Skill UI

Provides step-by-step API fuzzing and exploitation tactics for REST, SOAP, and GraphQL during bug bounty or penetration tests, covering reconnaissance, auth bypass, IDOR, injection, and GraphQL-specific attacks.

Guides bug bounty hunters through API fuzzing and penetration testing, covering REST, SOAP, and GraphQL recon, authentication bypass, IDOR methods, injections, method abuse, GraphQL attacks, and payload delivery techniques.

Automate Autobound operations through Composio’s Rube MCP by searching available schemas, reconnecting toolkits, and executing discovered tools with schema-compliant arguments in managed sessions.

Automate Autobound operations through Composio’s Rube MCP by searching available schemas, reconnecting toolkits, and executing discovered tools with schema-compliant arguments in managed sessions.

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

A comprehensive framework for managing availability and reliability incidents (outages, degradations, failed deploys). It guides the entire lifecycle, from automated severity classification (SEV1-SEV4) and timeline reconstruction to multi-team coordination and structured post-incident review (PIR). Essential for SRE and DevOps teams leading major incident responses.

A comprehensive guide for managing Lindy AI agents through platform upgrades, reconfigurations, or workspace migrations. It covers the entire lifecycle, including inventory documentation, configuration exporting, phased deployment planning, and critical post-migration steps for webhooks, email, and phone numbers, ensuring business continuity.

Provides comprehensive patterns for data synchronization, ETL processes, and data migration specifically for MaintainX. Use this when needing to keep data consistent between MaintainX and external databases, data warehouses (like BigQuery), or when performing bulk data exports to formats like CSV. It covers incremental syncing, full exports, and data reconciliation checks.

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.