Skill UI

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

A comprehensive, multi-step guide for migrating contact and company data into Apollo.io. Use this skill when switching from other CRMs (like Salesforce or HubSpot), consolidating multiple data sources, or executing large-scale data imports. It covers defining field mappings, pre-migration data assessment, and performing high-throughput batch processing using the Apollo Contacts API.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Automates OWASP Top 10 (2021) security assessments via the owasp-compliance-checker plugin, scanning codebases for vulnerabilities, reporting compliance gaps, and suggesting remediation advice for developers or auditors.

Conducts comprehensive, authorized security assessments of cloud infrastructure across major platforms including Microsoft Azure, AWS, and GCP. The skill covers the full red team lifecycle, including reconnaissance, authentication testing, resource enumeration, privilege escalation, and data extraction techniques.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Systematic code maturity assessment using Trail of Bits' 9-category framework, analyzing arithmetic safety, access controls, documentation, MEV risks, testing, and more to deliver evidence-backed scorecards and actionable recommendations.

This skill simulates a senior engineer conducting comprehensive code reviews. It analyzes code diffs and files to identify bugs, security vulnerabilities (e.g., SQL injection, XSS), performance issues (N+1), code smells, and architectural flaws. It is ideal for reviewing pull requests, performing code quality audits, or conducting security assessments, providing structured, actionable, and prioritized feedback.

A comprehensive expert system for analyzing software codebases to identify, quantify, and prioritize technical debt across various dimensions (code, architecture, testing, infrastructure). It provides detailed metrics, impact assessments (development velocity, quality loss), and actionable, prioritized remediation roadmaps with clear ROI projections.

This skill automatically generates comprehensive and highly structured Pull Request (PR) descriptions directly from Git diffs. It goes beyond simple summaries by automatically adding detailed change categories (e.g., source, test, config), security risk assessments, and required review checklists based on the modified file types. Use this when submitting complex code changes or when the diff is large and requires explicit structure for thorough review.