Skill UI

This guide provides a comprehensive methodology for performing directory traversal and path traversal testing on web applications. It covers identifying file path parameters, executing basic payloads (Linux/Windows), bypassing common security filters using encoding (URL, double, UTF-8), and automating the process with tools like ffuf and dotdotpwn. It also details advanced steps for local file inclusion (LFI) and potential escalation to Remote Code Execution (RCE) via log poisoning.

A comprehensive guide and set of payloads for penetration testing web applications that process XML input. It details how to test for major vulnerabilities such as XXE, XPath injection, SSRF, and XML parsing attacks, providing step-by-step workflows and advanced payloads for identifying data exposure and security flaws.

This guide details establishing confidential computing environments using AWS Nitro Enclaves for hardware-level isolation. It covers building secure enclaves for sensitive data (PII, PHI), configuring cryptographic attestation workflows, and integrating KMS policies using PCR-based conditions. Learn to harden workloads by moving secret decryption into isolated, verifiable hardware boundaries.

This advanced assistant profiles specified targets (scripts, processes, GPU, memory, etc.) to identify performance bottlenecks. It selects appropriate profiling strategies, runs external tools (e.g., cProfile, nvidia-smi), and can write code instrumentation to measure CPU, GPU, memory, and interconnect overheads. It generates a detailed, actionable report.

This skill detects malicious Command and Control (C2) communications tunneled through the DNS protocol. It analyzes DNS query logs for indicators such as DNS tunneling tools (Iodine, dnscat2), Domain Generation Algorithms (DGA), and encoded payloads within TXT/CNAME records. Techniques include Shannon entropy analysis of subdomains, statistical anomaly detection, and machine learning classification. Ideal for network security analysts conducting deep threat hunting and forensic investigations.

Guides calling Feishu IM APIs to retrieve chat histories, thread replies, cross-chat searches, and media/file downloads while handling pagination, time filters, and permission constraints so agents can answer questions about past conversations.

Accelerates GitHub cloning, release/raw/archive downloads, and other resource access for Mainland China users by rewriting URLs through githubproxy.cc or fallback ghfast.top, with an optional URL converter script for quick adaptation.

This guide details the functionalities for interacting with Lark Instant Messaging (IM). It covers core concepts like message types, threads, reactions, and flags, and provides methods for managing chat history, creating/managing groups, and handling various message resources (images, files, videos). It is essential for applications needing robust chat communication capabilities.

Deploy applications or static sites to Vercel instantly via a script that packages your project, auto-detects frameworks, uploads artifacts, and returns preview and claim URLs without requiring authentication.

This is an expert guide for writing, debugging, and validating complex expressions within n8n workflows. It covers core variables such as $json, $node, $now, and $env, detailing how to correctly access nested data from current nodes, previous nodes, and webhook payloads. Learn best practices for handling data structures, managing variable scopes, and avoiding common syntax errors to ensure reliable workflow automation.

This script provides a lightweight, standalone Python integration for Google Sheets, offering full read and write access without needing a dedicated server. Users can retrieve spreadsheet data in multiple formats (plain text, CSV, JSON), extract specific ranges, find sheets via search queries, and perform advanced write operations like updating, appending, or clearing cell values. It is highly suitable for automating data reporting, extraction, and workflow integrations involving Google Workspace.

A structured methodology for coordinating multiple, simultaneous investigation threads to determine the root cause of complex system failures, performance regressions, or integration bugs. This skill decomposes a large problem into independent tracks (e.g., database, application code, infrastructure), assigns ownership, and manages structured sync points (Continue/Pivot/Converge) to converge on a solution faster than serial debugging. Essential for high-stakes production incident response.