Skill UI

A comprehensive, 10-phase methodology for authorized security assessment of modern APIs, including REST, GraphQL, WebSocket, and SOAP. This guide covers the entire testing lifecycle—from endpoint discovery and authentication bypass (JWT/OAuth 2.0) to sophisticated authorization flaws (BOLA/IDOR/BFLA), input validation, rate limiting, and CI/CD integration testing.

This skill serves as a deterministic internal downloader for image URLs extracted from comprehensive web search results. It receives normalized media slots and search output via stdin, utilizing Python HTTP APIs to download direct image links. The process includes validating MIME types and saving files accurately into the configured local project directory, ensuring reliable asset retrieval without relying on sandboxed shell tools.

This skill specializes in analyzing built frontend artifacts, going beyond static source code. It reconstructs the dynamic JavaScript structure, tracks chunk loading paths, and interprets source maps and build manifests to recover hidden routes, APIs, and runtime behaviors. Essential for deep security analysis and understanding execution flow from deployed bundles.

Generates high-quality, structured technical documentation for READMEs, APIs, and architecture guides, adhering to progressive disclosure principles. It also specializes in creating formal, evidence-backed security reports for penetration testing, CTF writeups, and reverse engineering tasks, ensuring a professional, reusable format.

This skill facilitates the ingestion of unstructured clinical notes and reports from FHIR R4 EHR APIs (e.g., Epic, Cerner). It handles complex tasks including paginating large search results, decoding base64 attachments (PDF, text), and extracting narrative content. The extracted text is then passed to the OpenMed pipeline for HIPAA-compliant de-identification and subsequent NLP analysis, enabling structured data insights from raw clinical records.