Skill UI

A comprehensive guide to optimizing Webflow usage costs. This skill teaches advanced strategies for reducing API expenses by prioritizing CDN-cached reads (free and unlimited), implementing bulk endpoint operations, caching collection schemas, and replacing inefficient polling with Webhook-driven updates. It also provides methods for API usage monitoring and recommending the optimal site plan.

This guide provides advanced strategies for optimizing Webflow Data API v2 performance. Learn how to mitigate rate limits and reduce latency by utilizing CDN-cached live item reads, implementing application-level or Redis caching, and leveraging bulk endpoints for efficient data writes. Essential for high-traffic, data-intensive Webflow projects that require robust scaling.

This tool reads your local GitHub Copilot CLI conversation history using the specialized `vardoger` CLI. It analyzes your behavioral patterns, coding conventions, and usage style to generate a personalized instructions block. This block is written directly to your local Copilot configuration file, allowing the assistant to adapt its guidance and suggestions specifically to your unique habits and preferences. The process runs entirely offline, ensuring maximum privacy.

Generates a comprehensive, long-form, single-page article optimized for editorial reading. Ideal for developing high-quality blog posts, case studies, or detailed essays. The skill enforces structured design elements, including mastheads, hero images, pull quotes, figures, and related content sections, resulting in a professional, magazine-like aesthetic.

Generates a low-fidelity, hand-drawn wireframe sketch perfect for communicating early design concepts. It meticulously mimics the look of marker drawings, sticky notes, and whiteboard scribbles on graph paper, ensuring the output reads like a preliminary ideation sketch rather than a finished UI. Ideal for use when the brief specifies 'lo-fi,' 'sketch,' or 'whiteboard.'

This utility displays the precise, real-time token usage and estimated cost savings for the current session. It reads directly from the internal session log, ensuring objective and accurate data without requiring AI computation. Triggered by /caveman-stats, it provides immediate performance metrics to monitor API costs and usage patterns.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

This skill details advanced techniques for exploiting formula injection vulnerabilities within CSV, Excel, LibreOffice, and Google Sheets environments. It covers DDE, obfuscation methods, and high-risk functions like IMPORT* that can be triggered when user-controlled data is exported or imported into spreadsheet software. Use this for penetration testing of data pipelines and export features.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

A comprehensive playbook detailing advanced techniques for establishing and maintaining remote command-line access. Covers foundational knowledge like reverse vs. bind shells, encrypted communication methods (OpenSSL, socat), web shell implementation (PHP, ASPX, JSP), PTY upgrading for interactivity, robust file transfer methods (Linux/Windows), and advanced PowerShell payloads.

This playbook provides expert-level techniques for exploiting common infrastructure services that are exposed without proper authentication. Coverage includes Redis RCE, Rsync data theft, PHP-FPM code execution, AJP file reads, and MongoDB/Hadoop vulnerabilities. Essential for deep penetration testing and security auditing.