Skill UI

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

This guide provides a deep, investigation-driven methodology for reviewing Django and Django REST Framework (DRF) codebases. It helps identify critical authorization gaps, focusing on Insecure Direct Object References (IDOR) and object-level access failures. Learn how to trace data flows, analyze custom managers, and verify that users can only access resources they are explicitly authorized to view or modify.

This comprehensive guide details the use of FFUF, a fast web fuzzer written in Go. It is designed for advanced security penetration testing, providing techniques for content discovery, subdomain enumeration, parameter fuzzing, and POST data testing. Learn to master the FUZZ keyword, advanced filtering, and auto-calibration to efficiently identify hidden paths and potential vulnerabilities in web applications.

Yara Authoring helps security teams write precise YARA rules for threat detection and malware hunting by guiding string/tag management and metadata handling so signature creation keeps pace with investigations.

A specialized tool for auditing source code (C/C++/Rust) to ensure sensitive data (keys, passwords, PII) is properly zeroized. It analyzes memory handling at the assembly and IR level to detect if compiler optimizations, such as dead-store elimination, have accidentally removed or weakened the secure cleanup process. Essential for maintaining security in critical codebases.

This expert skill performs non-intrusive static analysis to thoroughly audit AI skills and bundles. It identifies malicious patterns, data leaks, system stability risks, and obfuscated payloads across major operating systems (Windows, macOS, Linux/Unix) and mobile platforms (Android/iOS). Use it when verifying skill legitimacy or performing deep cross-platform security reviews.

This comprehensive index covers 37 advanced engineering skills designed for complex system architecture, platform operations, and reliability. Skills include agent design, RAG implementation, CI/CD, observability, database modeling, and security auditing, supporting the entire development lifecycle for powerful enterprise applications.

This comprehensive index provides access to 32 production-ready, specialized engineering skills. It covers the entire development lifecycle, including system architecture, frontend, backend, DevOps, security operations, AI/ML, and data engineering. It is designed to guide users in selecting and loading only the specific module needed, ensuring focused expertise for complex tasks.

This router bundles 15 specialized compliance skills crucial for HealthTech and MedTech organizations. It provides structured guidance across major global regulations, including ISO 13485 QMS, EU MDR, FDA submissions, GDPR, and the EU AI Act. Use this when a compliance request is complex and needs to be accurately directed to a specific technical skill area (e.g., risk management, CAPA, data security).

Perform a technical SEO audit across crawlability, indexability, security, URL structure, mobile usability, Core Web Vitals, structured data, JavaScript rendering, and IndexNow. Use it to find issues that block crawling, indexing, or search performance.

Hindsight is an open-source tool designed for digital forensics, parsing artifacts from various Chromium-based browsers (Chrome, Edge, Brave, etc.). It extracts and correlates all web activity data, including browsing history, cookies, cached content, downloads, and saved credentials, into a unified timeline. This tool is essential for incident response, insider threat investigations, and reconstructing user web activity in security and legal contexts.