Skill UI

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

An expert playbook for systematically testing Insecure Direct Object References (IDOR) and Broken Object/Function Level Authorization (BOLA/BFLA). This guide covers finding object identifiers across all request vectors (URL, body, headers, cookies), implementing A-B testing methodologies, identifying various ID patterns, and executing horizontal or vertical privilege escalation attacks. Essential for deep API security auditing.

An expert playbook detailing advanced techniques for Linux kernel exploitation. Covers vulnerability classes (UAF, OOB, Race Condition), building primitives, bypassing modern mitigations (KASLR, SMEP, SMAP, KPTI), and achieving root privilege escalation via functions like commit_creds or modprobe_path overwrite. Essential for CTF and advanced security research.

A comprehensive playbook detailing advanced techniques for bypassing core macOS security features, including TCC, Gatekeeper, SIP, and sandbox restrictions. This guide is essential for authorized red team operations and penetration testing targeting macOS endpoints, covering methods like direct database manipulation, extended attribute removal, and privilege escalation paths.

A deep-dive playbook covering expert techniques for Path Traversal and Local File Inclusion (LFI). It details multiple bypass methods (encoding, null bytes, wrappers), target file enumeration on Linux and Windows, and advanced Remote Code Execution (RCE) escalation paths, such as log poisoning via PHP wrappers.

This advanced playbook covers escalating prototype pollution into Remote Code Execution (RCE) and Cross-Site Scripting (XSS). It details exploitation techniques across various environments, including Node.js child_process, EJS, Pug, Handlebars, and client-side libraries like jQuery and Lodash. It is designed for security researchers and penetration testers to systematic locate and exploit deep merge sinks and framework gadgets.

This skill guides the design and optimization of production-grade multi-agent systems. It specializes in using LangGraph, LangChain, and DeepAgents to create structured, complex AI workflows. It covers state management, agent routing, memory integration, and tool calling, making it ideal for building robust, scalable agents like supervisors, planners, and coders.

This guide outlines architectural patterns and best practices for building scalable, production-ready APIs with FastAPI. It covers proper project structure, separating concerns using routers, services, and CRUD layers, implementing dependency injection for database sessions and authentication, defining Pydantic schemas for request/response, handling asynchronous operations, and managing custom error responses.

A comprehensive guide to Redis best practices for backend development. Learn how to implement critical features such as Cache-Aside, Write-Through caching, rate limiting, distributed locks, and reliable messaging using Pub/Sub and Redis Streams. Essential for building scalable, high-performance production systems.

This skill functions as an expert guide for creating comprehensive, implementation-ready design systems. It covers foundational elements like color tokens, typography, and spacing, while strictly adhering to accessibility standards (WCAG 2.2 AA) and defining structured workflows for designers and engineers. Ideal for establishing robust, scalable, and aesthetically premium UI guidelines.

Provides strategic operational guidance for startup VPEs, focusing on maximizing delivery throughput using DORA metrics, optimizing the engineering hiring funnel, designing scalable team structures (squad/tribe), and establishing robust production disciplines. Use when scaling pains hit, delivery slows, or organizational design is unclear.

Nextflow is a powerful workflow language and runtime for building reproducible, portable, and scalable data pipelines, especially dominant in bioinformatics. This skill covers the entire workflow lifecycle: from authoring complex pipelines using the modern DSL2 syntax, to configuring containerized execution (Docker, Singularity), scaling to High-Performance Computing (HPC) or cloud environments, and running/debugging existing nf-core workflows.