Skill UI

This comprehensive guide outlines best practices for optimizing vector indexes for production systems. It covers critical techniques such as tuning HNSW parameters, implementing quantization strategies, and optimizing memory usage. Use this when you need to balance search latency, recall, and scalability for large-scale vector databases.

Provides Wycheproof test vectors for validating cryptographic implementations against known attacks and edge cases, making it ideal for CI regression sweeps and third-party crypto audits.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

A comprehensive guide to implementing custom visual effects in Three.js using shaders. Learn how to work with GLSL, utilize ShaderMaterial, manage uniforms (scalars, vectors, matrices, textures), and manipulate vertex and fragment data. Covers advanced patterns like texture sampling, vertex displacement, and custom lighting effects.

This comprehensive skill guides users through designing and executing advanced social engineering penetration tests. It covers simulating real-world attacks, including phishing (email), vishing (voice), smishing (SMS), and physical pretexting. The goal is to measure an organization's human security resilience, identify training gaps, and test security controls across multiple vectors using tools like GoPhish and SET.

This tool scans GitHub Actions workflows and CI/CD configurations to identify critical supply chain attack vectors. It specifically checks for unpinned actions, risks from script injection using expressions, dependency confusion, and secrets exposure, helping organizations harden their build systems against sophisticated threats.

A comprehensive framework for penetration testing APIs, designed to detect and exploit critical injection flaws. It covers SQL injection (SQLi), NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF). This skill guides the testing of all input vectors—including path parameters, headers, query strings, and request bodies—to assess input validation and backend security posture against industry standards like OWASP.

This comprehensive guide details advanced techniques for detecting and exploiting NoSQL injection vulnerabilities across various databases like MongoDB and CouchDB. It covers critical attack vectors, including authentication bypass using operators ($ne, $gt), blind data extraction via $regex, and executing arbitrary server-side JavaScript through the $where clause. Essential reading for penetration testers and security researchers assessing NoSQL backends.

This skill provides a comprehensive guide on implementing AES-256-GCM, a robust symmetric block cipher, for protecting sensitive data at rest. It covers best practices including secure key derivation (using PBKDF2 and Argon2id), proper management of initialization vectors (IVs) and nonces, and utilizing authenticated encryption to ensure data integrity and detect tampering.

Kubesec is a powerful open-source tool designed to perform comprehensive security risk analysis on Kubernetes resource manifests (YAML/JSON). It automatically detects critical misconfigurations, potential privilege escalation vectors, and deviations from industry security best practices. It provides actionable scoring and hardening recommendations, making it essential for CI/CD pipelines, security auditing, and automated compliance checks.

This tool facilitates comprehensive purple team exercises by executing Atomic Red Team tests mapped to MITRE ATT&CK techniques. It is primarily used for gap analysis, validating detection coverage (blue team visibility) against specific threat vectors, and building continuous, automated adversarial emulation pipelines in CI/CD environments.

Generates high-quality, deterministic, and editable vector diagrams (SVG) for system architecture, workflows, and pipelines. By using a structured JSON specification (FigureSpec), it ensures that the same input always yields the identical output, making it ideal for reproducible technical documentation, academic papers, and formal system modeling where precise layout and connections are critical. It is optimized for non-data-plot, formal diagrams.