Skill UI

A comprehensive methodology and checklist for identifying and exploiting race conditions (TOCTOU) in web applications. It guides users to find timing windows, detect vulnerabilities like double-spend or rate limit bypass, and exploit concurrent request flaws in state-changing business logic. Essential for penetration testing and bug bounty hunting.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.

This skill guides users through building comprehensive Smart City and IoT solutions on the Azure platform. It covers the entire solution lifecycle, from initial high-level requirements and defining city domains (e.g., traffic, energy) to designing robust, scalable architectures. Outputs include detailed reference architectures, security checklists, cost strategies, and phased implementation roadmaps for enterprise deployment.

A comprehensive simulation tool designed to pressure-test medical device manufacturers' Quality System Regulation (QSR) compliance against FDA standards (21 CFR 820). It covers six critical areas: complaint handling, process validation, device history records (DHRs), CAPAs, labeling, and handling of Form 483 observations. Essential for pre-inspection readiness, internal audits, and regulatory submission planning.