Skills（SKILL.md）は、AIエージェント（Claude Code、Cursor、Codexなど）に特定の能力を追加するための設定ファイルです。
詳しく見る →Network 101 workflow skill. Use this skill when the user needs Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
network-engineer workflow skill. Use this skill when the user needs Expert network engineer specializing in modern cloud networking, security architectures, and performance optimization and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Not Human Search MCP workflow skill. Use this skill when the user needs Search AI-ready websites, inspect indexed site details, verify MCP endpoints, and discover tools and APIs using the Not Human Search MCP server and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Monitoring and Observability Setup workflow skill. Use this skill when the user needs You are a monitoring and observability expert specializing in implementing comprehensive monitoring solutions. Set up metrics collection, distributed tracing, log aggregation, and create insightful da and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
SLO Implementation Guide workflow skill. Use this skill when the user needs You are an SLO (Service Level Objective) expert specializing in implementing reliability standards and error budget-based engineering practices. Design comprehensive SLO frameworks, establish meaningful SLIs, and create monitoring systems that balance reliability with feature velocity and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Obsidian Flavored Markdown Skill workflow skill. Use this skill when the user needs Create and edit Obsidian Flavored Markdown with wikilinks, embeds, callouts, properties, and other Obsidian-specific syntax. Use when working with .md files in Obsidian, or when the user mentions wikilinks, callouts, frontmatter, tags, embeds, or Obsidian notes and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Odoo Automated Tests workflow skill. Use this skill when the user needs Write and run Odoo automated tests using TransactionCase, HttpCase, and browser tour tests. Covers test data setup, mocking, and CI integration and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Odoo Backup Strategy workflow skill. Use this skill when the user needs Complete Odoo backup and restore strategy: database dumps, filestore backup, automated scheduling, cloud storage upload, and tested restore procedures and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Odoo Localization & Compliance (l10n) workflow skill. Use this skill when the user needs Country-specific Odoo localization: tax configuration, e-invoicing (CFDI, FatturaPA, SAF-T), fiscal reporting, and country chart of accounts setup and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
OpenAPI Spec Generation workflow skill. Use this skill when the user needs Generate and maintain OpenAPI 3.1 specifications from code, design-first specs, and validation patterns. Use when creating API documentation, generating SDKs, or ensuring API contract compliance and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Native Parallel Agents workflow skill. Use this skill when the user needs Multi-agent orchestration patterns. Use when multiple independent tasks can run with different domain expertise or when comprehensive analysis requires multiple perspectives and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Pentest Checklist workflow skill. Use this skill when the user needs Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Pentest Commands workflow skill. Use this skill when the user needs Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
performance-engineer workflow skill. Use this skill when the user needs Expert performance engineer specializing in modern observability, and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Playwright Java \u2013 Advanced Test Automation workflow skill. Use this skill when the user needs Scaffold, write, debug, and enhance enterprise-grade Playwright E2E tests in Java using Page Object Model, JUnit 5, Allure reporting, and parallel execution and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Playwright Browser Automation workflow skill. Use this skill when the user needs IMPORTANT - Path Resolution: This skill can be installed in different locations (plugin system, manual installation, global, or project-specific). Before executing any commands, determine the skill directory based on where you loaded this SKILL.md file, and use that path in all commands below and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
posix-shell-pro workflow skill. Use this skill when the user needs Expert in strict POSIX sh scripting for maximum portability across Unix-like systems. Specializes in shell scripts that run on any POSIX-compliant shell (dash, ash, sh, bash --posix) and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
PostgreSQL Table Design workflow skill. Use this skill when the user needs Design a PostgreSQL-specific schema. Covers best-practices, data types, indexing, constraints, performance patterns, and advanced features and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
\ud83d\udcdd Prompt Library workflow skill. Use this skill when the user needs A comprehensive collection of battle-tested prompts inspired by awesome-chatgpt-prompts and community best practices and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Pypict Skill workflow skill. Use this skill when the user needs Pairwise test generation and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Python Project Scaffolding workflow skill. Use this skill when the user needs You are a Python project architecture expert specializing in scaffolding production-ready Python applications. Generate complete project structures with modern tooling (uv, FastAPI, Django), type hint and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
python-pro workflow skill. Use this skill when the user needs Master Python 3.12+ with modern features, async programming, performance optimization, and production-ready practices. Expert in the latest Python ecosystem including uv, ruff, pydantic, and FastAPI and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Python Testing Patterns workflow skill. Use this skill when the user needs Implement comprehensive testing strategies with pytest, fixtures, mocking, and test-driven development. Use when writing Python tests, setting up test suites, or implementing testing best practices and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
quant-analyst workflow skill. Use this skill when the user needs Build financial models, backtest trading strategies, and analyze market data. Implements risk metrics, portfolio optimization, and statistical arbitrage and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Red Team Tools and Methodology workflow skill. Use this skill when the user needs Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Returns & Reverse Logistics workflow skill. Use this skill when the user needs Codified expertise for returns authorisation, receipt and inspection, disposition decisions, refund processing, fraud detection, and warranty claims management and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Common RE scripting environments workflow skill. Use this skill when the user needs Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis. Masters IDA Pro, Ghidra, radare2, x64dbg, and modern RE toolchains and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
ruby-pro workflow skill. Use this skill when the user needs Write idiomatic Ruby code with metaprogramming, Rails patterns, and performance optimization. Specializes in Ruby on Rails, gem development, and testing frameworks and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Security Scanning Tools workflow skill. Use this skill when the user needs Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, configuration, and practical usage across different scanning categories and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Screen Reader Testing workflow skill. Use this skill when the user needs Practical guide to testing web applications with screen readers for comprehensive accessibility validation and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
search-specialist workflow skill. Use this skill when the user needs Expert web researcher using advanced search techniques and and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Security Auditing Workflow Bundle workflow skill. Use this skill when the user needs Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
security-auditor workflow skill. Use this skill when the user needs Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Regulatory Compliance Check workflow skill. Use this skill when the user needs You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Security Requirement Extraction workflow skill. Use this skill when the user needs Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Dependency Vulnerability Scanning workflow skill. Use this skill when the user needs You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
SAST Security Plugin workflow skill. Use this skill when the user needs 'Static Application Security Testing (SAST) for code vulnerability and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Semgrep Rule Variant Creator workflow skill. Use this skill when the user needs Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Service Mesh Expert workflow skill. Use this skill when the user needs Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh con and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Shodan Reconnaissance and Pentesting workflow skill. Use this skill when the user needs Provide systematic methodologies for leveraging Shodan as a reconnaissance tool during penetration testing engagements and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
SkillCheck workflow skill. Use this skill when the user needs Validate Claude Code skills against the agentskills specification. Catches structural, semantic, and naming issues before users do and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Skill Writer workflow skill. Use this skill when the user needs Create and improve agent skills following the Agent Skills specification. Use when asked to create, write, or update skills and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
SMTP Penetration Testing workflow skill. Use this skill when the user needs Conduct comprehensive security assessments of SMTP (Simple Mail Transfer Protocol) servers to identify vulnerabilities including open relays, user enumeration, weak authentication, and misconfiguration and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Spec-to-Code Compliance Checker Skill workflow skill. Use this skill when the user needs Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
SpecKit Safe Update workflow skill. Use this skill when the user needs SpecKit Safe Update and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
SQL Injection Testing workflow skill. Use this skill when the user needs Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
SSH Penetration Testing workflow skill. Use this skill when the user needs Conduct comprehensive SSH security assessments including enumeration, credential attacks, vulnerability exploitation, tunneling techniques, and post-exploitation activities. This skill covers the complete methodology for testing SSH service security and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
startup-analyst workflow skill. Use this skill when the user needs Expert startup business analyst specializing in market sizing, financial modeling, competitive analysis, and strategic planning for early-stage companies and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Rust Project Scaffolding workflow skill. Use this skill when the user needs You are a Rust project architecture expert specializing in scaffolding production-ready Rust applications. Generate complete project structures with cargo tooling, proper module organization, testing and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
tdd-orchestrator workflow skill. Use this skill when the user needs Master TDD orchestrator specializing in red-green-refactor discipline, multi-agent workflow coordination, and comprehensive test-driven development practices and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.