Skill UI

A comprehensive skill for conducting client-side injection vulnerability assessments on web applications. It identifies XSS and HTML injection flaws, demonstrates exploitation techniques for session hijacking and credential theft, and validates input sanitization and output encoding mechanisms. Includes practical examples and strict safety guardrails.

Detects prompt injection hidden in legal documents (pleadings, skeletons, evidence) before AI reads them. Scans PDF, Word, HTML, email attachments for invisible text, Unicode smuggling, and AI-directed instructions. Fails closed with optional hook integration.

Generate validated architecture, workflow, sequence, data-flow, ERD, class and timeline diagrams as explorable standalone HTML with themes and export, plus one-page explainers.

CurlShot is a hosted API service that captures web page screenshots, PDFs, and scrolling videos. It supports rendering HTML and Markdown to images. Users can specify viewport devices, block ads, and customize output formats. Requires an API key for access. Ideal for generating social media cards, reports, and previews from public URLs or custom HTML content.

Ax is a command-line interface designed to replace curl and parsing scripts for fetching URLs, exploring web pages, and extracting structured data from HTML. It simplifies web scraping with features like outline discovery, selector location, and structured output formats. The tool caches repeated requests and includes safety warnings for untrusted data and credentials. Ideal for developers needing efficient web data interaction without writing complex scripts.

Publish an HTML file or static folder to a permanent public deed.page URL with one curl request; no account needed, and the first publish returns a token for updates.

Generates and fills localized HTML body content for non-SPA Power Pages sites, composing Design Studio sections, components, forms, lists, and media into a resolved webpage copy file.