Skill UI

This skill provides techniques for hunting file upload vulnerabilities, including content-type bypass, extension bypass, magic bytes spoofing, SVG XSS, ImageMagick/FFmpeg SSRF, headless Chrome SSRF, and archive extraction attacks like Zip Slip. It includes prevention methods and requires explicit authorization.

Manage tasks with the YYLO Ledger CLI: create, list, search, get, mark, update, archive and merge tasks with dependency tracking, ready ordering, cold archive packs and opt-in cross-project routing.

This skill enables users to discover and access NEXRAD radar data for specific sites, times, and products. It supports retrieving Level II archive volumes, real-time chunks, and Level III sources with metadata validation. It helps select reflectivity, velocity, and other radar moments from AWS S3 buckets while ensuring data integrity.

Retrieve NOAA NEXRAD radar and GOES satellite products from public cloud archives, select scans by observation time, and validate downloaded scientific files.

This skill enables creating, editing, and analyzing PowerPoint (.pptx) files. Since .pptx is a ZIP archive with XML, you can extract text, access raw XML for comments, and analyze design elements. It covers creating presentations from scratch using HTML workflows and applying design principles.

Checks what a shipped AI product's system prompt and tool schema actually say, by reading a dated archive of captured prompts instead of recalling them. Use before asserting or accepting any claim about an agent's instructions.

A comprehensive toolkit designed to automate virtually all interactions with the Twitter/X platform via Rube MCP. It supports creating, managing, and deleting posts; performing advanced searches across recent or full archives; looking up user profiles by ID or username; managing bookmarks and lists; and interacting with content (liking/unliking). Essential for integrating social media management into automated workflows.

Retrieve numerical weather prediction data from public AWS S3 and HTTP archives using GRIB2 inventories and byte ranges. Supports Herbie, provider fallbacks, and verified caching. Ideal for fetching GFS, HRRR, or RAP model outputs where specific variables or levels are needed. Does not interpret forecasts.

Retrieve surface and upper-air weather observations from NOAA APIs and archives, preserving station identity, time, units, and quality flags. Covers METARs, ISD, IGRA radiosondes, and station metadata for analysis-ready data.

A powerful utility that queries multiple free APIs (Pexels, Pixabay, Internet Archive, etc.) in a single query. It retrieves normalized, license-tagged results for real-world, historical, or archival images, videos, and GIFs, making it a peer to local semantic search and generative media tools. Includes specialized scripts for fetching and judging audio.