[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6DCYNXHFP27254FBPTR6P47":3,"skill-same:01M6DCYNXHFP27254FBPTR6P47":82},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":30,"linkOnly":31,"markdownContent":32,"markdownBody":33,"frontMatter":34,"refName":37,"commitSha":38,"skillDirectory":39,"forksCount":14,"repositoryHtmlUrl":40,"repositoryHomepageUrl":6,"ownerHtmlUrl":41,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":42,"install":43,"resources":56},"01M6DCYNXHFP27254FBPTR6P47","security-bounty-hunter",null,"Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.","Prekzursil\u002Fagent-skills-toolchain","Prekzursil","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F54636077?v=4","01M6DACZ1PCQHD99SCR1YXG28B","Andrei Mihai Visalon","01M6DACZ670WZF535V3WYYSS4Z",0,"MIT","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Fplatform\u002Frouting\u002Ffixtures\u002Fhome\u002F.agents\u002Fskills\u002Fsecurity-bounty-hunter\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29],"security","security bounty hunter","hunter","vulnerabilities","issues","direct","only","reports","hunt","local","adaptation","2026-11-10 10:12:30",false,"---\nname: security-bounty-hunter\ndescription: Hunt for exploitable, bounty-worthy security issues in repositories. Focuses on remotely reachable vulnerabilities that qualify for real reports instead of noisy local-only findings.\norigin: ECC direct-port adaptation\nversion: \"1.0.0\"\n---\n\n# Security Bounty Hunter\n\nUse this when the goal is practical vulnerability discovery for responsible disclosure or bounty submission, not a broad best-practices review.\n\n## When to Use\n\n- Scanning a repository for exploitable vulnerabilities\n- Preparing a Huntr, HackerOne, or similar bounty submission\n- Triage where the question is \"does this actually pay?\" rather than \"is this theoretically unsafe?\"\n\n## How It Works\n\nBias toward remotely reachable, user-controlled attack paths and throw away patterns that platforms routinely reject as informative or out of scope.\n\n## In-Scope Patterns\n\nThese are the kinds of issues that consistently matter:\n\n| Pattern | CWE | Typical impact |\n| --- | --- | --- |\n| SSRF through user-controlled URLs | CWE-918 | internal network access, cloud metadata theft |\n| Auth bypass in middleware or API guards | CWE-287 | unauthorized account or data access |\n| Remote deserialization or upload-to-RCE paths | CWE-502 | code execution |\n| SQL injection in reachable endpoints | CWE-89 | data exfiltration, auth bypass, data destruction |\n| Command injection in request handlers | CWE-78 | code execution |\n| Path traversal in file-serving paths | CWE-22 | arbitrary file read or write |\n| Auto-triggered XSS | CWE-79 | session theft, admin compromise |\n\n## Skip These\n\nThese are usually low-signal or out of bounty scope unless the program says otherwise:\n\n- Local-only `pickle.loads`, `torch.load`, or equivalent with no remote path\n- `eval()` or `exec()` in CLI-only tooling\n\n### Workflow\n### Example Triage Loop\n### Report Structure\n### Description\n### Vulnerable Code\n### Proof of Concept\n### Impact\n### Affected Version\n### Quality Gate\n","# Security Bounty Hunter\n\nUse this when the goal is practical vulnerability discovery for responsible disclosure or bounty submission, not a broad best-practices review.\n\n## When to Use\n\n- Scanning a repository for exploitable vulnerabilities\n- Preparing a Huntr, HackerOne, or similar bounty submission\n- Triage where the question is \"does this actually pay?\" rather than \"is this theoretically unsafe?\"\n\n## How It Works\n\nBias toward remotely reachable, user-controlled attack paths and throw away patterns that platforms routinely reject as informative or out of scope.\n\n## In-Scope Patterns\n\nThese are the kinds of issues that consistently matter:\n\n| Pattern | CWE | Typical impact |\n| --- | --- | --- |\n| SSRF through user-controlled URLs | CWE-918 | internal network access, cloud metadata theft |\n| Auth bypass in middleware or API guards | CWE-287 | unauthorized account or data access |\n| Remote deserialization or upload-to-RCE paths | CWE-502 | code execution |\n| SQL injection in reachable endpoints | CWE-89 | data exfiltration, auth bypass, data destruction |\n| Command injection in request handlers | CWE-78 | code execution |\n| Path traversal in file-serving paths | CWE-22 | arbitrary file read or write |\n| Auto-triggered XSS | CWE-79 | session theft, admin compromise |\n\n## Skip These\n\nThese are usually low-signal or out of bounty scope unless the program says otherwise:\n\n- Local-only `pickle.loads`, `torch.load`, or equivalent with no remote path\n- `eval()` or `exec()` in CLI-only tooling\n\n### Workflow\n### Example Triage Loop\n### Report Structure\n### Description\n### Vulnerable Code\n### Proof of Concept\n### Impact\n### Affected Version\n### Quality Gate\n",{"name":5,"origin":35,"version":36,"description":7},"ECC direct-port adaptation","1.0.0","main","a298c929b6cbd662e1fce54302ce520d5ceea1a5","platform\u002Frouting\u002Ffixtures\u002Fhome\u002F.agents\u002Fskills\u002Fsecurity-bounty-hunter","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain","https:\u002F\u002Fgithub.com\u002FPrekzursil","2026-11-02 14:30:57",{"source":8,"skillName":5,"commands":44,"prompt":54,"zipAvailable":55},[45,48,51],{"tool":46,"command":47},"npx","npx skills add Prekzursil\u002Fagent-skills-toolchain --skill security-bounty-hunter",{"tool":49,"command":50},"bunx","bunx skills add Prekzursil\u002Fagent-skills-toolchain --skill security-bounty-hunter",{"tool":52,"command":53},"pnpm","pnpm dlx skills add Prekzursil\u002Fagent-skills-toolchain --skill security-bounty-hunter","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Fplatform\u002Frouting\u002Ffixtures\u002Fhome\u002F.agents\u002Fskills\u002Fsecurity-bounty-hunter\u002FSKILL.md",true,[57,62,68,72,76],{"path":58,"resourceType":58,"resourceTypeDesc":59,"sizeBytes":60,"sourceHtmlUrl":61},"LICENSE","许可证",1071,"https:\u002F\u002Fgithub.com\u002Fstrmt7\u002Fai_skills_collection_benchmarked\u002Fblob\u002Fmain\u002Fincluded\u002Fimproved\u002Fskills\u002Ffrontend-patterns-current\u002FLICENSE",{"path":63,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":66,"sourceHtmlUrl":67},"NOTICE.md","REFERENCE","参考文档",881,"https:\u002F\u002Fgithub.com\u002Fstrmt7\u002Fai_skills_collection_benchmarked\u002Fblob\u002Fmain\u002Fincluded\u002Fimproved\u002Fskills\u002Ffrontend-patterns-current\u002FNOTICE.md",{"path":69,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":70,"sourceHtmlUrl":71},"provenance\u002Foriginal-agents\u002Fopenai.yaml",251,"https:\u002F\u002Fgithub.com\u002Fstrmt7\u002Fai_skills_collection_benchmarked\u002Fblob\u002Fmain\u002Fincluded\u002Fimproved\u002Fskills\u002Ffrontend-patterns-current\u002Fprovenance\u002Foriginal-agents\u002Fopenai.yaml",{"path":73,"resourceType":64,"resourceTypeDesc":65,"sizeBytes":74,"sourceHtmlUrl":75},"provenance\u002Foriginal-SKILL.md",14773,"https:\u002F\u002Fgithub.com\u002Fstrmt7\u002Fai_skills_collection_benchmarked\u002Fblob\u002Fmain\u002Fincluded\u002Fimproved\u002Fskills\u002Ffrontend-patterns-current\u002Fprovenance\u002Foriginal-SKILL.md",{"path":77,"resourceType":78,"resourceTypeDesc":79,"sizeBytes":80,"sourceHtmlUrl":81},"references\u002Frequest.ts","SCRIPT","脚本",2108,"https:\u002F\u002Fgithub.com\u002Fstrmt7\u002Fai_skills_collection_benchmarked\u002Fblob\u002Fmain\u002Fincluded\u002Fimproved\u002Fskills\u002Ffrontend-patterns-current\u002Freferences\u002Frequest.ts",[83,105,135,162,175,191],{"skillNo":84,"name":85,"nameZh":6,"description":86,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":87,"categories":88,"keywords":89,"publishedAt":30},"01M6DF7D7478R55P46REYH4QAC","clarify-requirements","Resolve genuine pre-execution ambiguity by scanning repo context, generating 1-6 grounded options, and asking 1-3 focused questions via AskUserQuestion. NOT for mid-task use (injection risk); NOT when the goal is already unambiguous; use to disambiguate vague prompts before any file edits.","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Fworkspace-hooks\u002Fskills\u002Fclarify-requirements\u002FSKILL.md",[],[90,91,92,93,94,95,96,97,98,99,100,101,102,103,104],"clarify requirements","clarify","requirements","risk","options","task","prompts","goal","scanning","use","context","repo","injection","execution","file",{"skillNo":106,"name":107,"nameZh":6,"description":108,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":109,"categories":110,"keywords":116,"publishedAt":30},"01M6DF79CA4BHJS66J8EZDBPWJ","openmm-md","Run FREE, open-source, Windows-native GPU molecular dynamics via the openmm-md MCP (OpenMM + CUDA on the local NVIDIA GPU). Use for protein \u002F protein-ligand MD when you want a free stack or are on Windows without a Schrodinger license. Covers the full workflow (prepare, solvate, minimize, equilibrate, production, analyze, mmgbsa) AND an honest decision guide vs Schrodinger Desmond, including how to run Desmond legitimately on Linux or a cloud GPU with a real license. This is a deliberately LESSER free alternative and does NOT replace the schrodinger MCP tools. Do NOT use it to pick a free tool when a validated FEP+, WaterMap, IFD-MD, or Prime MM-GBSA result is actually required.","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Fmcp\u002Fopenmm-md-mcp\u002Fskill\u002Fopenmm-md\u002FSKILL.md",[111],{"categoryNo":112,"categoryName":113,"taxonomyType":114,"taxonomyTypeDesc":115},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[117,118,119,120,121,122,123,124,125,126,127,128,129,130,99,131,132,28,133,134],"openmm md","how","decision","pick","linux","analyze","tool","stack","open","NVIDIA","gpu","license","workflow","windows","free","molecular dynamics","do","MCP",{"skillNo":136,"name":137,"nameZh":6,"description":138,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":139,"categories":140,"keywords":147,"publishedAt":30},"01M6DF76C1MG85VEWP8VZCBNMN","visual-review","Take screenshots of web pages and UI using Playwright for visual review and iteration","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fvisual-review\u002FSKILL.md",[141,144],{"categoryNo":142,"categoryName":143,"taxonomyType":114,"taxonomyTypeDesc":115},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":145,"categoryName":146,"taxonomyType":114,"taxonomyTypeDesc":115},"01JBSEEDCAT000000000000008","测试与质量",[148,149,150,151,152,153,154,155,156,157,118,158,159,160,161],"review","visual","visual review","pages","web","false","iteration","take","check","slides","ui","screenshot","playwright","screenshots",{"skillNo":163,"name":164,"nameZh":6,"description":165,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":166,"categories":167,"keywords":168,"publishedAt":30},"01M6DF73AQVCBZKEN0YXEX9FXP","status","Diagnostic status report — shows metaswarm installation state, project setup, and potential issues","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fstatus\u002FSKILL.md",[],[164,169,170,171,172,173,23,174],"setup","report","project","installation","project setup","state",{"skillNo":176,"name":177,"nameZh":6,"description":178,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":179,"categories":180,"keywords":182,"publishedAt":30},"01M6DF6X6C2XB0P6GX76P7TTYV","start","Use when starting work on any task, when the user mentions metaswarm, or when the user wants to begin tracked development work","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fstart\u002FSKILL.md",[181],{"categoryNo":112,"categoryName":113,"taxonomyType":114,"taxonomyTypeDesc":115},[177,183,95,184,185,186,99,187,188,189,190],"start issue","issue","ready","work on issue","user","work","work on","development",{"skillNo":192,"name":169,"nameZh":6,"description":193,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":194,"categories":195,"keywords":196,"publishedAt":30},"01M6DF6QMJ9AJKFKHHKRT005PQ","Interactive project setup — detects your project, configures metaswarm, writes project-local files","https:\u002F\u002Fgithub.com\u002FPrekzursil\u002Fagent-skills-toolchain\u002Fblob\u002Fmain\u002Ftools\u002Feditor\u002Fmetaswarm\u002Fskills\u002Fsetup\u002FSKILL.md",[],[169,171,28,197,173,198],"files","interactive"]