Skill UI

This skill provides comprehensive guidelines for auditing and correcting critical HTML metadata. It covers page titles, descriptions, canonical URLs, Open Graph tags, Twitter cards, favicons, and structured data (JSON-LD). Use this process when adding or reviewing SEO and social metadata to ensure optimal search visibility and shareable content for web pages.

This skill generates a complete, opinionated, modern full-stack Rails application boilerplate. It sets up a robust tech stack including Rails 8, PostgreSQL, React, Inertia.js, Vite, Tailwind CSS, Sidekiq, and Redis. Designed for developers who need a starting point that adheres to best practices for database structure (UUIDs, JSONB), background job processing, comprehensive testing, and modern frontend development (TSX). Ideal for bootstrapping complex, production-grade web services.

Guides developers through authenticating and calling Odoo’s JSON-RPC and XML-RPC endpoints from Python, JavaScript, or curl, including CRUD examples, best practices, and debugging tips for middleware or automation scripts.

An expert guide for developing production-grade AI applications, chatbots, and generative UIs using the Vercel AI SDK, Next.js, and React. Covers core concepts including streaming text (`streamText`), managing chat state (`useChat`), implementing complex tool/function calling, and ensuring robust structured data generation (JSON schemas) across multiple LLM providers.

Intelligent multi-strategy web scraper that selects between static WebFetch, browser automation, curl/bash, and WebSearch paths to extract structured tables, lists, pricing, and other data, with pagination handling, validation confidence, transforms, and CSV/JSON output for monitoring workflows.

This skill provides methods for reliably extracting typed, validated, and structured data from Large Language Models (LLMs), moving beyond simple text parsing. It covers best practices across major APIs (OpenAI's response_format, Anthropic's tool_use, Google's responseSchema) and local models. Key workflows include defining schemas (Pydantic/Zod), implementing constrained decoding, and building robust retry loops for production-grade data pipelines.

This comprehensive tool validates Claude Code plugins against official Anthropic specifications and internal enterprise standards. It performs two main types of checks: structural validation (checking `plugin.json` fields, file references, and permissions) and content validation (conducting deep grading using `SKILL.md`). Use this when building, auditing, or preparing plugins for marketplace submission to ensure compliance and quality.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

This skill provides a programmatic method for analyzing Advanced Persistent Threat (APT) groups using the MITRE ATT&CK framework. By querying TTPs and generating multi-layer JSON files compatible with ATT&CK Navigator, analysts can visualize threat actor coverage, map detection capabilities, and identify critical security gaps to build highly targeted, threat-informed defenses.

This skill analyzes AWS CloudTrail logs to detect suspicious API call patterns, such as new event sources, geographic anomalies, or high-frequency usage. It establishes a statistical baseline of normal activity and flags deviations indicative of compromised credentials, privilege escalation, or insider threats, providing a detailed JSON report for security investigation and threat hunting.

A comprehensive skill for detecting and exploiting JavaScript prototype pollution vulnerabilities in both client-side and server-side applications. It demonstrates advanced property injection techniques to achieve critical security outcomes, including Cross-Site Scripting (XSS), Remote Code Execution (RCE), and authentication/authorization bypass, especially in Node.js environments and JSON merging scenarios.

This skill focuses on identifying and exploiting type juggling vulnerabilities in PHP web applications. It demonstrates techniques such as loose comparison bypass (==), type coercion using JSON/serialized input, and leveraging magic hash collisions to circumvent authentication mechanisms, password verification, and general application logic checks in a controlled security testing environment.