

io.github.Asymmetric-al/core/typescript-expert

TypeScript and JavaScript expert with deep knowledge of type-level programming, performance optimization, monorepo management, migration strategies, and modern tooling. Use PROACTIVELY for any TypeScript/JavaScript issues including complex type gymnastics, build performance, debugging, and architectural decisions. If a specialized expert is a better fit, I will recommend switching and stop.

io.github.davila7/claude-code-templates/pb-api-rules

API rules and filter expressions for PocketBase access control. Use when setting permissions, writing filter expressions, configuring who can access what, or debugging 403/404 responses. Covers all 5 rule types, filter syntax, operators, request/collection macros, and field modifiers.

io.github.github/awesome-copilot/reviewing-oracle-to-postgres-migration

Identifies Oracle-to-PostgreSQL migration risks by cross-referencing code against known behavioral differences (empty strings, refcursors, type coercion, sorting, timestamps, concurrent transactions, etc.). Use when planning a database migration, reviewing migration artifacts, or validating that integration tests cover Oracle/PostgreSQL differences.

io.github.massgen/MassGen/backend-integrator

Complete guide for integrating a new LLM backend into MassGen. Use when adding a new provider (e.g., Codex, Mistral, DeepSeek) or when auditing an existing backend for missing integration points. Covers all ~15 files that need touching.

io.github.OpenBMB/ChatDev/python-scratchpad

Use the existing Python execution tools as a scratchpad for calculations, data transformation, and quick script-based validation.

io.github.rohitg00/skillkit/good-skill

Enforces TypeScript best practices and modern patterns

io.github.aiming-lab/MetaClaw/sql-best-practices

Use this skill when writing SQL queries — selects, joins, aggregations, window functions, or schema modifications. Apply whenever SQL is needed to ensure correctness, safety, and performance.

io.github.marvinrichter/clarc/css-architecture

CSS architecture for modern web apps: Tailwind conventions and when to break them, CSS Modules for complex components, responsive design system with container queries, fluid typography, and avoiding the most common Tailwind pitfalls.

io.github.aiskillstore/marketplace/sql-queries

Expert SQL query generation for DBX Studio. Use when writing, optimizing, or debugging SQL queries against user database connections.