Skill UI

A detailed guide for conducting authorized penetration tests to detect and exploit HTTP request smuggling flaws. This technique targets discrepancies in Content-Length and Transfer-Encoding parsing between front-end proxies (like CDNs or load balancers) and back-end servers, allowing attackers to bypass security controls and hijack subsequent requests.

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

A comprehensive UI component designed to mimic the Spotify Now-Playing interface. It renders current music, podcast, or media content with album art, progress bar, and playback controls. Ideal for video overlays, streaming intros, or personal website hero sections, providing a highly branded and polished look.

Build fillable Word .docx forms using real Content Controls (SDT), legacy FormField checkboxes, MERGEFIELD mail-merge placeholders and document protection, so only designated fields stay editable while the rest is locked.

This guide provides authors with best practices for structuring scientific papers, specifically focusing on the division of content between the main body (The Letter) and the Supplemental Material (SM). It emphasizes the 'stand-alone' rule, ensuring the core argument remains fully understandable without consulting the SM, while effectively organizing detailed derivations, extended datasets, and secondary controls in the appendix.

This skill helps audit and fix HTML accessibility issues such as ARIA labels, keyboard navigation, focus management, color contrast, and form errors. It is used when adding interactive controls, forms, dialogs, or reviewing WCAG compliance. It ensures web content is usable by people with disabilities by following best practices for accessible design and semantic HTML.

This skill defines grouping, alignment, and reading order for responsive layouts. It ensures structures remain stable when resized, translated, or mirrored for RTL. It establishes spacing rules, distinguishes interactive controls from content, and manages logical properties for direction-dependent layouts to maintain visual integrity.