Skill UI

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

A comprehensive reference guide providing quantitative benchmarks and formulas for system architects. It covers user-to-RPS conversion, storage estimation, bandwidth calculation, known scale limits of major technologies (databases, queues, caches), and capacity planning for various user loads (1K DAU to 10M DAU). Essential for designing scalable, high-availability applications.

This skill proactively hunts for advanced firmware threats, including UEFI bootkits (e.g., BlackLotus, ESPecter), residing in the EFI System Partition (ESP). It establishes a cryptographic baseline, verifies bootloader signatures, scans for out-of-band changes, and uses YARA rules to detect persistence mechanisms related to pre-OS compromise (MITRE ATT&CK T1542.003). Ideal for forensic investigations and security hardening.

This guide addresses inclusive design, which goes beyond WCAG compliance. It focuses on respecting the full spectrum of human diversity and real-world constraints, including low bandwidth, non-standard names, cultural differences, and low digital confidence. Use this when designing for global audiences or resource-constrained users to prevent exclusionary assumptions.

A comprehensive, multi-phase checklist for ensuring the quality, security, and deployment readiness of Django applications. It covers linting (ruff, mypy), unit testing (pytest), database migrations, security audits (bandit, pip-audit), and performance checks, making it an essential quality gate for CI/CD pipelines before merging or deploying to production.

Designs an end-to-end, cross-platform retargeting playbook. This tool maps user behavior across the entire conversion funnel, segmenting audiences by stage (e.g., cart abandoners, viewers). It provides detailed guidance on creative sequencing, frequency capping, cross-platform coordination (Meta, Google, TikTok), budget allocation, and technical tracking setup, ensuring a coherent and optimized customer journey.

Provides comprehensive guidelines for authors preparing tables and figures for high-impact economics journals. The core principle is ensuring that every exhibit is self-contained, legible, and communicates the economic magnitude and meaning to a generalist audience, even without reading the surrounding text. It covers best practices for reporting elasticities, confidence bands, and structuring arguments.

This skill guides authors on submitting power conversion manuscripts to IEEE Transactions on Power Electronics (TPEL). It evaluates the manuscript's fit by checking for the required balance between theoretical novelty and rigorous experimental validation, covering topics like converter topologies, control methods, and wide-bandgap devices. Use it when evaluating a paper's suitability for TPEL or re-framing a design from a single build to a generalizable, highly benchmarked contribution.

Provides detailed guidelines for constructing high-quality tables and figures for Quantitative Economics (QE) manuscripts. It emphasizes adhering to strict academic standards, such as replacing significance asterisks with standard errors and confidence bands, placing exhibits in-text, and ensuring all visuals are self-contained, professionally formatted, and journal-compliant.

A protocol designed to rehearse the rigorous academic peer review process before actual submission. It simulates an Associate Editor's initial desk-screen and incorporates multiple independent referee perspectives (e.g., identification, robustness). The output provides a calibrated decision band and a prioritized, skill-mapped list of required fixes, helping authors predict and address potential weaknesses.

This comprehensive guide manages the entire project lifecycle for academic conference submissions, such as VLDB. It provides detailed methodologies for initial volume planning, computing optimal submission timelines (month-picking), coordinating group author contributions, and managing the revision bandwidth. It is essential for maintaining rigorous scheduling and mitigating the risk of missed deadlines in fast-paced research environments.