Skill UI

This skill provides a robust system for tracking all code modifications using structured JSON records and enforcing a defined state machine (e.g., planned -> deployed). It is critical for AI coding workflows, ensuring that if a session expires or is abandoned, the next session receives the full context, progress summary, and blockers to resume seamlessly. Ideal for complex, multi-stage development projects and onboarding new codebases.

This technique guides users in solving trivia or puzzle questions where the target band's country is not explicitly named. Instead, the country is hinted at through indirect geographic clues such as land area ranges, EU membership dates, or national flag descriptions. It emphasizes systematic deduction, requiring the user to treat the clue as a multi-candidate puzzle and test all viable countries before refining the search to the specific band name.

This technique guides users to find obscure bands by utilizing unique, non-musical personal experiences of the band members (e.g., major surgery, relocation, unique side careers). Instead of searching directly for band names or discography details, the user should identify the most distinctive life event mentioned in the query. Searching for this unusual personal anchor point first is highly effective, as it leads to the member's identity, which can then be used to pinpoint the correct band.

Provides techniques and indicators for researching music bands from non-Western cultures (e.g., African, Asian, Middle Eastern). This guide helps users move beyond mainstream Western databases, offering search strategies for bands whose information is often found on regional sites or through unique contextual clues like recording conditions or historical milestones.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This comprehensive guide provides a detailed methodology for detecting and exploiting Server-Side Request Forgery (SSRF) vulnerabilities. It covers basic, blind, and out-of-band techniques, including testing against cloud metadata endpoints (AWS/GCP/Azure) and advanced bypass methods like DNS rebinding. It is an essential resource for web application security testing and bug bounty hunting.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill provides a deep dive into optimizing Oracle Cloud Infrastructure (OCI) resources. It guides users through selecting appropriate compute shapes (e.g., E5.Flex, A1.Flex) and understanding the performance tiers for block volumes (Balanced, Ultra High Performance). Users can programmatically query available shapes, create performance-tuned volumes, and monitor real-time IOPS and network bandwidth using the OCI SDK, ensuring optimal infrastructure decisions for any workload.

This mechanism is designed to optimize Qdrant's performance when handling queries with very large limits or when paginating results across multiple shards. Instead of forcing every shard to transfer the full requested limit (which is bandwidth-intensive), it uses Poisson distribution statistics to calculate smaller, optimized limits for each shard. This significantly reduces inter-shard data transfer and improves the efficiency of large-scale vector search, while maintaining a very high degree of accuracy.

Methodology for capturing, analyzing, and replaying LoRaWAN and sub-GHz wireless traffic. Useful for testing IoT deployments, fixed-code remotes, garage doors, TPMS, and other devices in 433/868/915 MHz bands.

Methodology for passive Wi-Fi reconnaissance: choose compatible adapters, enable monitor mode, set regulatory domains, sweep 2.4/5/6 GHz bands, identify hidden SSIDs, clients, vendors, and encryption before active wireless attacks.

A comprehensive playbook detailing expert techniques for OS command injection vulnerabilities. It covers all shell metacharacters, blind injection, time-based detection, out-of-band exfiltration methods, and common vulnerable code patterns across PHP, Python, and Node.js. Essential for security analysts and penetration testers.