Skip to content

Skillselionwith God's help

By phase

IdeaResearch & spot demand
ValidateScope & prototype
BuildFrontend, backend, MCP
ShipTest, review, deploy
LaunchDistribution, SEO, ASO
GrowAnalytics & retention
OperateMonitoring & uptime

By type

Skills
Marketplaces
MCP servers
Workflows

Skills Marketplaces MCP Learn Brief

Browse all tools →By phase

Idea Validate Build Ship Launch Grow Operate

Explore

Skills
Marketplaces
MCP
Learn
Brief

This week for builders

Five minutes, every Monday — the tools, releases and tactics for shipping solo.

Email address

unsubscribe anytime.

Skillselion

An independent, curated directory of AI-coding tools for solo builders - skills, MCP servers, marketplaces and workflows for Claude Code, Codex and Cursor, organized by the indie build journey from idea to operate.

ResourcesBrowse Skills Browse MCP Servers Browse Marketplaces Browse Workflows Best-of shortlists Glossary State of AI Skills 2026 Weekly Brief

CommunityAbout Learn Feedback Privacy Policy Terms Cookie Policy Accessibility Cookie settings

Last updated June 10, 2026 · © 2026 Skillselion. Skillselion is an independent project and is not affiliated with Anthropic, OpenAI, Cursor, Claude, Claude Code, or Codex.

Skills/TANWEAI/XIANZHI RESEARCH

tanweai/xianzhi-research

1 skill · 1 installs · 170 stars · GitHub

Install

npx skills add https://github.com/tanweai/xianzhi-research

Skills in this repo

1Vuln ResearchVuln Research packages a meta-thinking methodology for security work drawn from a large corpus of practitioner writeups, giving solo builders and small teams a consistent way to hunt flaws instead of guessing payloads. The skill organizes thinking into stacked layers—from spotting interfaces where data and control mix, through hypothesis chains and corner-case exploration, to inferring bypasses from patches and filters—and ties each layer to a repeatable iterate loop. It applies when you are doing vulnerability research, penetration testing, source-to-sink code audit, red-team chain planning, malware reverse engineering, or CTF problem solving and need structured navigation across web, binary, and enterprise-trust domains. Triggers align with common Chinese and English security verbs so agents attach the right module for the scenario. It is advanced material meant to complement tooling, not replace responsible authorization and scope rules.1installs