Skill UI

A comprehensive guide detailing best practices for executing commands on Windows using PowerShell and CMD. It addresses critical pitfalls such as handling spaces in file paths, ensuring correct character encoding (UTF-8), using native cmdlets, and managing long path limits. Essential for developers building robust, cross-platform Windows automation scripts.

This guide serves as a comprehensive blueprint for architecting and structuring Golang projects. It covers best practices for defining project types (CLI, Service, Library, Monorepo), adhering to 12-Factor App principles, standardizing module naming conventions, and establishing optimal directory layouts (cmd/, internal/, pkg/). Use it when starting a new Go application or refactoring a complex codebase to ensure maintainability and scalability.

This skill acts as the interactive command center for the Freshie ecosystem's CMDB. It tracks plugins, skills, and packs, providing comprehensive health checks, compliance validation, and historical trend analysis across 50 tables. Use it for running discovery scans, auditing compliance grades, querying deep inventory data, or generating detailed status reports.

A comprehensive guide for writing, debugging, and maintaining Windows batch files (.bat/.cmd). This skill covers advanced CMD scripting techniques, including environment variable management, complex control flow (IF, FOR), argument parsing, delayed expansion, and command chaining. Ideal for automating system tasks, creating command-line utilities (CLI), managing deployments, or writing scheduled task scripts in Windows environments.

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.