Skill UI

This skill provides comprehensive techniques for penetrating AWS cloud environments. It covers IAM enumeration, privilege escalation, SSRF attacks on metadata endpoints, S3 exploitation, and Lambda code extraction. Designed for authorized security assessments and red team operations to identify vulnerabilities and persistence mechanisms.

Extract text and data from many files at once with shared config, per-file overrides, bounded parallelism, and error recovery. Supports PDFs, DOCX, XLSX, and more, with JSON or text output for LLM ingestion.

A command-line utility to search and extract data from Burp Suite project files (.burp). It enables regex-based searches on response headers or bodies, extraction of security audit findings, and analysis of captured HTTP traffic. Requires Burp Suite Professional and the burpsuite-project-file-parser extension. Ideal for security auditing and traffic analysis workflows.

This skill provides methods for reliably extracting typed, validated, and structured data from Large Language Models (LLMs), moving beyond simple text parsing. It covers best practices across major APIs (OpenAI's response_format, Anthropic's tool_use, Google's responseSchema) and local models. Key workflows include defining schemas (Pydantic/Zod), implementing constrained decoding, and building robust retry loops for production-grade data pipelines.

A disciplined approach for red teaming and security assessments, emphasizing scope authorization, impact verification, and data minimization. Ensures thorough coverage without over-extraction or premature stopping during authorized engagements.

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. Covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for various DBMS.

This skill performs intelligent multi-strategy web scraping to extract structured data from web pages, including tables, lists, and prices. It supports pagination handling, monitoring, and exporting data to CSV or JSON formats. Designed for safe data extraction without executing untrusted content.

Xberg is a document intelligence library supporting 107 formats including PDF, Office, and images. It extracts text, tables, and metadata using OCR and chunking. Available for Python, Node.js, Rust, and CLI. Ideal for developers building document processing applications with multi-language bindings and structured output.

Ax is a command-line interface designed to replace curl and parsing scripts for fetching URLs, exploring web pages, and extracting structured data from HTML. It simplifies web scraping with features like outline discovery, selector location, and structured output formats. The tool caches repeated requests and includes safety warnings for untrusted data and credentials. Ideal for developers needing efficient web data interaction without writing complex scripts.