Skill UI

A comprehensive guide for generating highly detailed and structured embodiment descriptions for patent specifications. It outlines the necessary workflow for describing how an invention is made and used (method, system, apparatus), ensuring the patent meets enablement requirements while strictly differentiating technical descriptions from empirical experimental results.

This skill integrates Aegis detection events directly into Home Assistant. By firing specific `aegis_detection` events, it allows users to automate actions in their smart home setup. Users can configure automations to automatically turn on lights, send notifications, or execute complex routines based on detected security activity. Requires HA credentials for secure connection.

This skill performs a rigorous, adversarial review of implemented code. It verifies that the task implementation is complete, structurally sound, respects defined boundaries, and aligns perfectly with approved requirements and design specifications. Use it after an implementer finishes work, or before final acceptance, to ensure code quality and architectural integrity.

This guide details how to manage and structure credentials within KubeSphere DevOps using Kubernetes Secrets. It covers various types (SSH keys, basic auth, API tokens, kubeconfig) and emphasizes the critical resource structure, specific labels, and API endpoints required for integrating credentials into automated CI/CD pipelines (e.g., Jenkins, ArgoCD).

A comprehensive methodology and checklist for identifying and exploiting race conditions (TOCTOU) in web applications. It guides users to find timing windows, detect vulnerabilities like double-spend or rate limit bypass, and exploit concurrent request flaws in state-changing business logic. Essential for penetration testing and bug bounty hunting.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This guide provides comprehensive best practices for configuring Palantir Foundry integrations across development, staging, and production environments. It details how to manage environment-specific credentials, hostnames, and scope policies using structured Python code and platform-specific deployment manifests (Docker Compose, Kubernetes, gcloud). Use this skill when implementing resilient, multi-tier SaaS deployments that require strict credential and configuration separation.

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

A comprehensive playbook for advanced security testing, focusing on race conditions and TOCTOU (Time-of-check to time-of-use) vulnerabilities in web applications. It guides users to exploit non-atomic, state-changing operations (e.g., coupons, balance deductions, single-use rewards) by sending highly synchronized, parallel requests (including HTTP/2 single-packet attacks). Essential for identifying weaknesses in authorization and transactional integrity.

This expert playbook covers advanced techniques for testing HTTP request smuggling and desynchronization vulnerabilities. It is critical when front proxies, CDNs, or load balancers disagree with the origin server on message framing (Content-Length vs Transfer-Encoding), or during protocol downgrades (HTTP/2 to HTTP/1). Use this to uncover deep security flaws like WAF bypass and session hijacking.

Pi-hole is a powerful, network-wide DNS ad blocker solution that runs on Linux hosts (like Raspberry Pi). It automatically blocks ads, trackers, and malware domains for every device on your network without requiring browser extensions. This guide details installation via Docker or bare-metal setup, configuring it as the primary DNS server for a home network, managing blocklists, and implementing advanced features like DNS-over-HTTPS (DoH) for enhanced privacy.