Skill UI

This comprehensive index provides access to 32 production-ready, specialized engineering skills. It covers the entire development lifecycle, including system architecture, frontend, backend, DevOps, security operations, AI/ML, and data engineering. It is designed to guide users in selecting and loading only the specific module needed, ensuring focused expertise for complex tasks.

A comprehensive skill set for senior transportation managers overseeing a large, multi-modal carrier portfolio. It covers the full lifecycle of carrier engagement, including sourcing, compliance checks (FMCSA SAFER), executing complex RFPs, negotiating granular rate components (linehaul, FSC, accessorials), and establishing performance scorecards. Use this skill to optimize logistics costs, mitigate supply chain risks, and ensure consistent service quality across varied freight types.

Comprehensive guide to Generative Engine Optimization (GEO), adapting traditional SEO for modern AI search platforms like Google's AI Overviews, ChatGPT, and Perplexity. Covers critical areas including passage-level citability, structural readability, multi-modal content integration, brand authority signals, and technical accessibility for AI crawlers.

Analyzes a website's accessibility to major AI crawlers (e.g., GPTBot, ClaudeBot). It checks robots.txt, meta tags, and HTTP headers to generate a complete access map. This helps users optimize their site structure to maximize visibility in AI-generated search results while maintaining appropriate control over data usage.

Performs a GEO-focused technical SEO audit covering crawlability, indexability, security, performance, SSR, and AI crawler access to keep both search engines and AI agents from losing visibility.

A comprehensive guide to building robust database layers in Kotlin using the Exposed ORM framework. It covers advanced patterns including DSL queries, DAO entity management, transaction handling, connection pooling with HikariCP, schema migration via Flyway, and implementing the Repository pattern for clean, production-grade data access.

This skill analyzes Active Directory (AD) Access Control Lists (ACLs) to detect dangerous misconfigurations. It uses the ldap3 Python library to query domain controllers, parse security descriptors (SDDL), and identify instances where non-privileged users or groups are granted dangerous permissions like GenericAll, WriteDACL, or WriteOwner on sensitive objects. Essential for security incident response and privilege escalation path discovery.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

Detects abnormal access patterns across major cloud storage platforms, including AWS S3, GCS, and Azure Blob Storage. By analyzing cloud audit logs (CloudTrail, etc.), this tool identifies critical security threats such as after-hours bulk data downloads, sudden spikes in API calls (GetObject spikes), access from new geographic IPs, and potential data exfiltration. It utilizes statistical baselines and time-series anomaly detection for proactive threat hunting and security incident investigation.

A comprehensive skill for performing deep security audits on Ethereum smart contracts. Utilizes both static analysis (Slither) and symbolic execution (Mythril) to detect critical vulnerabilities such as reentrancy, integer overflows, and access control issues. This process is crucial for ensuring the security and immutability of financial assets before mainnet deployment.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

This tool parses Kubernetes API server audit logs (JSON lines) to detect critical security events. It specifically targets unauthorized access, secret enumeration, RBAC escalation, privileged pod creation, and shell access (exec/attach). Use it for incident response, threat hunting, or building SIEM detection rules.