Skill UI

This skill orchestrates the constrained resubmission of a highly polished academic paper from one conference or workshop venue to another. It is designed for scenarios where the paper is finalized, and the goal is to absorb specific reviewer critiques (e.g., clarifying statements or minor edits) without introducing new experiments, changing the core bibliography, or restructuring the framework. It ensures the new submission is isolated in a sibling directory, preserving the integrity of prior submissions.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

A comprehensive playbook detailing advanced techniques for bypassing core macOS security features, including TCC, Gatekeeper, SIP, and sandbox restrictions. This guide is essential for authorized red team operations and penetration testing targeting macOS endpoints, covering methods like direct database manipulation, extended attribute removal, and privilege escalation paths.

This skill provides a comprehensive playbook for testing the security of SAML-based Single Sign-On (SSO) solutions. It focuses on validating assertion trust by checking signature coverage, audience and recipient restrictions, handling of Assertion Consumer Service (ACS), and identifying potential XML parsing weaknesses or IdP/SP confusion flaws. Use this when evaluating enterprise authentication systems for critical security vulnerabilities.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

A comprehensive skill for integrating X (Twitter) data into applications, scripts, data pipelines, and AI agents. It supports advanced scraping tasks including tweet searching, user lookup, following export, and media downloading. Functionality is exposed via generated SDKs (Python, TypeScript, Go, etc.), REST endpoints, signed webhooks, and the MCP server for agent automation.

A comprehensive guide to Test-Driven Development (TDD) for Quarkus 3.x services, focusing on achieving high coverage (80%+). It covers unit testing with Mockito, integration testing of REST endpoints, and advanced testing of event-driven architectures using Apache Camel and RabbitMQ.

This tool generates comprehensive API documentation directly from source code. It supports various API types, including REST, GraphQL, and RPC, and extracts crucial details like endpoints, parameters, data models, and authentication methods. It outputs standard formats such as Markdown, OpenAPI 3.0 YAML, and API Blueprint, streamlining the process of creating accurate and complete interface specifications for development teams.

This skill provides an end-to-end solution to transform existing REST APIs, defined by OpenAPI or Swagger specifications, into functional MCP servers. It maps every API operation to a dedicated, callable LLM tool, automatically generating robust parameter schemas (Zod) and handling authentication wiring. Use this to expose internal or third-party APIs to LLMs, providing a complete workflow from spec ingestion to local testing and cloud deployment.

A comprehensive REST API for sending and receiving multi-channel messages, including iMessage (blue bubbles), SMS, and RCS. This skill allows developers to integrate messaging capabilities into server-side applications, supporting advanced features such as group messaging, reactions, typing indicators, and status callbacks. It also handles inbound messages via webhooks, making it ideal for building robust, real-time communication services that require programmatic control over messaging lifecycles.

A comprehensive guide for using C# scripting within Tabular Editor to programmatically manipulate and automate Power BI semantic models. This skill supports bulk metadata operations, creating calculation groups, managing security roles, and advanced data model restructuring using the TOM API and LINQ.