Skill UI

Generates a complete, single-page SaaS landing page structure. This tool produces a fully contained HTML file, integrating required sections such as Hero, Features, Social Proof, Pricing, and Call-to-Action (CTA). It strictly adheres to an existing design system for colors, typography, and layout, making it ideal for product launches and marketing campaigns.

Squirrel is an advanced, full-cycle AI coding skill designed to guide software development from concept to production. It automatically detects the current project state (greenfield, in-progress, or mature) and adapts an 8-phase engineering pipeline. This comprehensive workflow covers planning, building, rigorous testing, bug hunting, code polishing, documentation, and deployment readiness, ensuring high-quality, maintainable results.

Cavecrew provides a set of specialized subagents (investigator, builder, reviewer) designed for efficient code development delegation. Unlike vanilla agents, Cavecrew compresses output results, drastically reducing the token usage injected back into the main context. This allows users to maintain context over much longer, complex coding sessions, effectively preventing context exhaustion during large-scale refactoring, debugging, or multi-step feature development.

This comprehensive tool provides annotations and tooling to automatically generate industry-standard OpenAPI/Swagger documentation for Go backend services. By treating documentation as a contract, developers can annotate handlers, define complex parameters, and specify security schemes (JWT, OAuth2). It integrates seamlessly with major Go frameworks like Gin, Echo, and Fiber, ensuring the Swagger UI is the accurate source of truth for API consumers and maintaining clean API contracts.

This skill analyzes the comprehensive commit history between two branches to generate a concise, objective, and highly structured Pull Request (PR) description. It automatically groups changes by domain, summarizing the purpose, technical notes, and user impact, ensuring consistency and minimizing manual documentation effort.

This skill generates comprehensive, tailored instruction files for AI coding assistants like GitHub Copilot and Claude. It supports multiple strategies (flat or nested) and is specifically designed for managing complex monorepos by creating area-scoped instructions using `applyTo` globs. Use it to standardize AI tooling usage across large codebases.

This comprehensive playbook guides security testers through deep API authorization checks, focusing specifically on BOLA (Broken Object Level Authorization) and BFLA (Broken Function Level Authorization). Use this skill to test scenarios where object identifiers, nested resources, or privileged functions are exposed, ensuring thorough checks for mass assignment and privilege escalation.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

An expert playbook for systematically testing Insecure Direct Object References (IDOR) and Broken Object/Function Level Authorization (BOLA/BFLA). This guide covers finding object identifiers across all request vectors (URL, body, headers, cookies), implementing A-B testing methodologies, identifying various ID patterns, and executing horizontal or vertical privilege escalation attacks. Essential for deep API security auditing.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

This end-to-end pipeline automates the conversion of a completed academic research paper into a full conference talk artifact. It generates a slide outline, Beamer source, editable PPTX, speaker notes, full script, and polished visuals. Critically, it includes rigorous assurance checks (citation, claim, anonymity) to ensure academic integrity, making the output suitable for top-tier conferences like NeurIPS or ICML. Use this when you need the complete, polished presentation package, not just a draft deck.

This router serves as the initial guide for comprehensive security assessments on new targets or unknown attack surfaces. It helps users map the scope, discover hidden assets, perform detailed technology fingerprinting, build endpoint inventories, and strategically plan the optimal testing path before diving into specific vulnerability checks (e.g., API, Auth, Injection).