Skill UI

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.

A comprehensive playbook detailing advanced techniques for bypassing core macOS security features, including TCC, Gatekeeper, SIP, and sandbox restrictions. This guide is essential for authorized red team operations and penetration testing targeting macOS endpoints, covering methods like direct database manipulation, extended attribute removal, and privilege escalation paths.

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

A comprehensive, multi-phase checklist for ensuring the quality, security, and deployment readiness of Django applications. It covers linting (ruff, mypy), unit testing (pytest), database migrations, security audits (bandit, pip-audit), and performance checks, making it an essential quality gate for CI/CD pipelines before merging or deploying to production.

A comprehensive guide to implementing Test-Driven Development (TDD) in Laravel. This resource covers best practices for Unit, Feature, and Integration testing, guiding developers on using PHPUnit and Pest. It details strategies for managing database states (e.g., RefreshDatabase) and effectively mocking external dependencies for robust application development.

A comprehensive guide for designing and presenting highly rigorous technical evaluations for database or system papers. It covers establishing baseline necessity, proving mechanism causality through ablation, testing scalability across data sizes, and mandating the disclosure of loss cases to satisfy skeptical academic reviewers.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.

This skill manages the complex, multi-step workflow for updating the company's threat intelligence database. It delegates the core research and content updates to the dedicated AgentSec system. The process involves reading AgentSec's source material, executing rigorous testing in an isolated workspace, synchronizing the validated security feed, and finally ensuring data integrity by validating the updates across the guide and landing mirrors.