Git · For developers

CTF 挑战中的源码审计方法。当发现 .git 目录、.bak/.zip 备份、/proc/self/environ 泄露源码时使用。与真实代码审计不同——CTF 源码中的漏洞是故意设置的，通常只有 1-2 个关键点。先找危险函数（sink），再追溯输入（source）到该函数的路径。覆盖 PHP/Python/Node.js/Java 四种语言的危险函数和漏洞模式

wgpsec/AboutSecurity

自主连续开发方法论（Codex 版）。把一个项目按「每轮一个最小可提交单元」的方式推进到完成： 每轮读真相源 → 选下一个未做项 → 做一个最小单元 → 过验证门 → 记录勾选 → 最小提交 → 报进度。

bkywksj/knowledge-base

Build a Game Lab for one mechanic of a studio's game (the jump, a hit, a dash, a drift, a landing) and iterate on how it FEELS with the creator, side by side.

hashgraph-online/awesome-codex-plugins

Diagnose GitHub-driven agile workflow problems and guide feature branch development

jwynia/agent-skills

A skill your agent uses for any git work such as creating branches, staging changes, writing commit messages, pushing branches, or preparing pull requests.

fmflurry/settings-opencode

Provides automated documentation updates by analyzing git changes between the current branch and the last release tag.

giuseppe-trisciuoglio/developer-kit

Provides a structured 8-phase workflow for resolving GitHub issues in Claude Code.

giuseppe-trisciuoglio/developer-kit

This skill should be used when a brepjs GitHub Actions job is red or behaving oddly on github.com (a remote CI run, not a local pre-commit/pre-push hook) — "CI failed", "ci-pass is failing", "npm ci…

andymai/brepjs

You need to build software autonomously — a new project, a major feature, or any structured development task.

grandamenium/cortextos

在 rove 仓库内跑 auto-motion——把 transcription.srt 拆成多段 MG 动画镜头并拼接成竖屏视频(storyboard 分镜 + theme.md 全片主题 + 逐镜头 claude -p 子进程 + ffmpeg 拼接)。本 skill 是薄 wrapper:解析 auto-motion 模板根,继承 rove 品牌 theme,执行逻辑以…

Sma1lboy/rove

Create well-formatted commits with conventional commit messages and emoji

NeoLabHQ/context-engineering-kit

Verify what PR review comments have been addressed (committed/pushed OR uncommitted local changes) and resolve the threads that are genuinely fixed or no longer relevant.

NeoLabHQ/context-engineering-kit

Review your local uncommitted working-tree changes (git diff plus untracked files) and return actionable improvement suggestions.

NeoLabHQ/context-engineering-kit

Commit staged/unstaged changes with a well-crafted commit message.

haacked/dotfiles

End-of-session ritual. An agent skill from davepoon/buildwithclaude.

davepoon/buildwithclaude

Portfolio dashboard for all GSD-tracked projects. An agent skill from davepoon/buildwithclaude.

davepoon/buildwithclaude

Check whether the tests the agent said passed actually ran. An agent skill from davepoon/buildwithclaude.

davepoon/buildwithclaude

Shared library and file contracts for the fragility skills (system-history, bug-trace, refactor-plan, jira-refactor-findings, identify-fragile-systems, investigate-bug).

BuilderIO/agent-native

Session wrap-up for Home Assistant Homelab: summarize what changed, what is still open, and suggested next steps.

Apocrathia/home-assistant-config

Ultimate AI agent memory system for Cursor, Claude, ChatGPT & Copilot.

aAAaqwq/AGI-Super-Team

当 spec-start 需要为新 Spec 创建 GitHub Flow 工作分支，spec-update 需要复用/校验当前 Spec 分支，或 spec-end/spec-update 需要提交、推送、创建 PR、合并后清理分支时使用。也用于发版管理：建立或维护 release 分支、打版本 tag、发补丁版本、把修复 cherry-pick 到多条发布线、核对 tag…

HHU3637kr/skills

当项目首次接入 Spec 驱动开发 / R&K Flow，需要创建 AGENTS.md、.agents/rules/、 .agents/skills/、spec/ 目录、记忆系统和 HTML 报告资产时使用。

HHU3637kr/skills

当用户开始新的开发任务、需要启动完整 Spec 流程（需求对齐→探索→设计→实现→测试→收尾），或需要为一个新 Spec 创建协作上下文和 GitHub Flow 工作分支时使用。不要用于已有完成 Spec 的小迭代（用 spec-update）、项目首次初始化（用 spec-init）、运行期故障诊断与 bug 修复（用 spec-debug），或不需要启动 Spec…

HHU3637kr/skills

当一个 Version 已经完成线上发布与业务交付确认，需要进入最终收尾与归档时使用. An agent skill from HHU3637kr/skills.

HHU3637kr/skills

Add a new overridden game class or change an existing one in src/overrides, keeping game source out of git and documenting the edit in prose.

xD3I/PZ_Optimization

发版自动化技能：CalVer 版本号 + 从 git log 生成 changelog + GitHub Releases。

312362115/claude

Automatically performs git bisect to identify the first bad commit that introduced a bug or failure.

ArabelaTso/Skills-4-SE

Interact with Azure DevOps repositories, pull requests, and APIs using the AZUREDEVOPSTOKEN environment variable.

OpenHands/extensions

Interact with GitLab repositories, merge requests, and APIs using the GITLABTOKEN environment variable.

OpenHands/extensions

Этот скилл MUST быть вызван когда пользователь говорит про базы данных, список баз, "добавь базу", "какие базы есть", управление реестром .v8-project.json.

Arman-Kudaibergenov/1c-ai-development-kit

OrchestKit help directory with categorized skill listings. An agent skill from yonatangross/orchestkit.

yonatangross/orchestkit

Apply when committing, pushing, opening or updating a pull request, or closing out CI.

ZaxbyHub/opencode-swarm

Pre-flight checks then deploy. An agent skill from Houseofmvps/ultraship.

Houseofmvps/ultraship

ClawFirm 代码库文件分类规则。当用户提到"上传代码库"、"提交到 GitHub"、 "代码分类"、"文件归类"、"整理代码"、"push 到仓库"时自动激活。

npc-live/clawfirm

This skill should be used when the user requests a code review of changed files.

aiskillstore/marketplace

Advanced Git operations and workflows including interactive rebasing, conflict resolution, history manipulation, bisecting for bugs, cherry-picking, reflog recovery, and branch management strategies.

aiskillstore/marketplace

Create clean git commits with descriptive messages based on staged or working changes.

RedWoodOG/Hermes-Desktop

Ultracite multi-provider linting/formatting (Biome, ESLint, Oxlint).

secondsky/claude-skills

Repeatedly validate and fix a Jira implementation until tests, lint, builds, requirements, production readiness, and repository cleanliness all pass.

openshift-eng/ai-helpers

A skill your agent uses when the coordinator dispatches a BACKPORT BRIEF for a single branch.

openshift-eng/ai-helpers

Apply conventional commit formatting rules. An agent skill from openshift-eng/ai-helpers.

openshift-eng/ai-helpers

A skill your agent uses when resolving which GitHub repository to clone for CVE analysis from a container image name in a Jira ticket summary, pscomponent label, or Downstream Component Name field.

openshift-eng/ai-helpers

Generate, audit, or update GitHub READMEs with project-type-aware structure, voice calibration, and SEO/AEO discoverability guidance.

thatrebeccarae/claude-marketing

Pre-push hygiene check for GitHub repositories. An agent skill from thatrebeccarae/claude-marketing.

thatrebeccarae/claude-marketing

Review a drafted commit message in COMMITAGENTMSG against the staged diff, as an independent agent, for the things mechanical linting can't see: claims the diff doesn't support, counting, provenance…

tbhb/vale-ai-tells

Review a drafted pull request description in PRAGENTDESC.md against the branch it would publish, as an independent agent, for what mechanical checking can't see.

tbhb/vale-ai-tells

A skill your agent uses when preparing a Manor branch or change set for pull request, final review, commit, merge readiness, PR body, verification summary, or checking that tests/docs/self-hosted…

manor-os/manor-ai

文档同步 Skill，开发完成后自动更新 README、.claude/ 配置、specs CHANGELOG，保持文档与代码一致

kingxiaozhe/cm-workflow