Skill UI

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

A critical discipline for managing expenses when integrating paid AI or inference APIs. This guard treats dollar cost as a third complexity dimension, mandating the definition of cost contracts (max calls per run, max budget per run, max budget per day). It enforces best practices for bounding loops, retries, and fan-out, ensuring that code bugs cannot lead to unexpected overspending. Best practice requires configuring hard caps both in the code and at the provider dashboard for defense in depth.

Workthreads analyzes a team's coding history across multiple repositories to generate a structured weekly status report. It clusters raw logs into 'work threads' and automatically tags their lifecycle status (new, open loops, closed, reverted). This is essential for leads needing a high-level, actionable summary of project progress, outstanding tasks, and completed features without reading thousands of lines of raw activity.

A comprehensive skill to diagnose and fix excessive Postgres egress (network data transfer) that leads to high cloud database bills. It guides the user through using `pg_stat_statements` to identify the most data-intensive queries. Key fixes include limiting selected columns (avoiding SELECT *), implementing pagination (LIMIT/OFFSET), and identifying high-frequency data sources for caching.

This skill covers the principles of building Software Development Kits (SDKs) that provide an exceptional developer experience (DX). Learn how to design intuitive APIs, utilize progressive disclosure, establish sensible defaults, and implement actionable, guiding error messages. The focus is on driving product adoption by making the developer's workflow seamless and productive. Ideal for product managers, technical leads, and API designers.