Skill UI

This skill generates Mermaid diagrams to create visual organizational tools specifically designed for neurodivergent individuals, particularly those with ADHD. It helps externalize executive functions, reducing cognitive overwhelm by breaking down complex tasks into compassionate, manageable micro-steps. The tool auto-detects signs of distress and supports multiple accessibility modes (e.g., colorblind-safe, monochrome), making it useful for project planning, decision mapping, and personal productivity tracking.

Utilizes structured critical reasoning to rigorously stress-test ideas, plans, and decisions. This skill allows you to play devil's advocate, conduct pre-mortems, execute red-teaming exercises, or audit underlying assumptions. It employs multiple advanced modes, including Socratic questioning, Hegelian dialectics, and Falsificationism, to identify blind spots, weaknesses, and unstated assumptions before commitment.

This skill guides users through a comprehensive, multi-stage process for creating high-quality documentation. It systematically moves through Context Gathering (understanding the background and audience), Refinement & Structure (iteratively building and editing sections), and Reader Testing (simulating external review to catch blind spots). Ideal for drafting complex specifications, proposals, or design documents that need to be robust and clear for a wide audience.

Transforms data into publication-ready figures with multi-panel layouts, precise annotations, colorblind-friendly palettes, and journal formatting using matplotlib, seaborn, and plotly plus export helpers for PDF/EPS/TIFF.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

A comprehensive tool and guide for detecting and exploiting NoSQL injection vulnerabilities in MongoDB, CouchDB, and similar databases. It simulates advanced attacks such as authentication bypass, blind data extraction using regex, and JavaScript execution via the $where operator. Ideal for penetration testers and security researchers assessing APIs and web applications backed by NoSQL backends.

A comprehensive guide detailing the process of identifying and exploiting SQL injection vulnerabilities in web applications. The content covers manual and automated techniques, including error-based, boolean, and time-based blind injections. Users learn to fingerprint major database engines (MySQL, MSSQL, Oracle) and utilize tools like sqlmap to demonstrate data extraction and security risks during authorized penetration tests.

This skill guides the process of designing, implementing, and validating advanced security detection use cases for Security Information and Event Management (SIEM) platforms like Splunk, Elastic, and Microsoft Sentinel. It focuses on mapping organizational threat profiles to the MITRE ATT&CK framework to build formal, high-fidelity detection rules, thereby strengthening Security Operations Center (SOC) coverage and reducing blind spots.

A comprehensive guide detailing techniques for detecting and exploiting Blind Server-Side Request Forgery (SSRF). It uses advanced out-of-band (OOB) techniques, such as Burp Collaborator and timing analysis, to interact with internal services, scan private IP ranges, and extract cloud metadata (AWS, GCP, Azure) even when the application does not reflect the server response directly. Essential for web application penetration testing.

This skill covers the technical process of setting up SSL/TLS inspection (decryption) on next-generation firewalls and proxies. It details how to act as a trusted Man-in-the-Middle to intercept, decrypt, and inspect encrypted HTTPS traffic for malicious payloads, data exfiltration, and policy violations. The workflow includes generating internal Certificate Authority (CA) certificates and deploying them across various operating systems (Windows, macOS, Linux) to ensure visibility into the web's encrypted blind spot.

This guide details methodologies for identifying and exploiting XML External Entity (XXE) injection vulnerabilities in web applications. It covers basic file retrieval, blind XXE detection using out-of-band techniques, and data exfiltration, all critical steps during authorized penetration testing of XML-consuming APIs and services.

This advanced code review skill forces genuine perspective shifts by employing three hostile reviewer personas: the Saboteur (production breaks), the New Hire (maintainability), and the Security Auditor (OWASP-informed). It ensures that all code reviews are critically rigorous, eliminating superficial "Looks Good To Me" approvals and catching blind spots missed by the original author or general AI models. Use it before merging a PR for maximum confidence.