Skill UI

A specialized downstream skill for analyzing security vulnerabilities in complex agentic systems. This tool is designed for red teaming and penetration testing, focusing on detecting prompt injection, retrieval poisoning, memory contamination, planner drift, and tool boundary abuse within multi-step LLM chains. Use when proving how untrusted inputs compromise system integrity.

Enables agents to perform authorized security assessments, blue team exercises, and penetration testing on AI products, agents, and infrastructure. Uses first-principles reasoning to identify vulnerabilities like prompt injection and tool abuse, generating evidence-based security reports without relying solely on payload libraries.

Comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing. Covers vulnerability discovery, authentication bypass, IDOR exploitation, injection attacks, and API-specific vectors.

A comprehensive asset discovery pipeline for authorized security assessments. It automates subdomain enumeration, live host detection, URL crawling, and vulnerability scanning using tools like subfinder, httpx, nuclei, and katana, delivering prioritized URL lists for penetration testing.