Skill UI

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

This skill generates robust, production-grade Appium automation scripts for both Android and iOS. It supports multiple languages (Java, Python, JavaScript) and guides users through best practices for cross-platform testing, including proper locator strategies, explicit waiting, and complex gestures. Ideal for automating mobile QA processes on local emulators or cloud real device farms.

A systematic, non-mutating investigation designed for complex software failures, including bugs, regressions, crashes, and flaky behavior. This skill launches four specialized, read-only sub-agents in parallel to perform deep root-cause analysis, trace code paths, pinpoint the smallest failing seam, and predict the quickest path to confirming or fixing the issue. It is designed purely for diagnosis and hypothesis generation.

This skill performs a comprehensive, read-only, multi-agent review of a git diff or file scope. It launches four specialized sub-agents—covering Regression, Security, Performance, and Contracts—in parallel. The main agent then aggregates, filters, and summarizes critical findings, ensuring the code change is robust, secure, and maintainable. Ideal for pre-commit or Pull Request review workflows.