Skill UI

This skill generates Mermaid diagrams to create visual organizational tools specifically designed for neurodivergent individuals, particularly those with ADHD. It helps externalize executive functions, reducing cognitive overwhelm by breaking down complex tasks into compassionate, manageable micro-steps. The tool auto-detects signs of distress and supports multiple accessibility modes (e.g., colorblind-safe, monochrome), making it useful for project planning, decision mapping, and personal productivity tracking.

Utilizes structured critical reasoning to rigorously stress-test ideas, plans, and decisions. This skill allows you to play devil's advocate, conduct pre-mortems, execute red-teaming exercises, or audit underlying assumptions. It employs multiple advanced modes, including Socratic questioning, Hegelian dialectics, and Falsificationism, to identify blind spots, weaknesses, and unstated assumptions before commitment.

This skill guides users through a comprehensive, multi-stage process for creating high-quality documentation. It systematically moves through Context Gathering (understanding the background and audience), Refinement & Structure (iteratively building and editing sections), and Reader Testing (simulating external review to catch blind spots). Ideal for drafting complex specifications, proposals, or design documents that need to be robust and clear for a wide audience.

Transforms data into publication-ready figures with multi-panel layouts, precise annotations, colorblind-friendly palettes, and journal formatting using matplotlib, seaborn, and plotly plus export helpers for PDF/EPS/TIFF.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This comprehensive guide details advanced techniques for detecting and exploiting NoSQL injection vulnerabilities across various databases like MongoDB and CouchDB. It covers critical attack vectors, including authentication bypass using operators ($ne, $gt), blind data extraction via $regex, and executing arbitrary server-side JavaScript through the $where clause. Essential reading for penetration testers and security researchers assessing NoSQL backends.

A comprehensive guide detailing the process of identifying and exploiting SQL injection vulnerabilities in web applications. The content covers manual and automated techniques, including error-based, boolean, and time-based blind injections. Users learn to fingerprint major database engines (MySQL, MSSQL, Oracle) and utilize tools like sqlmap to demonstrate data extraction and security risks during authorized penetration tests.

This skill guides the process of designing, implementing, and validating advanced security detection use cases for Security Information and Event Management (SIEM) platforms like Splunk, Elastic, and Microsoft Sentinel. It focuses on mapping organizational threat profiles to the MITRE ATT&CK framework to build formal, high-fidelity detection rules, thereby strengthening Security Operations Center (SOC) coverage and reducing blind spots.

This comprehensive guide details the methodology for detecting and exploiting Blind Server-Side Request Forgery (SSRF) vulnerabilities. It covers crucial techniques including out-of-band (OOB) detection, internal network enumeration (port scanning, IP scanning), accessing cloud metadata endpoints (AWS, GCP, Azure), and bypassing common security filters using various encoding and parsing confusion methods. Ideal for penetration testing and cloud security assessments.

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

This advanced code review skill forces genuine perspective shifts by employing three hostile reviewer personas: the Saboteur (production breaks), the New Hire (maintainability), and the Security Auditor (OWASP-informed). It ensures that all code reviews are critically rigorous, eliminating superficial "Looks Good To Me" approvals and catching blind spots missed by the original author or general AI models. Use it before merging a PR for maximum confidence.

This skill simulates a four-voice council (Architect, Skeptic, Pragmatist, Critic) to resolve complex decisions marked by ambiguity or multiple trade-offs. It is designed for high-level strategic choices, identifying blind spots, and determining go/no-go decisions when a clear winner is absent. It specializes in synthesizing diverse perspectives to mitigate risk.