Skill UI

This skill focuses on identifying security vulnerabilities in Large Language Model (LLM) and AI features. It covers prompt injection, system prompt leakage, cross-tenant access, and data exfiltration techniques. Users must verify findings against false positives using reproducibility checks and out-of-band callbacks before reporting.

Guides authorized security testers through identifying and exploiting NoSQL injection vulnerabilities in MongoDB, Redis, and Elasticsearch, including auth bypass, blind injection, data extraction, and automation with nosqlmap.

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

A security skill for hunting server-side request forgery (SSRF) vulnerabilities, covering cloud metadata, internal services, OOB confirmation, and authorized testing workflows.

This skill provides comprehensive guidance on establishing secure, high-performance connectivity between on-premises data centers and major public cloud providers (AWS, Azure, GCP). It covers various connection options, including Site-to-Site VPN, AWS Direct Connect, Azure ExpressRoute, and GCP Cloud Interconnect. Use this skill to design and implement complex hybrid network patterns (e.g., Hub-and-Spoke, Multi-Cloud), ensuring high availability, proper routing (BGP), and adherence to security best practices.

This skill orchestrates multi-agent incident response workflows using modern SRE practices. It guides users through detection, triage, investigation, and resolution phases. It helps classify severity, analyze observability data, implement mitigations, and conduct root cause analysis. Suitable for handling outages, security breaches, and performance issues with structured checklists and best practices.

Detects security risks in multi-agent systems such as data leakage, boundary violations, unencrypted channels, and privilege mismatches. Used when agents collaborate or share context to verify secure communication protocols and access controls.

Develop native iOS applications using Swift and SwiftUI, mastering iOS 18 features, UIKit integration, Core Data, networking, and App Store optimization. Expertise includes architecture patterns, security, performance tuning, and Apple ecosystem integration for production-ready apps.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

Secure LLM-powered applications against prompt injection, data leakage, and abuse using input validation, output controls, and tenant isolation. Implements OWASP LLM Top 10 mitigations with Python and Node.js examples.

Expert mobile developer specializing in React Native, Flutter, and native iOS/Android development. Covers cross-platform development, architecture patterns, performance optimization, data sync, testing, DevOps, security, and app store optimization.