Skill UI

Discover the effective local AWS profile, region, account and caller identity via masked AWS CLI metadata before any AWS task, flagging SSO or assumed-role principals without ever exposing credentials.

This skill enables AI assistants to interact with the Hugging Face Hub via Model Context Protocol (MCP). Users can search for models, datasets, and papers, retrieve repository details, fetch documentation, and execute compute jobs on GPU or CPU. It also allows leveraging Gradio Spaces as functional AI tools. Ideal for developers and researchers needing direct access to the HF ecosystem for model discovery, training, and deployment workflows.

Methodology for hunting open redirect flaws in web apps: parameter discovery, bypass payloads, DOM-based sinks, OAuth auth-code theft chains and SSRF escalation. Docs-only, for authorized bug bounty and pentest use.

Hunt SAML/SSO attacks including XML Signature Wrapping, comment injection, signature stripping, XXE, and NameID manipulation. Provides attack surface discovery, manual exploitation workflows, and triage guidance for authorized security assessments.

Offensive security skill for hunting SQL injection flaws under written authorization. Covers injection confirmation, UNION column enumeration, reflected-column discovery, and data dumping, plus high-value targets like search, filter, and report endpoints.

A security assessment skill for identifying WebSocket vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), message tampering, handshake-layer attacks, and socket.io authorization bypasses. Requires explicit written authorization before testing. Includes reconnaissance, endpoint discovery, and exploit verification techniques for authorized security assessments.

This advanced skill is a multi-agent research framework designed for executing deep, extensive research in parallel. It orchestrates a team of 10 specialized agents to gather, synthesize, and analyze information simultaneously. It is ideal for complex topics that require rapid, broad, and battle-tested investigation across multiple dimensions, significantly accelerating the knowledge discovery process.

Automates Klaviyo email/SMS marketing via Rube MCP, letting you list campaigns, inspect messages, manage tags, and track send jobs while respecting schema discovery and pagination patterns.

Red-team playbook for Microsoft 365 and Entra ID: tenant discovery, AADSTS error-code triage, Smart Lockout math for safe credential spraying, and user-enumeration vectors. Authorized engagements only.

Generate images and videos using MuAPI's schema-driven asynchronous API. This skill handles model discovery, request preparation, secure submission, and polling for results, ensuring key protection and efficient media generation workflows.

A remote MCP server designed for AI agents to dynamically discover, inspect, and verify external tools, APIs, and services. It allows agents to search a curated index of AI-ready websites, check for machine-readable endpoints (like OpenAPI or MCP), and confirm if an endpoint responds correctly to JSON-RPC, enabling robust, dynamic agent workflow building.

This skill provides a red-team attack chain for Okta-as-IdP environments, covering tenant discovery, user enumeration, and authentication flow analysis. It includes commands for probing Okta APIs and analyzing responses to identify security weaknesses. Strictly for authorized security assessments.