Skill UI

Hunt SAML/SSO attacks including XML Signature Wrapping, comment injection, signature stripping, XXE, and NameID manipulation. Provides attack surface discovery, manual exploitation workflows, and triage guidance for authorized security assessments.

A security assessment tool designed to identify specific vulnerabilities in Spring Boot applications, such as exposed Actuator endpoints, H2 Console access, SpEL injection, and memory dumps containing secrets. Requires explicit written authorization for authorized security assessments.

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

Detects and exploits server-side template injection (SSTI) across Jinja2, Twig, Freemarker, ERB, Spring, Velocity, Mako, Thymeleaf, and Smarty, offering detection payloads, RCE escalation paths, and authorized testing guidance.

Hunts reflected, stored and blind XSS during authorized web security assessments: reflection verification, unique canary payloads, context-based injection and out-of-band confirmation.

Expert hybrid cloud architect for designing multi-cloud solutions across AWS, Azure, GCP, and private clouds, covering connectivity, security, cost, and observability.

Configure secure, high-performance connectivity between on-premises and cloud environments using VPN, Direct Connect, and ExpressRoute. This skill covers AWS, Azure, and GCP integration, routing, security, and high availability patterns for hybrid infrastructure.

This skill formats AI responses to support ADHD readers by prioritizing immediate next actions, numbered steps, and specific time estimates. It eliminates tangents and preamble, ensuring visible progress and clear state tracking for better task execution and focus.

A comprehensive guide covering Internationalization (i18n) and Localization (L10n) best practices. It details how to build applications that can support multiple languages, regions, and text directions (RTL). Covers implementation patterns for React, Next.js, and Python, along with essential guidelines for handling date/number formats and managing translation keys.

This system treats ideas like living species on an 'evolution island.' Instead of simple storage, it runs structured, multi-round iterations simulating biological processes: competition, crossbreeding, and mutation. Users input initial concepts, and the tool systematically evaluates them using a 6-dimensional scoring framework (Novelty, Feasibility, Value, etc.). It helps users deepen viability, discover unexpected connections between disparate ideas, and prioritize the most robust concepts for development and investment.

A critical persona for idea validation debates. It identifies flaws, risks, and market challenges, acting as a red team to prevent over-optimism. Use as a sub-agent in the @idea-evaluator skill to rigorously test ideas.

idea-os is a comprehensive, five-phase pipeline designed to transform a raw, abstract idea into a fully structured, build-ready plan. It guides users through Triage, Clarification, Deep Research, detailed PRD creation (including non-goals and metrics), and finally, a phased execution plan. The system adapts its complexity and vocabulary to the user's sophistication level, providing everything from foundational market analysis to actionable technical stack recommendations.