Skill UI

A comprehensive expert playbook detailing advanced Large Language Model (LLM) prompt injection techniques. Covers direct methods (instruction override, role play), indirect attacks (RAG poisoning, web data manipulation), and sophisticated tool/function calling abuse for data exfiltration and security bypass. Essential for rigorous AI application security testing.

This tool enables complex web interactions using plain natural language commands. Instead of relying on unreliable selectors, it utilizes a powerful page-agent and LLM loop to interpret user intent, performing actions like filling forms, clicking buttons, and extracting data from dynamic websites. Ideal for testing and automation in pages with ambiguous or changing markup.

A comprehensive asset discovery pipeline for authorized security assessments. It automates subdomain enumeration, live host detection, URL crawling, and vulnerability scanning using tools like subfinder, httpx, nuclei, and katana, delivering prioritized URL lists for penetration testing.