Skill UI

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

An expert-level playbook covering non-obvious XSS techniques, advanced payload selection across various sinks (DOM, SVG, HTML attributes, JavaScript), and sophisticated defense bypass strategies. Use this guide for real-world penetration testing, including WAF bypass, CSP bypass, HttpOnly bypass, and XS-Leaks side channel exploitation. It assumes deep knowledge of web vulnerability mechanics.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

This alias serves as a specialized Codex CLI interface for implementing the P7 protocol, mimicking the workflow of a P7 senior engineer. It enforces a highly structured development cycle: detailed planning, robust implementation, mandatory self-review (via three critical questions), and final, verifiable completion markers. Ideal for complex coding tasks requiring maximum rigor and accountability.

This skill addresses vague or ambiguous user requests by initiating a structured, multi-round questioning process. Instead of making assumptions, it systematically clarifies dimensions like audience, scope, tone, and format across several rounds (up to three). This structured approach ensures the resulting output is highly accurate and requires minimal revision cycles.

A comprehensive skill for building, auditing, and linting custom Kubernetes Operators. Focuses specifically on the Operator pattern, ensuring controllers correctly implement declarative reconcile loops. Tools validate Custom Resource Definitions (CRD) against best practices, catch common reconciliation bugs (like status drift or blocking calls), and score operators against industry capability levels.

A comprehensive pre-production audit tool that scans a codebase for critical issues across eight dimensions: security, database, deployment, code quality, AI/LLM usage, dependencies, frontend, and observability. It intercepts deployment commands, forcing users to resolve critical failures before shipping code. The audit is stack-agnostic and provides detailed pass/fail/manual reports.

This specialized tool guides the definition, review, and calculation of Service Level Objectives (SLOs), Service Level Indicators (SLIs), and error budgets, following SRE best practices. It helps teams move beyond arbitrary metrics by calculating multi-window burn rates, designing concrete SLIs (success rate, latency, availability), and identifying common SLO mistakes (e.g., unsustainable targets, missing error budget policies).

This fixture is designed to verify basic compiler conformance and confirm target projection accuracy. It serves as a foundational testing tool in the compilation pipeline, ensuring that the compiler adheres to specified standards and correctly targets the intended platform architecture. Use it for early-stage validation of compiler output and system compatibility.

Flox is a declarative environment manager built on Nix, designed to solve dependency hell and ensure perfect reproducibility across all development machines. It allows users to define complex, cross-platform environments—including compilers, databases (PostgreSQL, Redis), and multiple language toolchains (Python, Node.js, etc.)—in a single manifest file. This is essential for consistent team setups, CI/CD pipelines, and empowering AI agents to install tools without system pollution.

Provides comprehensive workflows for searching biomedical literature in PubMed and NCBI. Users can construct highly complex queries using MeSH terms, specific field tags, and Boolean operators. It details the programmatic use of NCBI E-utilities (like esearch, efetch) for reliable, repeatable retrieval of abstracts, metadata, and citations, making it invaluable for systematic reviews and bioinformatic research projects.

A powerful tool for conducting in-depth backlink profile audits. It analyzes referring domains, anchor text distribution, and link quality, while also detecting toxic links and performing competitor gap analysis. Utilizes multiple sources like Moz, Bing Webmaster, and Common Crawl for comprehensive SEO insights.