Skill UI

A comprehensive skill for identifying miscellaneous security vulnerabilities like access control failures, information disclosure, and misconfigurations. Based on 225 public bug bounty reports, it helps hunters target SaaS platforms, identity flows, and internal APIs to find high-value issues.

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS, SharePoint, Exchange, and other Windows-based services. This skill guides authorized security assessments to detect exposed NTLM authentication headers, parse Type-2 challenges, and extract internal domain, computer names, and other juicy details for reconnaissance.

Comprehensive guide for creating and managing skills in Claude Code with auto-activation system. Covers two-hook architecture, skill types (guardrail/domain), configuration files, and enforcement levels following Anthropic best practices including 500-line rule and progressive disclosure pattern.