Skill UI

Provides comprehensive guidelines for modern web development, covering critical areas like security best practices (e.g., CSP, HTTPS enforcement, input sanitization), browser compatibility (viewport, encoding), and avoiding deprecated APIs. Use this skill when aiming to audit, modernize, or improve the overall quality and robustness of web code.

Feature Engineering Toolkit automates creating, selecting, and transforming dataset features to improve machine learning models; use it whenever you need new interactions, automatic selection, scaling, or encoding to boost accuracy and interpretability.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

Extends transformer context windows using RoPE, YaRN, ALiBi, and position interpolation so long documents (32k-128k+ tokens) can be processed, pre-trained models lengthened, and efficient positional encodings or extrapolation strategies deployed.

Comprehensive checklist for application security hardening, covering input validation, output encoding, SQL/CSRF defenses, security headers, JWT best practices, secrets handling, rate limiting, and dependency audits to keep web services resilient.

A detailed guide for conducting authorized penetration tests to detect and exploit HTTP request smuggling flaws. This technique targets discrepancies in Content-Length and Transfer-Encoding parsing between front-end proxies (like CDNs or load balancers) and back-end servers, allowing attackers to bypass security controls and hijack subsequent requests.

This comprehensive guide details methods for testing web applications against directory traversal (path traversal) and local/remote file inclusion (LFI/RFI) vulnerabilities. It covers advanced techniques, including path manipulation, encoding bypasses, and automated fuzzing using tools like ffuf and dotdotpwn. Use this during authorized penetration tests to assess file download, view, or include functionality.

This guide details advanced techniques for bypassing Web Application Firewalls (WAFs). It covers methods such as payload obfuscation, advanced URL encoding, HTTP method manipulation (PUT, PATCH, etc.), parameter pollution, and utilizing specialized tools like SQLMap tamper scripts to smuggle exploit payloads (e.g., SQLi, XSS) past perimeter security controls. Essential for penetration testing and red team engagements.

A comprehensive guide and set of payloads for identifying and exploiting Open Redirect vulnerabilities. It covers various parameters (next, redirect_uri), advanced bypass techniques (encoding, path traversal, protocol abuse), and chaining findings with OAuth or phishing attacks using tools like Burp Suite and OWASP ZAP.

A detailed methodology for identifying Cross-Site Scripting (XSS) vulnerabilities across web applications. It guides systematic testing for Reflected, Stored, and DOM-based XSS, covering payload bypass, output encoding evaluation, and assessing Content Security Policy (CSP) protection. Essential for OWASP WSTG testing and client-side security audits.

Automates uploading files from Claude to Google Drive by encoding them and POSTing through a deployed Apps Script, returning Drive links so workflows that produce deliverables can save them directly in Drive across languages.

A comprehensive guide detailing best practices for executing commands on Windows using PowerShell and CMD. It addresses critical pitfalls such as handling spaces in file paths, ensuring correct character encoding (UTF-8), using native cmdlets, and managing long path limits. Essential for developers building robust, cross-platform Windows automation scripts.