Skill UI

A comprehensive, multi-step framework for conducting systematic QA testing on web applications. This guide covers scope detection (diff-aware), tiered testing depth (Quick, Standard, Exhaustive), detailed issue taxonomy (Functional, Visual, UX, etc.), structured bug documentation, and the critical fix-and-verify loop, ensuring high code quality throughout the development cycle.

A comprehensive, multi-phase security scanner designed to audit development environments (Claude Code setup). It checks MCP servers, installed skills, agents, and hooks against known threat databases, malicious patterns, and supply chain vulnerabilities. Key checks include CVE screening, prompt injection detection, and unauthorized network access patterns.

Analyzes code changes to identify concrete defects such as bugs, logic errors, and edge-case failures. A practical assistant for development teams verifying pull requests and code revisions.

This guide provides comprehensive, battle-tested techniques for expanding access across a compromised network. It covers credential-based movement (Pass-the-Hash, Pass-the-Ticket), NTLM relay attacks, and remote execution protocols (WMI, WinRM). Used exclusively in authorized red team engagements and penetration testing, it details command sequences and OPSEC considerations required to reach high-value targets while minimizing detection.

A comprehensive methodology covering advanced offensive techniques targeting the software supply chain. This includes exploiting dependency confusion across npm, PyPI, and NuGet, executing build system hooks, tampering with CI/CD pipelines, and compromising container images. It provides detailed PoC patterns and detection guidance for red team operations.

This guide details how to implement physics simulation using Phaser 4's lightweight Arcade Physics engine. It enables features like top-down movement, gravity control, and collision detection (colliders) for building platformers and arcade-style games. It is essential for any game requiring dynamic movement or interaction between sprites and world boundaries.

Implement Roblox physical simulation and queries with assemblies, anchoring, constraints, collision groups, raycasts, overlap queries, impulses, forces, network ownership, and physics cleanup for collisions, hit detection, projectiles, vehicles, and knockback.

Generate tailored AGENTS.md and companion rules by analyzing codebases. Supports full, minimal, update, and dry-run modes with automatic package manager detection, monorepo support, and command validation. Creates living documentation matching your project's actual toolchain including setup commands, verification cycles, conventions, and architecture rules.

AWT provides AI coding tools with visual perception and interaction capabilities for web applications. It executes declarative YAML test scenarios using Playwright, featuring visual matching via OpenCV and OCR without relying on stable DOM selectors. Supports platform auto-detection for frameworks like React and Vue, includes structured failure diagnosis, and maintains a learning database for failure patterns. Ideal for end-to-end testing workflows requiring visual assertions and AI-assisted debugging.

This skill covers AWS CloudFormation template optimization, nested stack architecture, and production-ready patterns. It helps users write, review, and maintain infrastructure-as-code templates using YAML. Includes guidance on parameterization, drift detection, validation, and troubleshooting stack failures.

This guide covers troubleshooting Kubernetes pods in the crs namespace, specifically for the Buttercup fuzzing platform. It addresses common issues like CrashLoopBackOff, OOMKilled, and Redis failures. Learn to use kubectl commands for log analysis, resource monitoring, and cascade failure detection. Includes Redis debugging and queue inspection techniques.

Scan third-party package dependencies for known security vulnerabilities using tools like Snyk, Dependabot, and OWASP Dependency-Check. Essential for software composition analysis, supply chain security, and meeting compliance requirements. Automates vulnerability detection in CI/CD pipelines.