Skill UI

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill provides comprehensive functionality for provisioning, managing, and scaling Oracle Cloud Infrastructure (OCI) compute instances using the Python SDK. It addresses common challenges like "out of host capacity" errors by implementing robust retry logic across multiple Availability Domains (ADs). Users can select optimal Flex shapes (AMD, ARM, Intel), manage the entire instance lifecycle (start, stop, reboot, terminate), and retrieve network details, ensuring reliable cloud workload deployment.

A comprehensive guide for migrating cloud workloads from AWS or Azure to Oracle Cloud Infrastructure (OCI). It provides detailed concept mapping for core services like IAM, networking (VPC/VCN), compute (AMI/Custom Image), and data storage. The skill covers end-to-end migration procedures, including using OCI CLI and Python SDK for controlled deployment and resource translation.

This guide provides best practices for scaling multi-tenant deployments in Qdrant. It advises against the inefficient 'one collection per tenant' approach. Solutions include using shared collections with payload filtering, implementing custom sharding for large-scale tenants (100k+), and employing tiered multitenancy for unevenly sized workloads, ensuring optimal resource utilization and performance.

A comprehensive deep dive into migrating entire e-commerce platforms to Shopify. This guide details how to transfer product catalogs, customer records, historical orders, and inventory using advanced methods like Shopify's GraphQL Admin API, bulk mutations (e.g., productSet), and staged uploads. Ideal for developers and technical teams undertaking platform replatforming or migrating data from other e-commerce systems.

This skill establishes an autonomous, iterative build loop for continuous website development. It functions as an agent that reads tasks from a 'baton' file, utilizes the Stitch MCP tools to generate structured web pages, integrates the generated HTML assets into the main site structure, and finally updates the baton file with the next required task. It supports end-to-end, programmatic site building and includes optional visual verification using Chrome DevTools.

This tool reads your local GitHub Copilot CLI conversation history using the specialized `vardoger` CLI. It analyzes your behavioral patterns, coding conventions, and usage style to generate a personalized instructions block. This block is written directly to your local Copilot configuration file, allowing the assistant to adapt its guidance and suggestions specifically to your unique habits and preferences. The process runs entirely offline, ensuring maximum privacy.

Generates a comprehensive, long-form, single-page article optimized for editorial reading. Ideal for developing high-quality blog posts, case studies, or detailed essays. The skill enforces structured design elements, including mastheads, hero images, pull quotes, figures, and related content sections, resulting in a professional, magazine-like aesthetic.

This utility displays the precise, real-time token usage and estimated cost savings for the current session. It reads directly from the internal session log, ensuring objective and accurate data without requiring AI computation. Triggered by /caveman-stats, it provides immediate performance metrics to monitor API costs and usage patterns.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This skill details advanced techniques for exploiting formula injection vulnerabilities within CSV, Excel, LibreOffice, and Google Sheets environments. It covers DDE, obfuscation methods, and high-risk functions like IMPORT* that can be triggered when user-controlled data is exported or imported into spreadsheet software. Use this for penetration testing of data pipelines and export features.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.