Skill UI

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

A speed-optimized, comprehensive checklist for rapid security assessments. This guide covers full-cycle penetration testing methodologies, including deep reconnaissance (WAF bypass, CDN mapping), access control testing (MFA, JWT, API keys), and session management vulnerabilities. Ideal for time-boxed engagements, CTF competition, or initial service triage.

A comprehensive checklist and methodology for penetration testing file upload endpoints. Covers critical vulnerabilities such as MIME type bypass, extension bypass, magic byte manipulation, path traversal, and stored XSS. Essential for web application security assessment and bug bounty hunting, guiding testers through basic testing to advanced exploitation techniques like Null Byte injection and double extensions.

A comprehensive checklist designed for assessing the security posture of GraphQL endpoints. It covers advanced vulnerabilities such as introspection abuse, IDOR, query depth/complexity DoS, injection attacks (SQLi/NoSQLi), and authorization bypass mechanisms. Essential for professional penetration testing and bug bounty hunting.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

A comprehensive reference and bypass catalog covering modern operating system kernel mitigations such as KASLR, SMAP, SMEP, KPTI, DEP/NX, and CFI. It details how these security mechanisms function, how to detect their presence, and advanced bypass techniques (e.g., side-channel attacks, ROP chains, information leaks). This skill is essential for security professionals conducting deep penetration testing, exploit development, and target hardening assessments.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This comprehensive checklist details advanced methods for bypassing Web Application Firewalls (WAFs) during security assessments. Techniques covered include encoding bypass (URL, Unicode, double encoding), HTTP header manipulation, IP rotation, payload obfuscation, and fingerprinting specific WAF vendors (e.g., Cloudflare, Akamai). It is essential for penetration testers evaluating the robustness of web defenses.

This comprehensive tool assesses the legal patentability of an invention by checking its novelty and non-obviousness against global prior art. It simulates professional patent examiner procedures, conducting detailed anticipation (novelty) and inventive step (non-obviousness) analyses using structured single-reference and combination tests. The output provides multi-jurisdictional assessments (US, CN, EP) and recommended claim amendments.

A comprehensive solution for migrating large volumes of content into Webflow CMS. This deep dive guide facilitates data transfer from diverse source formats—including WordPress, Contentful, Strapi, CSV, and JSON—using the Webflow Data API v2. It covers essential steps like target schema assessment, data transformation, bulk importing (100 items/batch), and robust data validation, making large-scale platform replatforming manageable.

This skill performs comprehensive, feature-level integration validation after all associated development tasks are implemented. It goes beyond checking individual tasks to ensure cross-task consistency, full test suite passage, and complete specification coverage. It validates data flow, architectural adherence, and performs critical security scans for residual issues (e.g., TODOs, hardcoded secrets), providing a holistic GO/NO-GO assessment for deployment. Use this skill as a final quality gate to verify that the completed feature set respects the designed boundaries and dependencies end-...

This tool assists engineers in transforming vague work logs into structured, evidence-backed impact statements for professional documentation. It uniquely mines Copilot CLI session logs, git commits, and GitHub PRs to reconstruct forgotten work. It enforces a mandatory 'Action → Result → Evidence' impact contract, making it indispensable for preparing performance reviews, promotion packets, and self-assessments.