Skill UI

An expert guide covering advanced exploitation techniques for Expression Language (EL) injection across multiple Java frameworks, including Spring (SpEL), Struts2 (OGNL), and JSP/JSF (Java EL). Details detection methods, sandbox bypasses, and real-world CVE chains for Remote Code Execution (RCE).

A comprehensive playbook detailing advanced techniques for bypassing core macOS security features, including TCC, Gatekeeper, SIP, and sandbox restrictions. This guide is essential for authorized red team operations and penetration testing targeting macOS endpoints, covering methods like direct database manipulation, extended attribute removal, and privilege escalation paths.

This comprehensive playbook details advanced techniques for detecting Prototype Pollution vulnerabilities in JavaScript environments (Node.js and browser). It covers various attack vectors, including using `__proto__` and `constructor.prototype` paths, and provides black-box testing payloads for JSON parsing, query string merging, and deep object assignment. Use this when analyzing applications for potential Remote Code Execution (RCE) or unintended property leakage via object merging sinks.

A comprehensive playbook detailing expert techniques to escape multiple types of restricted environments, including Python pyjail, Docker containers, seccomp filters, and browser rendering processes. It covers advanced exploitation vectors like namespace escapes, kernel exploits, and built-in function bypasses for achieving code execution.

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

This is a mandatory, one-time setup skill designed to interview users interactively to build a personalized knowledge base for advanced email triage. Using a structured, discipline-driven interview process, the skill collects data on email patterns, business context, and priorities, generating 7 critical structured files (e.g., email-taxonomy.md, rate-card.md). This knowledge base powers the companion 'inbox-triage' skill. Run this before initial use or whenever core business processes change significantly.

A comprehensive skill designed to process and organize incoming emails. It classifies messages using a predefined user taxonomy, researches new senders, generates decision recommendations, drafts replies (without sending), and updates a knowledge base with learnings. Ideal for running on a recurring schedule (1-3 times daily) or on demand to maintain an organized inbox.

A detailed technical workflow for inspecting complex 3D animation, rigging, and motion states within Blender. This skill moves beyond visual inspection by extracting structured data—such as bone transformations, world-space bounding boxes, ground contacts, and axis conventions—to accurately diagnose issues like foot sliding, rotation errors, or retargeting mismatches in professional animation pipelines.

Fast local parsing of PDFs, Office files, and images with per-token bounding boxes. Extract spatial text, run OCR on scans, produce layout-preserved JSON for RAG, batch-ingest folders, and render pages to PNG for multimodal agents. Fully local, no cloud API.

This tool streamlines the entire meeting preparation lifecycle. By integrating Notion context, performing targeted searches, and enriching content with Codex research, users can draft structured agendas, pre-reads, and decision documents. It ensures all necessary background information, owners, timeboxes, and industry insights are compiled for highly effective meetings.

This skill analyzes your Gmail inbox over a specified time window, filtering out noise such as newsletters, receipts, and automated notifications. It surfaces only actionable items—emails requiring a direct reply, a decision, or follow-up—and even drafts suggested replies for efficiency.

Use Mailtrap Email Sandbox to capture and inspect outbound emails without sending them to real recipients. This is crucial for development, staging, and CI/CD environments. It allows developers to test email content, headers, attachments, and spam scores using dedicated APIs, SMTP settings, or SDKs, ensuring mail integrity before deployment. Ideal for automation and rigorous quality checks.