Skill UI

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

This skill automatically routes subtasks to the most cost-effective Claude model (Haiku, Sonnet, or Opus) based on complexity. It logs real token usage and cost per session, and includes an A/B testing feature to validate model tier savings against your actual workload, ensuring accurate cost control.

This technical skill is designed to verify the compatibility of the Codex CLI with skills compiled from MDA source. Loading this skill confirms that the CLI loader successfully parses the SKILL.md format, adhering to the agentskills.io v1 envelope subset. It is primarily used for testing build pipelines, metadata integrity, and ensuring robust compatibility between MDA compilation and runtime ingestion.

This deployment skill is designed to be integrated into the Playwright testing workflow. Its primary function is to validate the loading process of shared skills across the entire environment during the startup phase. It ensures that all necessary components and modules are correctly registered and available for reliable End-to-End (E2E) testing execution.

Generates a complete, structured load and performance testing plan for any service. This skill guides the definition of test objectives, establishes measurable SLO thresholds (p99, error rate, throughput), and designs multi-scenario tests (Baseline, Stress, Spike, Soak). It is essential for teams needing to set clear pass/fail criteria, select appropriate tooling (k6, Locust), and integrate performance gates into CI/CD pipelines.

A comprehensive CI/CD quality gate for Quarkus microservices. This pipeline guides developers through critical stages: build integrity, static code analysis (Checkstyle, SonarQube), thorough unit/integration/API testing with coverage enforcement, dependency vulnerability scanning, native compilation validation (GraalVM), and performance load testing using K6. It ensures high code quality before PR or deployment.

This guide provides a comprehensive framework for designing rigorous, falsifiable system evaluations for academic research papers. It details best practices across four critical evidence layers: end-to-end performance, mechanism decomposition, operational cost, and boundary testing. Learn how to ensure workload realism, maintain baseline fairness, structure your experiment matrix, and avoid common pitfalls to meet top-tier systems research standards.

This methodology allows engineers and analysts to conduct controlled counterfactual simulations when real-world testing (such as catastrophic failures, extreme load, or irreversible changes) is too rare, costly, or impossible. By isolating a single variable and tracing the mechanistic chain step-by-step, it helps surface critical system breakpoints, invariants, and necessary controls before deployment.

This robust fixture is designed to execute predefined tasks using a specified seed path and current working directory. It intelligently separates dispatch metadata within YAML frontmatter from the main content body, ensuring the router reliably loads execution parameters while ignoring potential interference from the body text. Ideal for structured testing and controlled execution workflows.