io.github.brycewang-stanford/Auto-Empirical-Research-Skills/survey-design

Design survey instruments: questions, scales, flow, social desirability.

io.github.brycewang-stanford/Auto-Empirical-Research-Skills/conjoint-design

Design conjoint experiments: attributes, power, AMCE/AMIE estimation.

io.github.go-vikunja/vikunja/api-v2-routes

Use when adding or changing a resource on the Huma-backed /api/v2 API (new endpoints, porting a v1 resource, editing pkg/routes/api/v2/). Covers per-operation Huma handlers, the shared envelopes, error/auth bridging, REST verb conventions, and what's automatic.

io.github.siddsachar/row-bot/mcp_guide

Guidance for using external MCP tools safely.

io.github.code-yeongyu/oh-my-openagent/git-master

MUST USE whenever a task needs a commit or git-history investigation. Covers atomic commits, staging, commit-message style, rebase, squash, fixup/autosquash, blame, bisect, reflog, git log -S/-G, and questions like who wrote this or when was this added. Do not use for ordinary code edits unless the user asks for git work.

io.github.TeamWiseFlow/xiaobei/design-system-picker

根据风格描述从内置设计系统库中选取最匹配的设计系统，提供 DESIGN.md 规范供后续设计工作使用。

io.github.TeamWiseFlow/wiseflow/design-system-picker

根据风格描述从内置设计系统库中选取最匹配的设计系统，提供 DESIGN.md 规范供后续设计工作使用。

io.github.mongodb/docs/mcp-release-notes

Draft MongoDB MCP Server release notes for a new version by fetching the corresponding release from mongodb-js/mongodb-mcp-server and formatting them for the docs. Use when asked to draft or create MCP Server release notes.

io.github.mukul975/Anthropic-Cybersecurity-Skills/designing-adversary-engagement-with-mitre-engage

Plan, run, and measure an adversary engagement operation using the MITRE Engage framework so that deployed deception is driven by strategy instead of deployed ad hoc. Covers the Engage Matrix (Prepare, Expose, Affect, Elicit, Understand), the 10-Step Operational Process, mapping engagement Activities to the ATT&CK techniques they expose, and defining measurable Goals and Operational Objectives. Use when a team has honeypots, honeytokens, or canary tokens but no coordinating strategy, when leadership asks "should we engage attackers and how", when building a deception/denial program, when writing an adversary engagement operation plan, or when deciding which deception Activities to deploy against a specific threat actor. Keywords: MITRE Engage, adversary engagement, cyber deception strategy, denial and deception, Engage Matrix, EAC, EGO, Expose Affect Elicit, deception program, honeypot strategy, engagement operation.

io.github.mukul975/Anthropic-Cybersecurity-Skills/deploying-cloud-deception-with-decoy-resources

Deploy cloud-native deception across AWS, Azure, and GCP using decoy (honey) resources whose only purpose is to generate a high-fidelity alert the instant an attacker touches them: canary IAM access keys, permission-less decoy users/roles/service principals, honey object-storage buckets, and decoy secrets in Secrets Manager / Key Vault / Secret Manager. Wires detection through CloudTrail + EventBridge, Azure Sentinel honeytoken watchlists + Defender, and GCP Cloud Audit Logs, so any use of a decoy is routed to the SOC with near-zero false positives. Use when protecting cloud accounts and data stores, when an org has only on-prem honeypots and needs cloud coverage, when seeding fake AWS keys to catch credential theft and code-leak exposure, or when detecting cloud reconnaissance and lateral movement. Keywords: cloud deception, canary token AWS, honey S3 bucket, decoy IAM credentials, CloudTrail alert, GuardDuty, Sentinel honeytoken, decoy secret, honey service account, cloud honeypot, breach detection.

io.github.android/skills/testing-setup

Analyze and create a testing strategy for native Android apps - install testing libraries, set up test infrastructure, create harnesses for unit tests, UI tests, screenshot tests, and end-to-end tests.

io.github.eduhub-org/eduhub/cursor-browser

Inspect UI via cursor-ide-browser (Cursor Browser tab); fall back to user-playwright if internal browser MCP is unavailable. Use for @Browser, open tab, layout checks, localhost — or when user explicitly asks for Playwright.

io.github.UnicomAI/wanwu/mcp2skill

将 MCP Server 的工具列表转换为 Skill 格式的结构化 Markdown 文档

io.github.OpenSenseNova/SenseNova-Skills/pdf-analysis

PDF 文档解析。自动区分文字型 PDF 与扫描型 PDF，覆盖：文本/表格提取、多页全量扫描、嵌入图表 caption、单位感知数值计算。

io.github.deusXmachina-dev/memorylane/automation-instructions

Write step-by-step automation instructions for a workflow, tailored to your tool (Claude, n8n or Zapier). Best run right after discover-patterns or process-analyst.

io.github.labring/FastGPT/api-development

FastGPT API 开发规范。重点强调使用 zod schema 定义入参和出参,在 API 文档中声明路由信息,编写对应的 OpenAPI 文档,以及在 API 路由中使用 schema.parse 进行验证。

io.github.vm0-ai/vm0-skills/cursor

Cursor Cloud Agents API for launching and managing background coding agents. Use when the user mentions "Cursor", "Cursor agents", "Cursor background agents", "cloud agents", "cursor.com", or wants to start, monitor, follow up on, or cancel an autonomous coding agent on a GitHub repository.

io.github.yaklang/hack-skills/sqli-sql-injection

SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths.

io.github.FlorianBruniaux/claude-code-ultimate-guide/refactor

Analyze code for SOLID violations and suggest targeted improvements

io.github.FlorianBruniaux/claude-code-ultimate-guide/security

Rapid security assessment focused on OWASP Top 10 vulnerabilities

io.github.FlorianBruniaux/claude-code-ultimate-guide/security-audit

Comprehensive security audit with scored posture assessment

io.github.PramodDutta/qaskills/cursor-skill-authoring

Author effective Cursor rules in .cursor/rules/*.mdc - YAML frontmatter (description, globs, alwaysApply), the four rule types, scoped QA rules, subagents, and structure that actually steers the model.

io.github.code-yeongyu/oh-my-openagent/security-research

Team Mode security research skill. Orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity by actual exploitability. Use for security review, vulnerability research, exploitability audit, pre-release security check, threat model validation, and `/security-research`. Triggers: 'security-research', 'security research', 'security review', 'vulnerability audit', 'exploitability audit', '보안 리뷰', '취약점 감사'.

io.github.markus41/claude/ha-automation

Automation YAML patterns, triggers, conditions, actions, and best practices for Home Assistant.