Skill UI

Sliver is an open-source, cross-platform Command and Control (C2) framework used for adversary emulation in authorized red-team engagements. This skill guides users through deploying the C2 server, establishing multi-protocol listeners (mTLS, DNS, HTTPS), generating cross-platform implants, and executing advanced post-exploitation techniques, including pivoting and in-memory execution via the Armory.

This skill validates the correctness and completeness of any API request. It rigorously checks the HTTP method, URL structure, required headers, body format, authentication details, and query parameters. Use it to debug cURL commands, verify endpoint calls, or ensure API structures adhere to best practices, providing immediate, actionable feedback on required fixes.

Neon Functions provide long-running, stateful, serverless HTTP handlers deployed directly next to your Neon database branch. They are ideal for complex backend workloads that exceed traditional serverless limits, such as real-time WebSockets, Server-Sent Events (SSE) streaming, or sophisticated AI agents. Functions automatically inject the database connection URL and maintain state within the function scope, ensuring high performance and data proximity.

This comprehensive guide outlines industry best practices for designing robust and consistent REST APIs. It covers proper resource naming conventions, standardized HTTP method semantics, detailed HTTP status codes (e.g., 201, 404, 422), structured response formats (including pagination and links), and advanced strategies like cursor-based pagination. Essential for building scalable and maintainable APIs.

Automatically generates comprehensive API documentation from existing TypeScript or JavaScript source code. It scans public exports, parses detailed JSDoc annotations (including parameters, returns, and throws), and can generate standardized OpenAPI 3.0 specifications for HTTP endpoints, ensuring robust and up-to-date API references.

This skill performs an adversarial audit of web application authentication flows. It systematically probes for critical security vulnerabilities such as missing CSRF protection, insecure session cookies (lacking Secure/HttpOnly flags), risky cross-origin redirects, and OAuth misconfigurations. It generates a structured report detailing findings and severity levels, making it ideal for pre-deployment security audits and regression testing.

This skill monitors for regressions on deployed URLs following deployments, merges, or dependency upgrades. It performs comprehensive checks including HTTP status, console errors, network failures, performance metrics (LCP/CLS/INP), and crucial API endpoint health, ensuring service stability in production or staging environments. Supports quick checks, continuous monitoring, and differential comparison against baselines.

Pi-hole is a powerful, network-wide DNS ad blocker that runs on Linux hosts (like Raspberry Pi). It intercepts all DNS queries on your local network, blocking advertisements, trackers, and known malware domains before they reach your devices. This guide covers setup via Docker or bare metal, configuring network DNS, managing blocklists, and enabling secure DNS-over-HTTPS (DoH) for enhanced privacy.

A comprehensive set of architectural patterns for building robust and maintainable HTTP servers using Kotlin Coroutines and the Ktor framework. It covers essential topics including REST routing DSL, plugin configuration (Authentication, CORS, StatusPages), Dependency Injection (Koin), serialization, WebSockets, and integration testing using testApplication.

This guide details the architectural and implementation patterns for building modular applications or microservices using the tinystruct Java framework. It covers core concepts like using the @Action annotation for dual routing (CLI/HTTP), managing request state with Context, and using native Builder for JSON serialization, ensuring a lightweight and structured development environment.

This methodology establishes a single, authoritative, machine-checkable source of truth for service contracts (APIs or events). It guides parallel development between consumers and providers, ensuring schema stability and preventing field drift or integration surprises. Key artifacts include OpenAPI, AsyncAPI, and JSON Schema, making the contract the primary artifact for all teams to reference.

This skill generates validated local artifacts (PNG, JPEG, or PDF) from public HTTP(S) web URLs using the Latchshot service. It is ideal for creating visual reports, quality assurance documentation, or social media previews of public web content. Note that this tool only supports public pages and cannot access private, authenticated, or restricted content.