Skill UI

An internal utility designed for deep analysis of Python tracebacks. It performs Python-specific root-cause checks, provides guidance for minimal reproducible examples using pytest, and identifies precise targets for implementing defensive coding practices (like guard clauses or schema validation). Ideal for advanced debugging scenarios.

A planning framework for authorized security assessments, specifically bug bounty hunting. It guides users to confirm engagement types, define scope, and adopt an attacker mindset before executing tests. Includes workflows for red teaming, pentesting, and internal audits, emphasizing authorization and defensive guidance.

This skill covers identifying and exploiting HTTP request smuggling vulnerabilities (CL.TE, TE.CL, H2.CL, H2.TE). It includes fingerprinting front-end servers, crafting payloads for cache poisoning, and harvesting credentials via backend desyncs. Requires authorization and defensive guidance protocols.

A specialized security skill for identifying and exploiting race condition vulnerabilities in web applications. Focuses on synchronized request attacks, double-spending, and bypassing access controls. Requires explicit authorization and defensive guidance protocols before execution.