Skill UI

This workflow utilizes the SerpApi to perform advanced, multi-engine searches across platforms including YouTube, Bing, Google News, Google Shopping, and Google Maps. It is essential for data scraping, SEO research, and building comprehensive search features that require aggregating results from diverse sources beyond standard Google search. Use it to collect videos metadata, product pricing, local business details, and news articles efficiently.

Utilize this tool to programmatically access and parse search engine result pages (SERP) data from multiple sources, including Google, Bing, YouTube, and Google News. It returns comprehensive, structured JSON data, allowing developers and marketers to extract organic results, knowledge graph entries, ads, and local information for advanced SEO analysis, market research, and data science projects. Supports both Python and Node.js implementations.

This guide details how to install the official SerpApi client library for Python and Node.js, and properly configure API key authentication. It is essential for any project requiring structured JSON results from major search engines like Google, Bing, and YouTube, ensuring secure and reliable search result scraping.

Shipwright is an autonomous, multi-phase agent designed to convert simple, plain-English requirements into fully functional, tested, and deployment-ready applications. It supports modern full-stack frameworks like Next.js/Supabase, SvelteKit, and Astro. Use this tool when you need to scaffold a complete project, add complex features, or generate an entire SaaS dashboard merely by describing it.

This comprehensive, guided 4-phase workflow helps teams establish clear identity, boundaries, and strategic positioning. It guides users through absorbing existing context, auditing current capabilities versus claimed responsibilities, articulating a defined mission, and finally achieving stakeholder alignment. Use this framework when starting a new role, inheriting ambiguity, or needing to define clear operational boundaries.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.

This workflow provides comprehensive guidance for integrating the Wispr Flow voice-to-text API. It supports both low-latency WebSocket streaming and simpler REST API calls. It is essential for developers building sophisticated, voice-powered applications, including real-time dictation, transcribing content, and integrating voice inputs into core development tools.

This core workflow provides comprehensive guidance for integrating the Wispr Flow voice-to-text API. It supports both low-latency WebSocket streaming and standard REST API calls. Use this when building voice-powered applications, real-time dictation tools, or systems that require high accuracy in transcribing complex content like code, CLI commands, and technical jargon.

This guide demonstrates how to integrate Wispr Flow for robust voice-to-text transcription. It covers two primary methods: asynchronous REST calls for transcribing audio files, and real-time WebSocket streaming for live microphone input. Wispr specializes in developer-context-aware dictation, making it ideal for building complex voice-powered applications, especially those involving code or technical jargon.

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

A comprehensive playbook detailing how open redirect vulnerabilities can be exploited. Covers finding redirect parameters, advanced filter bypass techniques (e.g., protocol-relative, userinfo), and complex exploitation chains including OAuth token theft, SSRF, and Tabnabbing.

A powerful tool for conducting in-depth backlink profile audits. It analyzes referring domains, anchor text distribution, and link quality, while also detecting toxic links and performing competitor gap analysis. Utilizes multiple sources like Moz, Bing Webmaster, and Common Crawl for comprehensive SEO insights.