Skills

移动应用安全深度测试专业技能（v3.0）：移动端深层攻击链（App→API→后端→云）、Android/iOS深度逆向与动态调试、Frida全面对抗与加固脱壳、iOS越狱检测绕过/ObjC Runtime/LLDB调试/证书固定绕过、跨平台框架漏洞（Flutter/React…

网络渗透测试/红队攻击链深度专业技能（资深攻防专家版 v3.0）：红队攻击链整体规划与MITRE ATT&CK TTP映射、目标建模与决策树、高级外网打点(钓鱼联动/供应链/云资产入口)、隧道代理与C2隐蔽、内网信息收集与BloodHound CE图分析、AD域渗透深化(Kerberoast/DCSync/ADCS…

XPath/XQuery注入深度攻防专业技能：认证绕过、盲注高效提取（二分/字符集二分/位运算/超时外带/OAST）、任意节点读取完整攻击链、XPath 1.0/2.0/3.1差异、XQuery注入面（BaseX/eXist/MarkLogic）、XML安全联动（XXE/XInclude/XSLT…

Use Langfuse for LLM observability and evaluation and look up Langfuse documentation.

Buy or sell XAUT (Tether Gold) on Ethereum.

Design consultation: understands your product, researches the landscape, proposes a complete design system (aesthetic, typography, color, layout, spacing…

Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them.

Design shotgun: generate multiple AI design variants, open a comparison board, collect structured feedback, and iterate.

Set up gbrain for this coding agent: install the CLI, initialize a local PGLite or Supabase brain, register MCP, capture per-remote trust policy.

Set up and run an Aeon agent instance - get started from scratch, pick which skills to turn on or install more from packs, reschedule or change what runs…

Create an automation that keeps AGENTS.md current in one or more GitHub repositories.

Create an automation that implements GitHub issues when a configurable trigger label is applied.

Create an automation that implements GitLab issues when a configurable trigger label is applied.

Live-device iOS QA for SwiftUI apps.

Create, search, and update Notion pages/databases using the Notion API.

Reference skill for the OpenHands Cloud REST API (V1) and agent-server APIs, including how to start additional cloud or local backend conversations for…

Document and type a Sentry API endpoint.

UserPromptSubmit hook pattern that classifies prompts into six cost tiers and delegates to external model CLIs

Autonomous screenshot verification — captures, compares, and AI-evaluates UI changes for visual regressions

Scan the ClawHunter agent bounty marketplace for opportunities that genuinely match this agent's real capabilities (code, security research, writing) and…

云安全深度攻防与审计专业技能（v3.0）：AWS/Azure/GCP/阿里云全平台配置审计与云上渗透、IAM深度攻击（策略混淆代理/OIDC信任滥用/sts:AssumeRoot/21种提权路径）、云原生完整攻击链（元数据→IAM横向→数据泄露→权限提升）、容器与K8s逃逸、Serverless/Lambda注入、托…

Fastjson/Fastjson2反序列化漏洞深度利用专业技能：版本探测、AutoType全版本绕过、JNDI/BCEL/TemplatesImpl/c3p0利用链、1.2.83 Gadget-free RCE(CVE-2026-16723)、Fastjson2…

内网渗透测试深度专业技能：本地信息收集与凭证窃取(mimikatz/LSASS/ntds.dit)、内网探测与隐藏隧道(frp/Chisel/DNS/ICMP)、Windows/Linux提权、横向移动矩阵(IPC/WMI/DCOM/PSEXEC)、AD域渗透与域控接管(Zerologon/Kerberoast/AD…

Log4Shell（CVE-2021-44228）及 Log4j2 全漏洞家族深度利用专业技能：JNDI Lookup 全链路原理与利用、全变体家族（44228/45046/45105/44832/4104）、现代 JDK 高版本绕过矩阵（8u191/17/21+）、Lookup…