Skill UI

This guide provides a comprehensive methodology for auditing essential HTTP security headers, including CSP, HSTS, X-Frame-Options, and Referrer-Policy. It helps identify missing or improperly configured browser-level protections, crucial for mitigating vulnerabilities like XSS, clickjacking, and mixed content issues, ensuring compliance with standards like PCI DSS and SOC 2.

This skill provides a comprehensive guide to executing web cache deception attacks. It details methods for exploiting path normalization discrepancies, delimiter abuse, and cache key manipulation across CDNs and reverse proxies (e.g., Cloudflare, Akamai). Use this during authorized penetration testing to assess if authenticated sensitive content can be cached and retrieved by unauthenticated attackers.

A comprehensive guide for security professionals detailing how to exploit web cache mechanisms (CDNs, reverse proxies) to inject malicious content. It covers identifying caching layers, discovering unkeyed headers (like X-Forwarded-Host), and executing poisoning attacks for authorized penetration testing.

Harbor is an open-source container registry designed for robust security and compliance. This guide details the comprehensive workflow for securing your container ecosystem by implementing advanced features such as vulnerability scanning (Trivy), image signing (Notary/Cosign), Role-Based Access Control (RBAC), and content trust policies. Learn how to enforce image provenance and maintain strict access control in Kubernetes environments.

This skill is designed for assessing the security of Android inter-process communication (IPC) by systematically testing intents, broadcast receivers, content providers, and exported components. It helps identify critical vulnerabilities such as intent injection, unauthorized data leakage, and component hijacking, which are crucial during mobile penetration testing and security audits.

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

AgentHub spawns parallel git worktree agents that compete on tasks, evaluates their outputs via metrics or LLM judges, and merges the top branch for optimizations, research, or content variations.

Astro is a modern web framework designed specifically for building high-performance, content-heavy websites like blogs, documentation sites, and portfolios. Its core innovation is the Islands Architecture, which ships zero JavaScript by default, drastically improving performance and Core Web Vitals. It supports multi-framework components (React, Vue, Svelte) in a single project, making it ideal for content developers prioritizing speed and flexibility.

A specialized skill for generating production-ready, SEO-optimized visual assets. It handles various use cases including OG social cards, blog hero images, product visuals, and infographics. The system ensures outputs adhere to best practices like specific aspect ratios, schema markup, and file naming conventions, making content publishable and discoverable by search engines.

ADHX provides a dedicated API to fetch X/Twitter posts as clean, structured JSON. It extracts comprehensive data, including author profiles, engagement metrics (likes, retweets), and full article content for long-form posts. This method is vastly superior to traditional scraping techniques, making it ideal for LLM analysis, summarization, and structured data workflows.

AKF is the native metadata format specifically designed for tracking AI-generated or AI-modified content. It allows users to stamp files (including DOCX, PDF, images, and code) with detailed trust scores, source provenance, and compliance metadata. This tool is essential for professional workflows requiring strict auditing, compliance assurance, and verifiable data lineage, especially concerning regulations like the EU AI Act, HIPAA, and SOX.

Guides creators already near product-market fit to grow an organic audience through free, authentic content, consistent scheduling, email ownership, and build-in-public feedback before spending on ads.