Skill UI

This guide details how to configure SMTP email delivery settings within a Webiny project using the `<Api.Mailer.Smtp />` component. It specifies the required properties (host, port, user, etc.) and emphasizes best practices, such as passing sensitive passwords via environment variables rather than hard-coding them. Ideal for developers setting up external email services.

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

A powerful skill that enables natural-language interaction with complex DeFi protocols across multiple EVM chains. It acts as a non-custodial agent, interpreting user prompts (e.g., 'swap X for Y') into simulated, multi-step transactions (like approve + swap). It utilizes account abstraction (EIP-7702/ERC-4337) to simulate and queue secure, user-signed transactions via the CLI, making advanced DeFi accessible from the terminal.

MockHunter is an advanced skill designed to audit live web pages, providing a comprehensive reality check on visible data. It analyzes every element to determine its true source: whether it is REAL (from the database), MOCK (simulated data), LLM-generated, HARDCODED, BROKEN (broken endpoints), or UNKNOWN. Ideal for auditing AI-generated UIs or reviewing proof-of-concept MVPs before customer sign-off.

This skill guides the design and optimization of production-grade multi-agent systems. It specializes in using LangGraph, LangChain, and DeepAgents to create structured, complex AI workflows. It covers state management, agent routing, memory integration, and tool calling, making it ideal for building robust, scalable agents like supervisors, planners, and coders.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.

This alias serves as a dedicated CLI command for Codex, simulating the core functionality of the Claude Code `/pua:on` command. It enables 'PUA always-on mode' by managing the `~/.pua/config.json` file. This utility is essential for maintaining continuous operational readiness and managing coding assistant feedback cycles.

This alias serves as a specialized Codex CLI interface for implementing the P7 protocol, mimicking the workflow of a P7 senior engineer. It enforces a highly structured development cycle: detailed planning, robust implementation, mandatory self-review (via three critical questions), and final, verifiable completion markers. Ideal for complex coding tasks requiring maximum rigor and accountability.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

This CLI alias serves as a system maintenance tool for PUA agent state. It scans for stale PUA agent data, identifying and safely removing only confirmed orphan records to maintain system integrity. It also manages configuration files, ensuring unknown fields are preserved when updating the primary config JSON.