Skill UI

Scans Cosmos SDK chains and CosmWasm contracts for nine consensus-critical vulnerabilities such as non-determinism, incorrect GetSigners, and ABCI panics, returning findings and fix guidance when auditing or preparing new launches.

Analyzes smart contract codebases to enumerate externally callable state-changing functions, classify their access (public/role/contract-only), and produce structured audit-ready reports for Solidity, Vyper, Solana/Rust, Move, TON, and CosmWasm projects.

Automates Plasmic operations through Composio’s Rube MCP integration, guiding discovery of current tool schemas, connection validation, and schema-safe executions for reliable workflows.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

Learn how to build advanced, server-side business logic for Shopify using Shopify Functions and WebAssembly (WASM). This guide covers implementing custom discount rules, payment customizations, delivery option filtering, and cart transformations directly at the checkout. Designed for developers, it leverages the WASM sandbox for highly constrained, powerful e-commerce functionality.

This skill generates comprehensive end-to-end (E2E) automation tests using WebdriverIO (WDIO) in JavaScript or TypeScript. It supports various frameworks (Mocha, Jasmine, Cucumber) and includes advanced patterns like the Page Object Model (POM) and robust selector strategies. Users can configure tests for local execution or integrate with cloud services like LambdaTest, making it ideal for simulating complex user interactions and ensuring application quality across multiple browsers and environments.

A high-performance utility for executing simple, deterministic code transformations (e.g., removing console logs, converting var to const). This engine leverages a WASM core to perform structural refactoring sub-millisecond, without calling any expensive LLM APIs. Ideal for CI/CD pipelines, automated bulk refactoring, and cost-sensitive development workflows where determinism and speed are paramount.

This tool allows users to create and manage advanced WASM agents within a secure, sandboxed environment. It ensures complete isolation during code execution, making it ideal for running untrusted code, experimenting with complex agent configurations, or developing portable applications that require guaranteed safety without accessing the host system resources.

This tool suite provides functionality to interact with a community gallery for WebAssembly (WASM) agents. Users can browse available agents, search for specific functionalities, install pre-built agents, publish their own creations, and export agents for packaging. It streamlines the process of sharing and utilizing modular WASM components.

Reverse JavaScript-based custom DSL/VM interpreters, non-standard WASM-like runtimes, and risk-control engines. Use when analyzing IIFE or switch-based opcode dispatchers, extracting instruction tables, recovering bytecode semantics, capturing VM state at runtime, or reconstructing execution flow.

Analyze binaries with radare2/r2 from the command line, including reverse engineering, disassembly, function analysis, imports/strings inspection, patching, binary diffing, hex inspection, and r2 scripting. Supports PE/ELF/Mach-O/DEX/WASM files and sub-tools like rabin2, rasm2, radiff2, and r2pipe.

This skill focuses on reversing JavaScript-based custom DSL and Virtual Machine interpreters, commonly found in risk-control and captcha engines. It involves identifying IIFE and switch-based opcode dispatch patterns, extracting opcode tables, and capturing runtime semantics. The workflow includes static analysis for variable mapping and opcode classification, as well as runtime injection techniques to understand exported functions. It excludes standard WASM and typical Webpack bundles.