Skill UI

A methodical pathfinder that learns each codebase, storing findings in .notebook/ while guiding developers through bug fixes, feature work, and investigations without guessing.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

Systematically verifies suspected security bugs to eliminate false positives and document evidence, guiding each finding through the standard or deep verification path and producing TRUE POSITIVE or FALSE POSITIVE verdicts.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill applies a rigorous, evidence-first discipline to coding tasks, inspired by Fable-like best practices. It guides agents through a structured workflow: inspecting the workspace, tracking goals and findings, grounding all conclusions in verifiable evidence, and executing thorough verification gates before declaring completion. Ideal for complex development, debugging, or adapting cross-model prompt guidance into robust, verifiable project rules.

A comprehensive, four-phase methodology for debugging complex software issues. It guides users through root cause investigation, pattern analysis, hypothesis testing, and controlled implementation. The core principle emphasizes finding the underlying cause rather than applying quick, symptomatic fixes, ensuring robust and reliable code improvements across various failure scenarios.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

A comprehensive tool for finding solutions to software errors, API usage issues, and compatibility problems by searching major developer communities, official documentation, GitHub, Stack Exchange, and various Chinese technical forums. Ideal for debugging and discovery workflows, it aggregates real-world workarounds and technical Q&A, but results should not be cited as academic evidence.

Exa MCP provides advanced neural search capabilities across the web, specialized code repositories (like GitHub), and corporate/personnel databases. Use it for deep background research, finding the latest news, debugging complex code patterns, or conducting thorough market and competitor analysis.

This skill enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding. It applies First Principles and 5 Whys at a micro scale to maintain a stable mental model. Used for security auditing, architecture review, and threat modeling to reduce hallucinations and ensure bottom-up understanding.

A comprehensive methodology for conducting authorized bug bounty assessments. Covers the full pipeline from reconnaissance to validation and reporting, emphasizing impact-based hunting and avoiding theoretical vulnerabilities. Includes cluster hunting techniques for maximizing findings.