Skill UI

A comprehensive playbook for security testing APIs relying on JWT, bearer tokens, or API keys. It covers token validation weaknesses (e.g., 'alg:none', RS256 confusion), claim misuse, header spoofing, rate limit bypass, and mass assignment vulnerabilities. Ideal for penetration testers assessing authentication boundaries.

This skill generates comprehensive Entity Relationship Diagrams (ERDs) and database schemas as D2 source code from an existing Entity Framework Core codebase. It analyzes DbContexts, DbSet declarations, Fluent API mappings, and migrations to accurately visualize tables, columns, primary/foreign keys, relationships (including many-to-many joins), owned types, and constraints. The output is a structured .d2 file, suitable for rendering into SVG or PNG, helping developers document the persistence model.