Skill UI

A comprehensive guide and code suite for performing penetration testing on real-time WebSocket APIs (WS/WSS). This tool assesses vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), missing handshake authentication, message injection, input validation failures, and DoS risks. It guides users through analyzing the handshake process and testing authorization enforcement using Python and specialized tools.

A comprehensive security tool designed to detect prompt injection attacks targeting Large Language Models (LLMs). It employs a multi-layered approach combining regex signature matching, structural anomaly scoring, and advanced DeBERTa transformer classification. It is essential for securing input validation layers in chatbots, AI agents, and RAG pipelines, and for retrospectively auditing LLM interaction logs against OWASP standards.

Build interconnected Excel financial models (income statement, balance sheet, cash flow, DCF, cap table, scenarios) driven by an assumptions sheet so each output updates automatically from provided inputs.

Security-first guidance for hardening applications against injection, XSS, auth flaws, and data exposure. Use it when handling untrusted input, sessions, secrets, uploads, or third-party integrations.

A comprehensive skill guide for building complex, feature-rich web games and game engines using modern web technologies like HTML5, Canvas, WebGL, and JavaScript. Covers full 2D and 3D game development workflows, including implementing the game loop, physics simulation (collision detection, Newtonian physics), handling diverse input methods (touch, gamepad), managing assets, and integrating multiplayer features via WebRTC. Ideal for creating everything from simple platformers to advanced 3D simulations.

This skill demonstrates how to use Playwright MCP to programmatically automate the process of inputting data into a web form. It covers various input types, including text fields, date selection, time setting, and file uploads. The process simulates realistic user interaction for data entry or form submission testing, emphasizing the ability to fill data without final submission for review purposes.

Generates a concise, AI-optimized specification describing what an existing GitHub Actions workflow does, its triggers, requirements, inputs/outputs, and governance so teams can understand and maintain it without implementation details.

Skill that demonstrates injected eval patterns for security testing, simulating a dangerous workflow that executes fetched payloads and unsafe user input handling to help assess protection measures.

This skill provides advanced debugging capabilities for failing Power Automate cloud flows using the FlowStudio MCP server. Unlike the limited status codes from the standard Graph API, this tool gives agents deep, action-level inputs and outputs, allowing users to find the true root cause of failures. It is essential for diagnosing complex issues like expression failures, connector authentication errors, or internal run errors.

Generates a complete Power Platform MCP connector server tuned for Copilot Studio, covering swagger/api metadata, C# scripting, JSON-RPC handling, tool/resource wiring, and deployment-ready configurations with schema-safe inputs and streamable MCP HTTP endpoints.

Guides how to write JavaScript inside n8n Code nodes, choose execution modes, access data with $input/$node, handle Webhook payloads, and return the required [{json:…}] structure for automation tasks.

A comprehensive guide for writing and managing Python code specifically within n8n Code nodes. Learn how to perform complex data transformations, handle different execution modes (batch vs. item-by-item), and master various data access patterns (_input.all(), _input.item, _node). Note the critical limitations, such as relying only on the standard Python library and the general recommendation to use JavaScript for most n8n use cases.