Skill UI

This skill provides a comprehensive playbook for testing the security of SAML-based Single Sign-On (SSO) solutions. It focuses on validating assertion trust by checking signature coverage, audience and recipient restrictions, handling of Assertion Consumer Service (ACS), and identifying potential XML parsing weaknesses or IdP/SP confusion flaws. Use this when evaluating enterprise authentication systems for critical security vulnerabilities.

This tool searches a comprehensive database of over 2500 curated open-source repositories for tools related to Large Language Models (LLMs), ChatGPT, RAG, agents, and NLP. It interprets natural language queries, converts non-English inputs to core English keywords, and systematically filters results across multiple specialized categories (e.g., LangChain, Chatbots, CLIs). Use it whenever the user needs to find specific AI development libraries or open-source AI tooling.

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

Provides essential database abstractions and utility classes for robust API development. This module includes components like FilterUtil, ValueFilter, and ValueFilterRegistry, allowing developers to implement standardized, efficient, and complex data querying and filtering logic across various database contexts.

MockHunter is an advanced skill designed to audit live web pages, providing a comprehensive reality check on visible data. It analyzes every element to determine its true source: whether it is REAL (from the database), MOCK (simulated data), LLM-generated, HARDCODED, BROKEN (broken endpoints), or UNKNOWN. Ideal for auditing AI-generated UIs or reviewing proof-of-concept MVPs before customer sign-off.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

This CLI alias executes a comprehensive teardown protocol for PUA agents, designed for development environments. It safely releases all active agent and loop states, ensuring a clean system reset. It automatically manages configuration files like ~/.pua/config.json, preserving unknown fields while providing reliable, evidence-based cleanup.

A comprehensive pre-production audit tool that scans a codebase for critical issues across eight dimensions: security, database, deployment, code quality, AI/LLM usage, dependencies, frontend, and observability. It intercepts deployment commands, forcing users to resolve critical failures before shipping code. The audit is stack-agnostic and provides detailed pass/fail/manual reports.

This guide outlines architectural patterns and best practices for building scalable, production-ready APIs with FastAPI. It covers proper project structure, separating concerns using routers, services, and CRUD layers, implementing dependency injection for database sessions and authentication, defining Pydantic schemas for request/response, handling asynchronous operations, and managing custom error responses.

Flox is a declarative, Nix-based environment manager designed to create perfectly reproducible development environments. It handles system-level dependencies (like compilers, databases, and native libraries) and ensures that complex toolchains across multiple languages (Python, Node.js, Go, etc.) function identically across macOS and Linux. Ideal for solving 'works on my machine' issues and onboarding new team members instantly.

A comprehensive toolkit providing source generators and base classes for implementing the Model-View-ViewModel (MVVM) pattern in .NET applications. It simplifies the creation of observable properties, commands, and validation logic, significantly reducing boilerplate code. Supports major cross-platform UI frameworks including WPF, WinUI 3, MAUI, and Avalonia.

A comprehensive tool for monitoring SEO performance changes. It captures baselines of critical on-page SEO elements (titles, meta tags, headings, Core Web Vitals) and detects regressions or "drift" over time. Use it to compare current page states against stored standards to ensure consistent SEO integrity after updates or deployments.