CLI Tools
Command line utilities
superlocalmemory
by qualixar
"AI agent memory with mathematical foundations. Store, recall, search, and manage memories locally with zero cloud dependency."
differential-fuzzer
by tursodatabase
Information about the differential fuzzer tool, how to run it and use it catch bugs in Turso. Always load this skill when running this tool
latex-paper-en
by bahayonghang
LaTeX academic paper assistant for English papers (IEEE, ACM, Springer, NeurIPS, ICML). Use when writing, reviewing, compiling, or improving English LaTeX academic papers. Use when user mentions compile, grammar, bibliography, deai, translate, title, logic, reviewer perspective, or any LaTeX paper quality improvement task. Domains: Deep Learning, Time Series, Industrial Control.
google-cloud-recipe-onboarding
by google
Guidance for a developer's first steps on Google Cloud, covering account creation, billing setup, project management, and deploying a first resource.
playwright
by rcarmo
Use Playwright for browser automation in this workspace. Install locally and run scripts as needed.
processon-mindmap-generator
by ZJU-REAL
ProcessOn 官方研发的 AI 脑图生成工具，专注于将自然语言、Markdown、长文本、文档、网页、图片文字等内容，一键生成结构清晰、层级分明、可编辑的专业思维导图。 无论是文章总结、资料整理、文档拆解、知识点归纳、学习路径梳理，还是读书笔记、论文文献梳理、会议纪要提炼、工作报告总结、方案大纲生成、项目任务拆解、头脑风暴与创意发散，都可以通过本技能快速生成专业脑图，帮助用户把零散内容转化为清晰的结构化知识。 本技能支持思维导图、逻辑图、组织结构图、鱼骨图、时间轴、树形图、表格图等 7 种专业图形布局，并深度集成 ProcessOn 在线协同平台。生成后的思维导图可在线编辑、协作修改、高效复用，适合职场办公、学习复习、科研阅读、知识管理和方案策划等场景。 注意：本技能主要用于生成思维导图和知识结构类脑图，不适用于流程图、泳道图、时序图、系统架构图、ER 图、Mermaid 图等流程或技术图表生成场景。
testing
by tursodatabase
How to write tests, when to use each type of test, and how to run them. Contains information about conversion of .test to .sqltest, and how to write .sqltest and rust tests
dotnet-inspect-performance
by richlander
Whole-assembly call-graph leverage ranking and performance triage for libraries (experimental).
dotnet-inspect-private-feeds
by richlander
Inspect packages from private and custom NuGet feeds safely — select and map sources, use credential providers or explicit configuration, diagnose authentication failures, and reason about source-bound caches and offline operation.
dotnet-inspect-correctness
by richlander
Judge whether code is sound and safe to call — its exception surface (throws, catches, exception types) and the unsafe operations in a method body.
dotnet-inspect-query
by richlander
Output formats, -D/-S discovery and selection, -Q query-capability discovery, value projection, @ categories, and output limits shared across commands.
dotnet-inspect-sourcelink
by richlander
Inspect source mapped by Portable PDB and SourceLink data — map files and member locations, fetch source, or resolve checksum-matched content locally.
dotnet-inspect-deep-inspect
by richlander
Run and interpret opt-in expensive validation lanes: full slow tests, IL round-trip sweep, corpus sensors, package discovery, validity scans, and analysis census.
dotnet-inspect-metadata
by richlander
Query raw ECMA-335 assembly metadata — discover table and heap sections, inspect decoded rows and handles, address table or heap coordinates, and project bounded machine-readable results.
dotnet-inspect-signals
by richlander
Surface a dependency's observable signals — provenance, compatibility, dependency risk, unsafe/PInvoke surface, artifact-text containment, and identifier confusion — to judge how much caution it warrants. Observations, not verdicts.
dotnet-inspect-relationships
by richlander
Map how code connects — implementors and subclasses, extension methods, dependency graphs, reverse callers, and ecosystem integrations. Many outputs are graph-shaped (add --mermaid).
acl-abuse
by blacklanternsecurity
Exploits misconfigured Active Directory ACLs for privilege escalation. Covers GenericAll, GenericWrite, WriteDACL, WriteOwner, ForceChangePassword, targeted Kerberoasting via SPN manipulation, shadow credentials (msDS-KeyCredentialLink → PKINIT), and AdminSDHolder persistence.
av-edr-evasion
by blacklanternsecurity
Bypass antivirus and EDR detection for payload delivery during exploitation. Covers custom payload compilation (mingw C, Go), AMSI bypass, shellcode alternatives, and ETW patching. Route here when an agent reports a payload was quarantined, blocked, or detected by endpoint protection.
command-injection
by blacklanternsecurity
Guide OS command injection exploitation during authorized penetration testing.
python-modern-tooling
by narumiruna
Use when choosing the right modern Python tooling workflow for a project or script (uv setup, quality tools, CLI, logging, packaging) or when unsure which Python tooling skill applies.
python-logging
by narumiruna
Use when choosing or configuring Python logging, especially deciding between stdlib logging and loguru for apps or CLIs.
container-escapes
by blacklanternsecurity
Container escape, Docker breakout, and Kubernetes exploitation.
kerberos-delegation
by blacklanternsecurity
Exploits Kerberos delegation misconfigurations for privilege escalation and lateral movement in Active Directory. Covers Unconstrained Delegation (TGT harvesting via coercion), Constrained Delegation (S4U2Self + S4U2Proxy with SPN swapping), and Resource-Based Constrained Delegation (RBCD via writable machine accounts).
kalshi
by machina-sports
Kalshi prediction markets — events, series, markets, trades, and candlestick data. Public API, no auth required for reads. US-regulated exchange (CFTC). Covers soccer, basketball, baseball, tennis, NFL, hockey event contracts. Use when: user asks about Kalshi-specific markets, event contracts, CFTC-regulated prediction markets, or candlestick/OHLC price history on sports outcomes. Don't use when: user asks about actual match results, scores, or statistics — use football-data or fastf1 instead. Don't use for general "who will win" questions unless Kalshi is specifically mentioned — try polymarket first (broader sports coverage). Don't use for news — use sports-news instead.