Backend development

Detects and exploits Server-Side Template Injection (SSTI) vulnerabilities across Jinja2, Twig, Freemarker, and other template engines to achieve remote code execution.

mukul975/Anthropic-Cybersecurity-Skills

Implements secure API key generation with sufficient entropy, server-side hashing (SHA-256/bcrypt) instead of plaintext storage, per-key scoping to endpoints/IPs/rate limits, zero-downtime rotation…

mukul975/Anthropic-Cybersecurity-Skills

Detects and exploits JavaScript prototype pollution vulnerabilities in client-side and server-side (Node.js) applications to achieve XSS, RCE, or authentication bypass through property injection…

mukul975/Anthropic-Cybersecurity-Skills

Get best practices for developing applications with Spring Boot.

github/awesome-copilot

Implement proven backend architecture patterns including Clean Architecture, Hexagonal Architecture, and Domain-Driven Design.

wshobson/agents

Verify device legitimacy and app integrity using DeviceCheck (DCDevice per-device bits) and App Attest (DCAppAttestService key generation, attestation, and assertion flows).

dpearson2699/swift-ios-skills

A skill your agent uses when the user says 'build me an app', 'create a project from this spec', 'scaffold a new repo', 'generate a starter', 'turn this idea into code', 'bootstrap a project', 'I…

alirezarezvani/claude-skills

awesome claude notes 的交互式安装程序 — 引导用户选择并安装技能和规则到用户级或项目级目录，验证路径，并可选择优化已安装文件。

loulanyue/awesome-claude-notes

Fetch and explain official documentation for any library, framework, API, or service using an llms.txt-first strategy — triggers on "How do I…", "What is…", "How does X work", "Best practice for…"…

fivetaku/gptaku-plugins-codex

API design and implementation across REST, GraphQL, gRPC, and tRPC patterns.

ancoleman/ai-design-components

Production infrastructure and request-origin facts for LLM Gateway — GCP hosting, production hostnames and which app serves each, deploy ordering, client IP extraction, forwarded headers, and…

theopenco/llmgateway

Testing patterns for FastAPI with pytest-asyncio, httpx AsyncClient, fixtures, and test data factories.

c0x12c/ai-toolkit

CloudBase Node SDK auth guide for server-side identity, user lookup, and custom login tickets.

TencentCloudBase/CloudBase-AI-Toolkit

Create Spring Boot Java Project Skeleton. An agent skill from github/awesome-copilot.

github/awesome-copilot

Create Spring Boot Kotlin Project Skeleton. An agent skill from github/awesome-copilot.

github/awesome-copilot

GraalVM Native Image expert that adds native image support to Java applications, builds the project, analyzes build errors, applies fixes, and iterates until successful compilation using Oracle best…

github/awesome-copilot

Get best practices for developing applications with Spring Boot and Kotlin.

github/awesome-copilot

Local ga4-measurement-protocol documentation reference (latest).

olorehq/olore

When you want to integrate an external tool, API, MCP server, or service into a project — the wizard walks you through auth, config, env vars, client wrapper code, example usage, and an optional…

coreyhaines31/makerskills

Creates Vaadin Browserless server-side unit tests for Vaadin views covering navigation, component interactions, form validation, grid operations, and notifications.

AI-Unified-Process/marketplace

Spring Boot best practices and patterns. An agent skill from decebals/claude-code-java.

decebals/claude-code-java

Create FastAPI routers with CRUD operations, authentication dependencies, and proper response models.

microsoft/skills

Maintains existing pytest and Django test suites without weakening correctness.

PostHog/posthog

Drive the real running PostHog Electron app (live tRPC, workspace-server, real data) over CDP with agent-browser.

PostHog/posthog

Points at the testing guide, the reference that defines the vocabulary for talking about tests, classifies them on six dimensions, and says how to choose which kind to write, with sections mapping…

ruby-git/ruby-git

Vercel Functions expert guidance — Serverless Functions, Edge Functions, Fluid Compute, streaming, Cron Jobs, and runtime configuration.

curvenote/curvenote

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models.

microsoft/ai-agents-for-beginners

Build local-first AI agents wey dey run fully for developer workstation wit Microsoft Foundry Local and Qwen function-calling models.

microsoft/ai-agents-for-beginners

Functional programming patterns for Node.js/Deno backend development using fp-ts, ReaderTaskEither, and functional dependency injection

sickn33/agentic-awesome-skills

Design and implement production-grade Pakistani payment integrations (JazzCash, Easypaisa, bank/PSP rails, optional Raast) for SaaS with PKR billing, webhook reliability, and reconciliation.

sickn33/agentic-awesome-skills

Guides decisions about when and how to extract code into services, queries, concerns, form objects, or other patterns.

ThibautBaissac/rails_ai_agents

Creates Rails concerns for shared behavior across models or controllers with TDD.

ThibautBaissac/rails_ai_agents

Audits Rails application security against OWASP Top 10, detects vulnerabilities with Brakeman, and verifies Pundit authorization policies.

ThibautBaissac/rails_ai_agents

Add or refine tests for specx Python services. An agent skill from maksimzayats/specx.

maksimzayats/specx

OmniStudio Integration Procedure creation and validation with 110-point scoring.

Jaganpro/sf-skills

Deploy a Dockerfile, source folder, or existing image to Cloudish as a running container at a live URL, built server-side with no local Docker, with confirmation before spending credits.

sickn33/agentic-awesome-skills

Hunt server-side template injection (SSTI) across Jinja2 (Flask/Django), Twig (Symfony), Freemarker (Java), ERB (Rails), Spring, Velocity, Mako, Thymeleaf, Smarty.

sickn33/agentic-awesome-skills

Build and fix existing Laravel applications through root-cause diagnosis, repository-native implementation, regression coverage, and risk-based verification.

sickn33/agentic-awesome-skills

You are a Python project architecture expert specializing in scaffolding production-ready Python applications.

sickn33/agentic-awesome-skills

Implement and verify Stripe checkout, subscriptions, webhooks and refunds with explicit server-side authorization and retry boundaries.

sickn33/agentic-awesome-skills

Manage authorized VPS hosts and server-side agents through cautious SSH and operations workflows.

sickn33/agentic-awesome-skills

Day-to-day Laravel Cloud operations with the cloud CLI and the Cloud REST API, plus the conventions for setting up a new Cloud app.

freekmurze/dotfiles

Frontend structure conventions for Laravel Inertia React applications based on Spatie's production practices.

freekmurze/dotfiles

End-to-end playbook for moving a Laravel or static site from a Forge/DigitalOcean server to Laravel Cloud, from preflight to decommissioning the old droplet.

freekmurze/dotfiles

Read and change DNS zones hosted at Openprovider through its REST API, including its quirks (prio on originalrecord, one record change per call, stale anycast nameservers, TTL clamping).

freekmurze/dotfiles

A skill your agent uses when settling the contract of an API you expose, before implementation: resources/URLs, REST vs GraphQL, versioning, one RFC 9457 error envelope, pagination, idempotency —…

ericrisco/rsc-harness

Laravel 框架特效安全审计工具。针对 Laravel 常见鉴权/CSRF/Session/模型填充/Blade 渲染等框架特性进行白盒静态审计，并将风险映射到你现有通用漏洞类型体系（AUTH/CSRF/LOGIC/XSS/CFG 等）。

0xShe/PHP-Code-Audit-Skill

A skill your agent uses when adding hypermedia links to REST responses, building self-describing APIs, or implementing Spring HATEOAS.

rrezartprebreza/spring-boot-skills