Skill UI

Provides step-by-step API fuzzing and exploitation tactics for REST, SOAP, and GraphQL during bug bounty or penetration tests, covering reconnaissance, auth bypass, IDOR, injection, and GraphQL-specific attacks.

Guides bug bounty hunters through API fuzzing and penetration testing, covering REST, SOAP, and GraphQL recon, authentication bypass, IDOR methods, injections, method abuse, GraphQL attacks, and payload delivery techniques.

This skill generates highly disciplined, forceful, and timeless English prose, specifically designed to bypass modern AI writing clichés and filler language. It is ideal for essays, literary rewrites, or demanding analytical writing that requires sharp, concrete, and confident phrasing. It enforces strict rules against common AI cadences, therapeutic fluff, and vague transitions, ensuring the output is muscular and substantive.

A comprehensive guide for engineering teams to manage critical incidents related to Clerk authentication and SaaS platform outages. It covers full incident lifecycle procedures, including initial triage, emergency auth bypass implementation, key rotation, session recovery scripts, and post-incident root cause analysis. Use this when facing production authentication failures or security breaches.

A comprehensive runbook for handling CodeRabbit service outages or malfunctions. It provides step-by-step procedures for quick triage, emergency bypasses (P1), checking installation health (P2), diagnosing delays (P3), and tuning incorrect review behavior (P4). Essential for maintaining continuous CI/CD workflows when the review bot fails.

Comprehensive guide for configuring Bring Your Own Key (BYOK) for major AI providers, including OpenAI, Anthropic, Google Gemini, Azure, and custom endpoints. This allows users to bypass default quotas, manage costs directly with the source provider, and utilize a wide range of specialized models within the Cursor IDE. It covers setup steps, security best practices, and cost monitoring strategies.

Technique for bypassing checksums, PRNGs, and global-state guards during fuzzing by conditionally compiling test-only patches so the fuzzer can explore deeper code while production behavior stays unchanged.

A production-grade framework for executing high-performance, robust browser automation and web scraping using Playwright with the Go language. This skill specializes in handling complex Single Page Applications (SPAs), emulating human behavior (e.g., random typing delays, Bezier mouse movements), and implementing advanced stealth techniques to bypass anti-bot systems like Cloudflare. It emphasizes architectural best practices, such as using contexts for isolation and structured logging.

A comprehensive guide for deploying PostHog analytics platform across diverse production environments. Covers advanced configurations for Next.js/Vercel (including reverse proxy for ad blocker bypass and edge functions for server-side capture), self-hosted setups using Docker, and deployment patterns for Google Cloud Run. Ensures robust, reliable user behavior tracking regardless of the hosting platform.

Guides bug bounty hunters through REST, SOAP, and GraphQL API fuzzing to uncover authentication weaknesses, IDOR, injections, and endpoint bypasses while outlining practical reconnaissance and exploitation workflows.

This methodology converts verbose, natural language system instructions into an atomic, structured-label format (e.g., trigger:, action:). By structuring rules, it bypasses the limitations of natural language processing, ensuring LLMs allocate full attention to every constraint, thereby maximizing compliance, improving reliability, and reducing token usage.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.