Skill UI

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

A structured methodology for validating non-trivial decisions by subjecting them to an adversarial, fresh-context review. This process is crucial when correctness is paramount—such as in production, security-sensitive logic, or complex architecture—by forcing a skeptical examination that aims to disprove assumptions rather than simply approve them.

This guide assists developers in building robust Model Context Protocol (MCP) servers and clients using C#/.NET. It specifically targets the stable 1.x NuGet packages, providing detailed instructions for configuring various transports (STDIO, Streamable HTTP), defining custom tools, prompts, and resources. It helps solve common integration issues like stale preview pinning, complex HTTP wiring, and structured content handling, ensuring production-ready, standard-compliant code.

This guide details the architectural and implementation patterns for building modular applications or microservices using the tinystruct Java framework. It covers core concepts like using the @Action annotation for dual routing (CLI/HTTP), managing request state with Context, and using native Builder for JSON serialization, ensuring a lightweight and structured development environment.

Expert skill for building Model Context Protocol (MCP) servers and tools from scratch. Covers the full development lifecycle—from defining tool schemas and resources to implementation, testing, and publishing to registries. Supports robust patterns using TypeScript and Python for integrating custom capabilities into AI agents.

This skill parses raw, verbose Simplicité log files from TXT format, filtering out noise and extracting only essential fields (e.g., timestamp, level, body). By converting logs into structured JSON, it significantly reduces the token size required for AI context optimization, making troubleshooting efficient and reliable.

This skill generates comprehensive Entity Relationship Diagrams (ERDs) and database schemas as D2 source code from an existing Entity Framework Core codebase. It analyzes DbContexts, DbSet declarations, Fluent API mappings, and migrations to accurately visualize tables, columns, primary/foreign keys, relationships (including many-to-many joins), owned types, and constraints. The output is a structured .d2 file, suitable for rendering into SVG or PNG, helping developers document the persistence model.