Skill UI

Systematic methodology for using Shodan as a reconnaissance tool in authorized penetration testing, covering search queries, vulnerability discovery, IoT scanning, SSL analysis, and Python automation.

SkillCheck validates SKILL.md files against the agentskills specification and Anthropic best practices. It performs read-only checks on structure, semantics, naming, and quality to catch errors before publishing. The tool provides a score, grade, and detailed report with fix suggestions for critical issues to ensure high-quality skill authoring.

Build production-ready Slack apps using the Bolt framework in Python, JavaScript, or Java. Covers Block Kit rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration.

This tool automates complex Git workflows to save time and reduce manual overhead. It intelligently detects and groups related code changes, automatically generates descriptive branch names (e.g., fix/auth-bug), and streamlines the entire cycle: staging, committing, pushing, and creating Pull Requests (PRs). Use it to maintain clean, consistent commit histories efficiently.

Conduct authorized security assessments of SMTP servers to identify open relays, user enumeration, weak authentication, TLS issues, and misconfigurations using nmap, hydra, and smtp-user-enum.

This skill enables comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws and validate input sanitization. It supports detection of in-band, blind, and out-of-band attack vectors. Users can demonstrate exploitation techniques and extract data for authorized security testing purposes only. Requires explicit written permission before execution.

This skill enables comprehensive security assessments of SSH services. It covers enumeration, credential attacks, vulnerability exploitation, and configuration auditing using tools like Nmap, Hydra, and Metasploit. Suitable for authorized penetration testing and security research to identify weaknesses in SSH implementations.

Implement and verify Stripe checkout, subscriptions, webhooks, and refunds with explicit server-side authorization. Covers payment flows, webhook handling, subscription management, and customer management. Provides code patterns for hosted checkout, payment intents, and setup intents. Emphasizes security boundaries and proper use of test accounts.

This skill handles tasks involving Supabase, a backend-as-a-service platform. It covers database management, authentication, edge functions, storage, and real-time features. It includes guidance on client library integration with frameworks like Next.js and React. The skill emphasizes verifying changes against documentation, securing data with Row Level Security (RLS), and managing API keys safely. It helps resolve auth issues and implement secure database policies.

This skill performs external reconnaissance on software supply chain attack surfaces. It identifies public GitHub organizations, internal package names in JS/Python bundles, and Docker images. It checks for dependency confusion vulnerabilities by verifying if internal package names are available on public registries. Requires explicit authorization for offensive security assessments.

Create, manage and monitor systemd services and timer units on Linux. Covers unit file authoring, dependencies, socket activation, resource limits, security hardening, journalctl logs and production service debugging.

Expert in building Telegram Mini Apps (TWA) - web apps that run inside Telegram with native-like experience. Covers TON ecosystem, Telegram Web App API, payments, user authentication, and viral monetization.