Skill UI

A comprehensive security assessment skill for identifying vulnerabilities in federated identity systems, including SAML, OIDC, and OAuth 2.0 flows. It covers common misconfigurations, such as signature tampering, PKCE failures, redirect URI issues, and token confusion, ensuring robust SSO implementation.

A comprehensive, multi-phase methodology for debugging complex software issues. This guide mandates systematic root cause investigation, starting from symptom collection, code path tracing, hypothesis formulation, and deterministic reproduction. It teaches developers to fix the underlying cause, not just the visible symptoms, ensuring highly robust and minimal changes.

Guideline for front-end JavaScript reverse engineering using js-reverse MCP tools and jshookmcp. Covers locating signature and encrypted parameters, tracing request initiators, runtime sampling via hooks, local Node environment reconstruction, and evidence-first output for reproducing signing logic.

A comprehensive skill for managing KubeSphere's external access gateway using ingress-nginx. It supports cluster, workspace, and project-level ingress setup, covering installation planning, status monitoring, upgrade management, and graceful uninstallation across multiple Kubernetes clusters.

This comprehensive pipeline automates the entire software release cycle, from merging a Pull Request (PR) to verifying the final deployment. It performs critical steps including CI status checks, waiting for build completion, executing pre-merge readiness gates (staleness, testing, documentation), and finally merging and detecting the target deployment platform for a controlled, reliable release.

This skill generates complete, deploy-ready static landing pages by analyzing a source code repository. It reads key files (README.md, CHANGELOG.md, etc.), extracts structured content (features, installation guides, FAQ), and compiles it into a professional, responsive HTML/CSS/JS site. Ideal for standardizing open-source project showcases, converting technical documentation into marketing pages, or quickly building a project homepage.

A comprehensive tool designed to help developers compare multiple technical approaches for solving a single problem. It systematically identifies and analyzes the trade-offs, complexity, performance, and learning curves associated with different design patterns (e.g., state management, data fetching, API design). Ideal for architectural reviews and making informed, robust technology stack decisions.

This tool tests your deep understanding of code you have recently written or reviewed. It generates structured, multi-level questions (Recall, Understanding, Application, Analysis, Synthesis) based on the provided code. Users can focus the quiz on specific areas like error handling, performance, or security, making it an excellent mechanism for continuous learning and solidifying technical knowledge.

This tool provides a structured, multi-stage method for learning any technical concept, from basic definitions to advanced implementation details and common pitfalls. It progressively deepens the explanation, making complex topics easy to grasp.

A comprehensive framework for conducting authorized security assessments on Large Language Models (LLMs) and AI agents. It covers critical vulnerabilities including advanced prompt injection (OWASP Top 10), tool abuse, RAG data poisoning, memory manipulation, and system prompt extraction. Ideal for red teaming, security auditing, and ensuring the robustness of AI systems in production environments.

This comprehensive guide details the methodology for reverse engineering macOS and Mach-O binaries. It covers analyzing application bundles, deciphering Objective-C/Swift symbols, examining code signing and hardened runtime features, and performing both static (using tools like Ghidra, IDA) and dynamic analysis (using lldb, Frida) to aid in malware analysis and platform security research.

Comprehensive workflow for analyzing suspected malware via static, dynamic, and behavioral techniques. Covers IOC extraction, YARA/Sigma rule generation, sandbox automation, and anti-analysis bypassing.