Skill UI

This utility collects comprehensive diagnostic evidence necessary for troubleshooting Webflow integrations and API usage. It automatically gathers crucial data points into a single, support-ready diagnostic bundle. Key metrics include the Webflow SDK version, API token validation status, rate limit headers, site connectivity reports, CMS health checks, and recent error logs, significantly streamlining the technical support process.

This comprehensive runbook provides structured, step-by-step procedures for diagnosing and mitigating Webflow Data API integration failures. It guides teams through quick triage checks (status page, connectivity, rate limits) and offers specific remediation steps for common error types like Authentication (401/403), Rate Limiting (429), and Server Errors (500/502/503). Designed for rapid incident response, ensuring graceful degradation and postmortem documentation.

This tool enables the real-time transmission of structured Aegis events (such as clip completion or person detection) to any external webhook URL. By posting event data as JSON, it seamlessly integrates Aegis functionality with major automation platforms like Zapier, IFTTT, Make, or custom backend services, allowing users to build complex, event-driven workflows and extend system capabilities.

This skill provides a robust mechanism for extending an existing API gateway by adding custom, non-GraphQL HTTP endpoints (GET, POST, PUT, etc.). Developers can implement the Route.Interface and register it using the <Api.Route> component. It supports full Dependency Injection (DI), providing framework-agnostic Request and Reply objects, making it ideal for integrating complex business logic directly into the API structure.

This skill assesses the AI readiness of a codebase by running a comprehensive audit against multiple technical and governance pillars. It generates a self-contained, detailed HTML dashboard that provides an overall maturity score, identifies strengths, and, most importantly, delivers a prioritized remediation plan (Fix First / Fix Next). Ideal for auditing repositories before major AI feature development.

This toolset provides a comprehensive development workflow for iterating on MicroPython applications (such as Claude Buddy, Hello, and Snake) on the Cardputer-Adv device. It allows developers to add new apps, push single updated .py files without full re-flashing, monitor device serial logs, or execute one-shot REPL commands directly from the host machine. Essential for rapid prototyping and debugging embedded systems.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A comprehensive playbook detailing advanced techniques for exploiting glibc heap vulnerabilities using ptmalloc2. Covers various memory corruption primitives, including Use-After-Free, double free, and overflows. Provides version-specific guidance on bypassing modern protections like safe-linking (glibc >= 2.32) and RCE methods for post-2.34 environments.

A comprehensive playbook detailing advanced JNDI injection techniques. Covers the abuse of JNDI lookups via RMI and LDAP, focusing on critical vulnerabilities like Log4Shell (CVE-2021-44228), deserialization gadgets, and post-8u191 bypass methods. Essential for deep-dive security testing and vulnerability research.

An expert playbook detailing advanced techniques for pivoting across compromised Linux hosts. Techniques cover SSH agent hijacking, credential harvesting from common system files, key extraction, and abusing internal services via D-Bus and systemd exploitation, crucial for post-exploitation stages.

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.