Skill UI

A comprehensive guide for auditing web content against WCAG 2.2 guidelines. This skill assists users in conducting thorough accessibility audits by combining automated scans (Axe, Lighthouse) with critical manual checks, such as keyboard navigation and screen reader flow. It provides actionable remediation strategies to ensure compliance with standards like ADA and Section 508.

Master comprehensive testing strategies for smart contracts using Hardhat, Foundry, and advanced testing patterns. Learn unit testing, integration tests, gas optimization, and fuzzing techniques. Setup Hardhat configuration, write test scripts, and verify contracts on Etherscan. Ideal for blockchain developers ensuring security and reliability.

This comprehensive toolkit automates critical Webflow operations, including managing CMS collections (create, update, delete), site publishing, page inspection, and asset uploads. By connecting via Rube MCP, it allows developers to programmatically interact with Webflow's backend, making it ideal for implementing automated content workflows, CI/CD pipelines, and large-scale content management systems.

A comprehensive toolkit for integrating with the official WhatsApp Business Cloud API (Meta). Supports message sending, template management, webhooks (HMAC-SHA256), and advanced customer service automation. Provides ready-to-use boilerplates in Node.js and Python, facilitating scalable and professional communication solutions.

This skill acts as a documentation architect to generate structured wiki catalogues and onboarding guides directly from codebases. It scans repository file trees, detects technologies, and creates hierarchical documentation including principal-level guides, getting started instructions, and deep dive architectures. Every section cites specific files to ensure accuracy and relevance for developers.

Enables authorized offensive security assessments on Windows Active Directory environments. Covers Kerberos abuse, AD CS escalation, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques. Requires explicit written permission and strict authorization gates before execution. Designed for educational purposes or authorized security assessments only.

Systematic methodologies for discovering and exploiting Windows privilege escalation vulnerabilities in authorized penetration testing, covering service path abuse, AlwaysInstallElevated, token impersonation, unquoted paths and credential harvesting.

This skill generates championship-grade test suites for any project using the WJTTC methodology. It analyzes the codebase, classifies components, and scaffolds executable test files. It emphasizes pre-defined test plans, inline testing, and two-layer testing architecture to ensure high code quality and signal integrity in CI/CD pipelines.

Assess WordPress installations for common vulnerabilities and attack surfaces. Use this skill for authorized security assessments, penetration testing, and defensive validation. Includes WPScan, Metasploit, and Burp Suite integration with legal and technical constraints.

A specialized tool for auditing WordPress plugins, themes, and blocks before deployment. It checks for security vulnerabilities like SQL injection, XSS, and improper escaping, ensures API correctness, and enforces internationalization standards. Use it to review generated code or perform security assessments on WordPress environments.

Detects prompt injection hidden in legal documents (pleadings, skeletons, evidence) before AI reads them. Scans PDF, Word, HTML, email attachments for invisible text, Unicode smuggling, and AI-directed instructions. Fails closed with optional hook integration.