All authors

Claude Skills by nuroctane
github.com/nuroctane628 skills1 installs644 views
- Securing Serverless Functions'Hardens serverless compute platforms (AWS Lambda, Azure Functions, GoogleVotes: 0GitHub stars: 3
- Testing Api For Broken Object Level Authorization'Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR,Votes: 0GitHub stars: 3
- Testing Api For Mass Assignment Vulnerability'Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifyingVotes: 0GitHub stars: 3
- Testing Api Security With Owasp Top 10Systematically assesses REST, GraphQL, and gRPC API endpoints against the OWASPVotes: 0GitHub stars: 3
- Testing For Broken Access ControlSystematically tests web applications and APIs for broken access controlVotes: 0GitHub stars: 3
- Testing For Business Logic VulnerabilitiesManually identifies flaws in application business logic - price manipulation,Votes: 0GitHub stars: 3
- Testing For Email Header InjectionTests web application email functionality (contact forms, password reset,Votes: 0GitHub stars: 3
- Testing For Json Web Token VulnerabilitiesTests JWT implementations for algorithm confusion, "none" algorithm bypass,Votes: 0GitHub stars: 3
- Testing For Open Redirect VulnerabilitiesIdentifies and exploits open redirect vulnerabilities by analyzing URLVotes: 0GitHub stars: 3
- Testing For Xss VulnerabilitiesTests web applications for reflected, stored, and DOM-based Cross-SiteVotes: 0GitHub stars: 3
- Testing Oauth2 Implementation FlawsTests OAuth 2.0 and OpenID Connect implementations for authorization codeVotes: 0GitHub stars: 3
- Testing Ransomware Recovery ProceduresTests and validates ransomware recovery procedures - backup restore operationsVotes: 0GitHub stars: 3
- Testing Websocket Api SecurityTests WebSocket API implementations for missing upgrade-handshake authentication,Votes: 0GitHub stars: 3
- Tracking Threat Actor InfrastructureDiscovers and maps adversary-controlled infrastructure (C2 servers,Votes: 0GitHub stars: 3
- Triaging Security Incident With Ir PlaybookClassifies and prioritizes security incidents using structured IRVotes: 0GitHub stars: 3
- Triaging Security Incident'Performs initial triage of security incidents using the NIST SPVotes: 0GitHub stars: 3
- Triaging Vulnerabilities With Ssvc FrameworkTriages and prioritizes vulnerabilities with CISA's Stakeholder-SpecificVotes: 0GitHub stars: 3
- Validating Backup Integrity For RecoveryValidates backup integrity through cryptographic hash verification,Votes: 0GitHub stars: 3
- SegaA playful, arcade-inspired interface for games — built on the VT323 pixel typeface, hard-edged 0px corners, chunky pill buttons that physically press into solid offset blocksVotes: 0GitHub stars: 3
- SendcutsendReview DXF and STEP/STP uploads for SendCutSend.com orders using its ordering guide, catalog, and specs. Use only for SendCutSend.com preflight reports covering upload readiness, selected material/SKU/thickness/service availability, and service-specific checks for laser cutting, CNC routing, bending, tapping, countersinking, hardware insertion, and finishing.Votes: 0GitHub stars: 3
- Shadcnshadcn/ui expert guidance — CLI, component installation, composition patterns, custom registries, theming, Tailwind CSS integration, and high-quality interface design. Use when initializing shadcn, adding components, composing product UI, building custom registries, configuring themes, or troubleshooting component issues.Votes: 0GitHub stars: 3
- ShapeWireframe-first pass — outputs an ASCII layout + state list + content inventory + question list before any code. Use when starting a new screen from scratch or when the user's brief is still ambiguous. Invoke when the user asks for shape on their UI, or mentions 'shape' alongside design / UI / frontend work.Votes: 0GitHub stars: 3
- Ship DeployMANDATORY ship/push/deploy pipeline for EVERY Laboratory repo. Triggers on: ship, push, deploy, put on main, land on main, merge to main, release, publish, sync main, install it (after code), backup after ship, or any request to put work on main / on the user's machine. NEVER bare git-push: always commit (if needed), push origin main, then 7z backup to D:\BACKUP\CODE Backups. nur-cli adds system install of nur.exe after backup. Read C:\Users\david\.agents\SHIP.md and/or run ship.ps1. User sho...Votes: 0GitHub stars: 3
- Site CliDerive a fast, reusable API client or CLI for any website by recording its network requests to a HAR file instead of driving the browser every time. Use whenever the user mentions building a "site CLI", making a CLI for a website/service, watching or recording network requests, HAR files, reverse-engineering a site's private/internal API, or automating a site that has no public API. The HAR is the source of truth; a client built without one is guessing.Votes: 0GitHub stars: 3
- SketchA friendly, hand-drawn sketch interface inspired by pencil illustrations on warm cream paper. Soft teal brand accents, hand-written display headings, rounded pill controls.Votes: 0GitHub stars: 3
- SkeumorphismReal-world mimicry with textured surfaces, 3D effects, and familiar physical metaphors for intuitive digital interfaces.Votes: 0GitHub stars: 3
- SolidityCreate production grade smart contracts. Use this skill when the user asks to write smart contracts, specially if they are going to be deployed to production (to a mainnet, or used in a mainnet script).Votes: 0GitHub stars: 3
- SpaciousGenerous whitespace, consistent padding, and grid-based layouts for clean, readable, and breathing interfaces.Votes: 0GitHub stars: 3
- Spanner BasicsAssists in provisioning instances and databases, designing performant schemas, and querying data in Spanner. Use when designing primary keys, writing SQL queries or client library code, or diagnosing performance issues.Votes: 0GitHub stars: 3
- Spl To AplTranslates Splunk SPL queries to Axiom APL. Provides command mappings, function equivalents, and syntax transformations. Use when migrating from Splunk, converting SPL queries, or learning APL equivalents of SPL patterns.Votes: 0GitHub stars: 3
- SquareGraceful, refined aesthetic with delicate typography, minimal palettes, and polished layouts that exude sophistication.Votes: 0GitHub stars: 3
- SrdfMoveIt2 SRDF authoring, validation, and planning-semantics workflow. Use when creating, editing, inspecting, or validating `.srdf` files, MoveIt planning groups, virtual joints, passive joints, end effectors, group states, disabled collisions, URDF-paired planning semantics, or SRDF handoff for live review. Use the URDF skill for robot structure and the SDF skill for simulator descriptions. Open and visually review existing SRDF files in CAD Viewer.Votes: 0GitHub stars: 3
- SreExpert SRE investigator for incidents and debugging. Uses hypothesis-driven methodology and systematic triage. Can query Axiom observability when available. Use for incident response, root cause analysis, production debugging, or log investigation.Votes: 0GitHub stars: 3
- StartFront door. Reads the current project (framework, tokens, brief, spec, harness) and reports what ui-craft can do right now, then routes you to the right next step. Run this first if you're new or unsure where to begin. No code changes. Invoke when the user asks for start on their UI, or mentions 'start' alongside design / UI / frontend work.Votes: 0GitHub stars: 3
- Step PartsFind, evaluate, and download common purchasable CAD parts from step.parts, including named off-the-shelf actuators, servos, motors, electronics boards, connectors, screws, bolts, nuts, washers, bearings, standoffs, and other catalog components. Use when Codex needs to search the hosted step.parts catalog before creating simplified placeholder geometry, resolve fuzzy part names, standards, aliases, or dimensions, choose a matching part, fetch a canonical .step file, verify checksums, or use th...Votes: 0GitHub stars: 3
- StitchClean, high-contrast enterprise design for data-driven workflows with intuitive drag-and-drop patterns and structured layouts.Votes: 0GitHub stars: 3
- StorytellingNarrative-driven design using visuals, copy, and interaction to guide users through engaging, emotionally resonant journeys.Votes: 0GitHub stars: 3
- Subagent OrchestrationSubagent personas + orchestration patterns (port of pi-subagents by @nicopreme). Delegate with the right persona, fan out/sequence with the agent tool, isolate writers with fractal worktrees. Includes code mode: scripted orchestration in plain JS that loops, fans out, awaits, branches on real child output, mixes parallel/sequential phases, and isolates each child in its own git worktree - for native agents (nur run) and OMP.Votes: 0GitHub stars: 3
- T3code`t3code` (https://github.com/pingdotgg/t3code) is a minimal GUI for coding agents (Codex, Claude, Cursor, OpenCode, Grok) that **delegates 100% of LLM auth to vendor CLIs** and never stores API keys. Its control plane (pairing + DPoP bearer) secures its own server.Votes: 0GitHub stars: 3
- Takumi UsageRender OG cards and images from JSX/HTML with Takumi (kane50613) — the no-headless-browser Rust engine. For when a project or task wants image/OG-card output without spinning up Chromium.Votes: 0GitHub stars: 3
- Tech SpecWrite a typed call-stack architecture handoff.Votes: 0GitHub stars: 3
- Terminal BrowserIn-terminal Chromium via terminal-browser (https://terminal-browser.com/). Show a website or local HTML beside the agent, then drive the open tab with snapshot/click/fill. On Windows, Nur uses a host fallback through agent-browser-cli when the upstream binary is missing. Use when the user wants a side-by-side browser, HTML plan preview, localhost preview, or agent-driven browser actions in the terminal.Votes: 0GitHub stars: 3
- TerracottaA sun-baked, clay-toned editorial interface built on warm cream surfaces, ink-brown headlines set in a display serif, and a single terracotta accent.Votes: 0GitHub stars: 3
- TetrisClassic block-game inspired design with playful colors, bold display fonts, and compact, high-energy layouts.Votes: 0GitHub stars: 3
- Tldraw OfflineOperate the user's tldraw offline canvas app, including open .tldraw or .tldr files. Use whenever a task involves inspecting, editing, arranging, connecting, linting, or scripting a tldraw Desktop canvas.Votes: 0GitHub stars: 3
- TokensAudit or establish the project's 3-layer token spine. Invoke when the user asks for tokens on their UI, or mentions 'tokens' alongside design / UI / frontend work.Votes: 0GitHub stars: 3
- ToolcraftPointer skill for Toolcraft - project-specific craft tooling and its live docs. Use when the user mentions Toolcraft, design-app scaffold, craft tooling, or wants the upstream Toolcraft workflow. Does not embed the full guide; load the linked docs when activated.Votes: 0GitHub stars: 3
- TurbopackTurbopack expert guidance. Use when configuring the Next.js bundler, optimizing HMR, debugging build issues, or understanding the Turbopack vs Webpack differences.Votes: 0GitHub stars: 3
- TypesetTypography pass covering font choice, modular scale, tracking, leading, weight hierarchy, and micro-typography details. Use when fonts feel generic (default Inter with no reason), the scale is ad hoc, hierarchy is flat, or the user says \"fix the typography\" / \"the text doesn't feel right\". Invoke when the user asks for typeset on their UI, or mentions 'typeset' alongside design / UI / frontend work.Votes: 0GitHub stars: 3
- Ui Craft Dense DashboardDense dashboard / admin / Bloomberg / Retool / data-heavy internal tools. Locked knobs: CRAFT=7, MOTION=3, DENSITY=9. IBM Plex + mono numbers, semantic palette, 4/8px grid, sparklines, tabular-nums. Trigger on: dashboard, admin panel, data-dense, analytics, Bloomberg-like, Retool-like.Votes: 0GitHub stars: 3