Generate and edit Draw.io, Mermaid, and Excalidraw diagrams from natural language using a structured JSON spec.
by nssa.io1.0k installs47 stars
Documents
cyberscope
Try itCyberScope — 可搜索的公开网络攻防/监控/审查方法参考目录：10 类目、62 方法、83 条 公开来源（MITRE ATT&CK、CISA、NIST、EFF、OWASP、SANS 等）。零依赖 Python 标准库 离线 CLI：加权搜索（title>keywords>description>resources）、单条明细、导出 json/csv/md、来源静态验证、目录质量报告（自改进钩子）、校验和锚点。纯参考性 文档——不含操作性/利用步骤。只读，不联网，确定性输出。
What it does
🔭 CyberScope — Cyber Operations Search Engine (Reference Skill)
The skill document
🔭 CyberScope — Cyber Operations Search Engine (Reference Skill)
A searchable, source-linked catalog of documented cyber-operations, surveillance, and censorship methods — for threat intelligence, research, education, and defensive modeling.
CyberScope is a self-contained Next.js + PostgreSQL application that catalogs 62 methods across 10 categories. Every method is a short, neutral description of a technique that is already publicly documented, and each is linked to authoritative public sources (MITRE ATT&CK, CISA, NIST, EFF, OWASP, SANS, and more). This skill packages the app, its data, and its documentation so it can be run and studied.
⚠️ What this skill is — and is not. It is a reference catalog: descriptions and citations of known techniques, of the same kind as MITRE ATT&CK or academic surveillance/censorship research. It contains no exploit code, no payloads, no step-by-step offensive instructions, and it must not be used to conduct or facilitate unauthorized access, surveillance, or disruption of systems you do not own. Use it for research, education, journalism, threat modeling, and defense only, and within the law.
The catalog at a glance (10 categories, 62 methods)
| # | Category | Examples of documented methods |
|---|---|---|
| I | Mass Data Collection & Interception | bulk metadata collection, fiber-optic cable tapping, full-take storage |
| II | Targeted Hacking & Network Penetration | credential phishing, supply-chain compromise, social engineering |
| III | Living-Off-the-Land & Stealth | LotL techniques, fileless malware, false-front operations |
| IV | Hack-and-Leak Operations | data exfiltration & release, timed strategic leaks |
| V | Denial-of-Service & Disruption | DDoS, wiper malware, website defacement |
| VI | Internet Censorship & Content Control | DPI, DNS poisoning, TLS reset injection, protocol whitelisting |
| VII | Internet Shutdowns & Access Manipulation | BGP manipulation, full shutdowns, national intranets |
| VIII | Domestic Surveillance & Legal Frameworks | data retention, lawful interception (SORM-type), camera networks |
| IX | Defensive Cyber Methods & Frameworks | MITRE ATT&CK-based testing, KEV catalog, segmentation |
| X | Intelligence Sharing & Coordination Methods | coordinated vulnerability disclosure, threat sharing |
Each method record carries: title, a one-line description, keywords, and one or more
curated resources (public URL + source + type) such as MITRE ATT&CK technique pages,
NIST publications, EFF analyses, and OWASP projects.
How to run it
Prerequisites: Node.js ≥ 20, npm, and a local PostgreSQL instance.
npm install
# point drizzle at your database (drizzle.config.json) and set the env var:
export DATABASE_URL="postgresql://user:pass@127.0.0.1:5432/app_db"
npx drizzle-kit push # create the schema
npm run dev # start at http://localhost:3000
curl -X POST http://localhost:3000/api/seed # load the 62 methods (idempotent)
API endpoints: /api/search?q=…, /api/categories, /api/methods, /api/stats,
/api/health, /api/seed.
Built-in security hardening (documented in SECURITY.md)
- Edge middleware: path-based blocking (
.env,.git/,.sql, …), user-agent filtering of attack tools, header-injection protection, URL/null-byte/double-encoding checks. - Security headers: strict CSP, HSTS,
X-Frame-Options: DENY, COOP/CORP/COEP,nosniff. - Rate limiting: per-endpoint sliding-window limits with 5-minute blocks.
- Input validation: Zod schemas, SQL-injection/XSS/path-traversal pattern blocking, length limits; parameterized queries via Drizzle ORM (no raw SQL).
- Output sanitization: DOMPurify for any rendered HTML,
rel="noopener noreferrer", protocol allow-listing (https://only).
Honest-use rules
- Reference only — this catalog documents what exists; it is not a guide for doing it.
- Lawful use — you may only use it for research, education, journalism, threat modeling, and defense, and only on systems/contexts you are authorized to study.
- No weaponization — do not derive or add executable attack steps from these entries.
- Cite, don't amplify — when writing from this catalog, link the public sources.
Files
src/lib/seed-data.ts— the 10 categories + 62 methods + curated resourcessrc/db/schema.ts— PostgreSQL schema (categories, methods, resources)src/app/api/*— search/categories/methods/stats/seed/health endpointssrc/lib/security/*,src/middleware.ts— security layersSECURITY.md— full defense-in-depth documentationREADME.md— permissions, security & privacy, verification hashes
Related skills
Save, search, and manage personal notes and knowledge bases in Get笔记 on explicit request.
by iswalle763 installs66 stars
Stores durable facts in a categorized, plain-markdown vault on disk, alongside your agent's built-in memory.
by Iván555 installs18 stars
Adaptive web scraping in Python that bypasses anti-bot systems and scales from single requests to concurrent crawls.
by d4vinci399 installs28 stars
Join a video meeting as an AI bot with voice, avatar, and screenshare across four operating modes.
by johnpatternai21 installs8 stars
Query Twitter/X profiles, tweets, follower events, and KOL data through the 6551 REST API.
by infra403840 installs27 stars
More from orionshaowswmw
Browse all skillsDetect and repair partially wiped agent workspaces with integrity checks, signed manifests, guarded restore recipes, bounded local recovery state, and explicit off-box sync. Use when files, scripts, trees, models, or build outputs disappear or lose integrity between turns.
by orionshaowswmw1 installs1 stars
Seven offline mechanisms against slow/stale/zombie/sycophantic agent turns: prompt compaction, request fencing, zombie detection, CAPTCHA triage, anti-sycophancy spine, delivery register, invention quarry. Use when chat feels laggy, reconnects surface old answers, long chats degrade, or the agent caves under contradiction. JSON contracts; state per-agent under ~/.arena_turn; no network, no sudo.
by orionshaowswmw2 installs
Quota-aware LLM router that squeezes maximum usable AI out of free-tier API keys across Gemini, Mistral, OpenRouter, Kilo and Cerebras plus any OpenAI-compatible endpoint (including local Ollama/llama.cpp/vLLM). Probes every model on every key, measures real quality and real published rate limits, then routes each request to the cheapest model that can do the job — spending abundant capacity first and reserving scarce daily quota for when it is actually needed. Persists cooldowns to disk so a 429 discovered in one process is respected by the next. Use when an agent must make many LLM calls on free keys without hitting rate limits, when "all models failed", or when deciding which of several provider keys to use for a task.
by orionshaowswmw2 installs
Opt-in, model-neutral guidance for evidence-aware, dignified AI communication, with a compact response contract and offline deterministic text audit. It never injects prompts, edits host configuration, calls networks, reads secrets, or treats heuristics as truth.
by orionshaowswmw2 installs
Iran Chemical Database — live, dated, auditable, BEST-EFFORT index of chemical offerings in configured public Iranian supplier catalogues (websites + public Telegram channels). HTTrack/WooCommerce-REST/Telegram mirroring → local-only parsing → RDKit/PubChem/CAS-validated PostgreSQL with FastAPI + Streamlit. Fail-closed Iranian-suppliers-only country gate; coverage measured and published, never claimed complete. Installation = software + queued crawl, not a populated dataset. Ships a 1399-molecule CID-unique confirmed-organic seed baseline (v2.22, 2026-08-27: v2.19 primary + live Telegram/WooCommerce/sitemap crawl + 5-model fleet normalization, every new identity PubChem-confirmed). For academic procurement research.
by orionshaowswmw3 installs
Model-agnostic, agent-agnostic fidelity-first pipeline converting operator-authorized Persian/English RTL lecture PDFs into offline HTML study guides — recall-first dual OCR (PyMuPDF + Tesseract fas+eng PSM ensemble), rendered-page evidence, multi-model correction, session-grounded enrichment (tables/flashcards/quizzes/mnemonics/summaries/scenarios), measured fidelity, QA gates, verified ZIP. v1.5.0 runs on ANY model family through 8 API dialects (OpenAI, Responses, Gemini, Anthropic, Cohere, Ollama, HuggingFace, offline mock) or with no model at all, auto-discovers providers from the host agent's environment, self-heals provider quirks and model retirements, and exposes one deterministic CLI/MCP entrypoint plus cross-model consensus so different agents reproduce the same intended result.
by orionshaowswmw2 installs