Skill UI

Use Mailtrap Email Sandbox to capture and inspect outbound emails without sending them to real recipients. This is crucial for development, staging, and CI/CD environments. It allows developers to test email content, headers, attachments, and spam scores using dedicated APIs, SMTP settings, or SDKs, ensuring mail integrity before deployment. Ideal for automation and rigorous quality checks.

This workflow helps developers quickly build throwaway prototypes to answer specific design or functionality questions. It can generate interactive terminal applications to test complex state/business logic, or create multiple radically different UI variations toggleable from a single view, allowing for rapid validation of ideas before committing to production code.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

This tool evaluates how thoroughly a feature implementation meets product requirements (PRDs) or specifications. It scores acceptance criteria case-by-case, independently grading both the code implementation and the associated test coverage (unit and E2E). Ideal for benchmarking multiple development efforts, auditing adherence to specifications, or determining if a feature is 100% complete and compliant with the ground truth PRD.

This skill generates comprehensive, academic-style survey papers as a single, self-contained HTML file. By reading an anchor resource and curating research data, it structures the content and utilizes advanced LLMs (like Kimi K2.6 via Fireworks) to generate all prose, figures, and bibliographies, suitable for rapid academic literature review.

This skill guides the systematic triage of project issues and external pull requests (PRs). It moves development items through a defined state machine using roles (e.g., bug, enhancement) and states (e.g., ready-for-agent, wontfix). The process involves context gathering, cross-codebase verification, deep questioning (grilling), and generating comprehensive, agent-ready briefs or marking them for human implementation.

A comprehensive guide detailing the structured process for responding to phishing incidents. It covers email header analysis, malicious content sandboxing (URLs/attachments), scoping the impact across the organization, and performing thorough remediation, including mailbox purging and credential reset.

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

A comprehensive guide to executing the NIST Risk Management Framework (RMF) to achieve an Authorization to Operate (ATO). This covers the full lifecycle, including preparation, system categorization (FIPS 199), control selection and tailoring (SP 800-53 Rev 5), implementation, assessment (SAR), and continuous monitoring. Essential for organizations working under FISMA or FedRAMP.

This skill automates the entire phishing incident response workflow using the Splunk SOAR REST API. It parses suspicious email headers and bodies to extract artifacts (URLs, IPs, sender details), creates a structured incident container, triggers a comprehensive automated investigation playbook, and compiles a final verdict report for security teams.

This guide outlines a comprehensive workflow for detecting and preventing the exposure of sensitive AWS credentials (access keys, session tokens) within source code repositories, CI/CD pipelines, and configuration files. It utilizes TruffleHog for deep historical scanning and integrates git-secrets for robust pre-commit hooks, significantly reducing the risk of credential theft and unauthorized account access.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.