Skill UI

Estimate the required memory for inference of Safetensors or GGUF models from the Hugging Face Hub using HTTP Range requests, without downloading weights. Supports optional KV cache estimation for LLMs and VLMs.

This comprehensive guide outlines Apple's Human Interface Guidelines (HIG) for various technologies and user flows (e.g., Siri, Apple Pay, HealthKit, ARKit, Generative AI). It teaches developers how to ensure their applications feel natively integrated, respect user privacy, and adhere to established platform patterns across iOS, macOS, and other Apple devices. Essential reading for building high-quality, compliant, and seamless user experiences.

A comprehensive guide for implementing holographic user interfaces across web and mobile platforms. It teaches core principles like zero opacity backgrounds, scanlines, and luminous edges, simulating projected light displays. Ideal for designing futuristic, sci-fi, or high-tech application interfaces.

The Hugging Face Hub CLI (hf) for downloading, uploading, and managing models, datasets, spaces, buckets, repos, papers, jobs, and more. Supports authentication, cache management, and bucket operations.

Gradio is a Python library for creating interactive web user interfaces and machine learning demos. This skill covers building Gradio applications, including components, event listeners, layouts, and chatbots. It includes guides on Interface, Blocks, and ChatInterface patterns, along with key component signatures like Textbox, Number, and Slider for rapid prototyping and deployment.

Trackio is a library for logging and visualizing machine learning training metrics. It supports Python API for logging metrics and firing alerts during training, and CLI for retrieving data. Metrics sync to Hugging Face Spaces for real-time dashboards. Ideal for autonomous ML workflows and experiment management.

Build, deploy, and maintain machine-learning applications on Hugging Face Spaces using Gradio, Docker, or Static SDKs, with ZeroGPU and dedicated hardware, model loading, debugging, and inference providers.

Authorized security testing skill for hunting web cache poisoning and password reset host-header injection. Maps CDN caching layers, probes unkeyed headers such as X-Forwarded-Host, and verifies cache HIT signals to confirm exploitable poisoned responses.

A security skill for identifying and exploiting Host header injection vulnerabilities, including password reset poisoning, web cache poisoning, and routing-based SSRF. Provides step-by-step testing methodology and commands for authorized assessments only. Built from public research and real-world findings.

This skill covers identifying and exploiting HTTP request smuggling vulnerabilities (CL.TE, TE.CL, H2.CL, H2.TE). It includes fingerprinting front-end servers, crafting payloads for cache poisoning, and harvesting credentials via backend desyncs. Requires authorization and defensive guidance protocols.

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS, SharePoint, Exchange, and other Windows-based services. This skill guides authorized security assessments to detect exposed NTLM authentication headers, parse Type-2 challenges, and extract internal domain, computer names, and other juicy details for reconnaissance.

Automate binary reverse engineering with IDA Pro using MCP. Includes decompilation, disassembly, data-flow tracking, and cross-references. Features PowerShell scripts for server management and file handling to bypass schema validation and permission issues. Supports PE/ELF/Mach-O targets.