Skill UI

A comprehensive methodology for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, code leaks, infrastructure mapping, cryptocurrency tracing, and geospatial intelligence. Essential for building detailed attack-surface maps against organizations or individuals.

This skill guides the implementation of robust, real-time data integrations with Salesforce. It covers three critical mechanisms: Change Data Capture (CDC) for tracking record changes, Platform Events for custom business event buses, and handling Outbound Messages. Learn how to build resilient, event-driven architectures using asynchronous streaming protocols and ensure idempotent event processing.

A comprehensive tool for searching the Model Context Protocol (MCP) across various GitHub locations, including PRs, issues, and discussions. It allows users to track the full lifecycle of protocol specifications, from initial proposals to final merged changes. Furthermore, it facilitates deep dives into pull request reviews and comments, enabling the extraction of key maintainer rationales and design intent for accurate technical understanding.

This guide outlines best practices and structured workflows for automating complex tasks within the Unity Editor using the Model Context Protocol (MCP). It provides programmatic methods for managing GameObjects, applying script edits, analyzing the editor state, executing batch commands, and capturing detailed, multi-view screenshots. Ideal for developers needing robust, repeatable, and automated testing or operational tasks within Unity projects.

This guide details how to implement custom Content Management System (CMS) field types within a framework. It covers extending the core DataFieldBuilder, composing complex validator interfaces, creating a dedicated FieldTypeFactory, and ensuring proper registration via Dependency Injection (DI) and module augmentation for full TypeScript autocomplete support. Essential for adding fields with specialized validation or storage formats.

This guide provides detailed instructions on configuring API access for Workhuman, utilizing the OAuth 2.0 protocol. It is essential for integrating external Human Resources Information Systems (HRIS) or building custom workflows for employee recognition and rewards management. Users will learn how to obtain access tokens and programmatically interact with Workhuman's social recognition features.

Captures complete, full-page screenshots of any modern web page using the Chrome DevTools Protocol (CDP). Unlike standard tools, this utility handles Single Page Applications (SPAs), scrolling content, lazy-loaded images, and complex scroll containers, ensuring the entire visible content is captured in a single, high-fidelity PNG file. Ideal for documenting complex web flows and testing.

This skill guides the end-to-end development, implementation, and validation of production-ready Python modules for Azure IoT Edge. It covers critical aspects including telemetry processing, protocol adaptation (Modbus, OPC-UA), local inference, and ensuring robust, secure edge-to-cloud messaging under variable network conditions.

A hands-on methodology for testing IoT and embedded devices, covering hardware reconnaissance, firmware extraction and analysis, bootloader access, runtime exploitation, wireless protocol attacks, companion app review, and cloud API abuse.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

This comprehensive playbook details advanced techniques for exploiting Layer 2 and Layer 3 network protocols. It covers attacks such as ARP spoofing, LLMNR/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, and STP manipulation. Designed for penetration testers, it facilitates MitM positioning, credential harvesting (NTLM relay), and robust network environment exploitation.