Skill UI

Delivers repository-grounded AppSec threat models that map components, boundaries, assets, entry points, and attacker capabilities to abuse paths, along with prioritized mitigations tailored to codebase evidence and explicit assumptions.

This guide details advanced patterns for building fault-tolerant Sentry integrations. It addresses critical real-world failure points, such as SDK initialization failures, network outages, and abrupt process shutdowns. By implementing graceful degradation, circuit breakers, and durable offline queuing, applications can ensure core functionality remains online and stable, even when the external error tracking service is unreachable or degraded.

Run NVIDIA Cosmos Policy evaluations on LIBERO and RoboCasa simulations, enabling headless EGL GPU rendering, inference profiling, and benchmark workflows via public eval entrypoints.

Automatically analyzes unfamiliar codebases to generate a comprehensive, structured onboarding guide. It systematically detects package manifests, framework fingerprints, architecture maps, key entry points, and coding conventions. Ideal for new developers joining a project or setting up a repository for the first time.

Generates detailed prompts to document end-to-end application workflows by auto-detecting architectures, stacks, entry points, services, data access, error handling, and tests across .NET, Java/Spring, React, microservices, and other tech stacks.

This guide maps user questions and topics (e.g., configuration, memory, skills, CLI) to specific, relevant documentation paths and source code entry points within the QwenPaw ecosystem. It is designed for built-in QA Agents to eliminate aimless searching, ensuring the agent reads the most accurate files to provide comprehensive and precise answers about the system's features.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

Entry-level reconnaissance router for new targets and unknown attack surfaces. Helps map scope, discover assets, fingerprint technology, inventory endpoints, and choose the first high-value security testing path.

Automatically analyzes unfamiliar codebases to generate a comprehensive, structured onboarding guide. It systematically detects package manifests, framework fingerprints, architecture maps, key entry points, and coding conventions. Ideal for new developers joining a project or setting up a repository for the first time.

This skill is the final step in the plugin build pipeline. It takes the generated manifest and all staged binary artifacts (Android/iOS) from prior build steps. Its core function is to reconcile the declared entrypoints against the actual existence of binaries, ensuring consistency. It then zips these verified components into a single, statically verified, and ready-to-deliver .ppmplugin bundle.

This skill manages the `manifest.json` for a .ppmplugin bundle. It acts as a critical pre-flight gate by validating the manifest structure, reconciling declared entrypoints against the target platform(s), and generating a build-ready staged copy. It supports two modes: validating an existing committed manifest, or authoring the manifest entirely from source code if none exists. It ensures the plugin's descriptor is correct before the actual build process.

Authorized-use hunting guide for XXE vulnerabilities: maps XML entry points, tests file uploads, SAML and SOAP endpoints, then escalates from inline file read to blind out-of-band exfiltration, SSRF pivoting and internal service access.