Skill UI

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

This skill provides a comprehensive playbook for testing the security of SAML-based Single Sign-On (SSO) solutions. It focuses on validating assertion trust by checking signature coverage, audience and recipient restrictions, handling of Assertion Consumer Service (ACS), and identifying potential XML parsing weaknesses or IdP/SP confusion flaws. Use this when evaluating enterprise authentication systems for critical security vulnerabilities.

This tool searches a comprehensive database of over 2500 curated open-source repositories for tools related to Large Language Models (LLMs), ChatGPT, RAG, agents, and NLP. It interprets natural language queries, converts non-English inputs to core English keywords, and systematically filters results across multiple specialized categories (e.g., LangChain, Chatbots, CLIs). Use it whenever the user needs to find specific AI development libraries or open-source AI tooling.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.

Comprehensive patterns and tools for writing robust tests for F# applications within the modern .NET ecosystem. This guide covers unit testing (xUnit, FsUnit), property-based testing (FsCheck), mocking dependencies (NSubstitute), and full integration testing (WebApplicationFactory). Ideal for improving test coverage, validating complex business logic, and establishing a resilient testing infrastructure.

This utility serves as a Command Line Interface (CLI) alias for specialized AI code models, specifically mapping to the Claude Code `/pua:yes` command structure. It facilitates structured code generation or interaction by adopting a specific 'yes skill' protocol. It ensures that while switching to an encouragement-first narration, the system maintains strict verification red lines and handles configuration file updates while preserving unknown fields. Ideal for developers needing consistent, protocol-driven AI code assistance.

A comprehensive guide to Test-Driven Development (TDD) for Quarkus 3.x services, focusing on achieving high coverage (80%+). It covers unit testing with Mockito, integration testing of REST endpoints, and advanced testing of event-driven architectures using Apache Camel and RabbitMQ.

An expert AI specializing in Slang shader programming for high-performance graphics and compute applications. This model excels at writing, reviewing, refactoring, and optimizing production-grade code for various graphics stages (vertex, fragment, compute, ray tracing, tessellation). It ensures cross-platform compatibility across major APIs (D3D12, Vulkan, Metal, OpenGL) and supports advanced concepts like generics, parameter blocks, and automatic differentiation. Use this skill when integrating shaders into C++ engines or requiring deep knowledge of low-level GPU pipelines.

This skill automatically generates comprehensive unit tests based on provided source code. It supports multiple programming languages (Python, JavaScript, Java, Go, Rust) and popular testing frameworks (pytest, Jest, JUnit). Use it to improve code coverage, test boundary conditions, and validate error handling efficiently, saving manual testing time.

This skill provides a scaffold for building complex, composable recommendation, ranking, and feed pipelines. It implements the robust six-stage pattern (Source→Hydrator→Filter→Scorer→Selector→SideEffect), which is the industry standard for determining "top K items." Use it for social feeds, content CMS ranking, RAG reranking, or any system needing complex candidate prioritization.