Skill UI

A lightweight integration for automating Google Docs tasks. It allows users to programmatically create, read, search, edit, append, and replace content in Google Workspace documents. With standalone OAuth authentication, it is ideal for local scripts that require direct document content manipulation without relying on a centralized server.

A lightweight integration providing full read/write access to Google Slides presentations. This tool allows users to programmatically create, inspect, modify, and extract content (including text and tables) from Google Workspace documents. Perfect for local automation tasks requiring full control over presentation structure and content without needing a dedicated server.

Generate and debug server-side QWeb XML for Odoo PDF reports, emails, and website pages, with correct directives, translations, and report action bindings.

A robust, production-grade REST API gateway designed to wrap ComfyUI servers. It provides comprehensive features including workflow templating, job queuing (with priorities), webhooks, result caching, authentication, and rate limiting. It transforms ComfyUI into a universal, scalable, and secure service for automated image generation pipelines.

A comprehensive set of architectural patterns for building robust and maintainable HTTP servers using Kotlin Coroutines and the Ktor framework. It covers essential topics including REST routing DSL, plugin configuration (Authentication, CORS, StatusPages), Dependency Injection (Koin), serialization, WebSockets, and integration testing using testApplication.

This pipeline provides an automated solution for processing raw Indicators of Compromise (IOCs) from various sources, including IPs, domains, URLs, and emails. It performs crucial steps such as normalization, deduplication, and defanging (modifying indicators to prevent accidental execution while preserving readability). The final, processed data is converted into the standardized STIX 2.1 format and can be securely distributed via TAXII servers or MISP instances, streamlining threat intelligence sharing.

Guide for assessing AWS, Azure, and GCP environments with tools such as Pacu, ScoutSuite, and Prowler to uncover IAM weaknesses, exposed storage, insecure serverless functions, and cloud-native attack chains.

Detect unauthorized crypto-mining in AWS, Azure, and GCP by correlating GuardDuty/Defender/SCC findings, compute anomalies, network flows, and container/serverless behaviors to validate threats and guide response.

A detailed guide for conducting authorized penetration tests to detect and exploit HTTP request smuggling flaws. This technique targets discrepancies in Content-Length and Transfer-Encoding parsing between front-end proxies (like CDNs or load balancers) and back-end servers, allowing attackers to bypass security controls and hijack subsequent requests.

This skill guides the detection and exploitation of JavaScript prototype pollution vulnerabilities. It covers both client-side (DOM XSS) and server-side (RCE, Auth Bypass) attacks by injecting properties into Object.prototype using keys like `__proto__`. Use this when assessing APIs that deep-merge or clone user-controlled JSON data, or for general web application security testing.

Scans web server roots for high-entropy files, suspicious PHP/JSP/ASP payloads, and recent modifications to flag obfuscated webshells via entropy thresholds, regex signatures, and file metadata.

This comprehensive guide details robust techniques for managing the entire API key lifecycle. It mandates secure key generation with high entropy, server-side hashing (SHA-256/bcrypt) to prevent plaintext storage, and implements granular controls like per-key scoping (endpoints, IPs, rate limits). Key features include zero-downtime key rotation workflows and automated monitoring for key leakage across code repositories and logs. Ideal for server-to-server API authentication.