Skill UI

Provides step-by-step techniques for assessing AWS security, covering IAM enumeration, privilege escalation, SSRF metadata attacks, S3/Lambda exploitation, and red-team persistence workflows with recommended tools and commands.

Provides ultra-compact, actionable code review comments whenever someone asks for a PR review, enforcing the `location: problem. fix.` format plus optional severity prefixes.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

Guides security teams through using Metasploit’s console, modules, payloads, and Meterpreter workflow for authorized penetration tests and post-exploitation procedures.

Structured checklist guiding the planning, scoping, environment prep, tester selection, and reporting phases of penetration tests to keep security assessments thorough and compliant.

Provides quick reference to penetration testing commands for network scanning, exploitation, password cracking, and web testing workflows, helping security professionals run tools like Nmap, Metasploit, Nikto, and SQLMap during assessments.

This skill provides robust mechanisms to verify the integrity of AI agent plugins, tools, and dependencies. It generates deterministic SHA-256 manifests (INTEGRITY.json) for all components, allowing users to detect unauthorized modifications, track provenance, and ensure that deployed assets match their published versions. Use this during CI/CD pipelines, code review, and pre-production promotion to secure the entire agent ecosystem.

This guide teaches how to build well-structured and robust ASP.NET Minimal APIs. It covers best practices for API organization, defining clear DTOs with proper validation, handling strongly-typed parameters, and leveraging modern C# features. Crucially, it demonstrates how to generate comprehensive, standards-compliant OpenAPI/Swagger documentation using built-in .NET features, ensuring APIs are fully documented for seamless consumption.

This comprehensive guide provides detailed procedural steps for configuring and executing CodeQL code scanning. It covers both implementing automated workflows using GitHub Actions (`codeql.yml`) and running scans via the CodeQL CLI. Users will learn how to manage language matrices, set build modes, interpret SARIF outputs, handle monorepo structures, and troubleshoot complex security analysis setups across multiple languages (e.g., Python, Java, C++).

This comprehensive template and guide facilitate the containerization of ASP.NET Core applications. It provides a structured prompt and checklist to ensure that the resulting Dockerfile adheres to industry best practices for performance, security, and maintainability when running on Linux containers. It covers all necessary aspects, including dependency management, port exposure, build stages, and custom configuration.

This workflow guides developers through generating standardized, descriptive commit messages using the Conventional Commits specification. It provides a structured XML template (including type, scope, description, body, and footer) and integrates directly into the Git workflow, ensuring project history is clean, traceable, and machine-readable. Ideal for maintaining large, collaborative codebases.