Skill UI

This expert skill audits and designs user interfaces for the Apple ecosystem (iOS, macOS, watchOS, visionOS) against the official Human Interface Guidelines (HIG). It checks crucial elements like contrast ratios (WCAG standards), minimum tap-target sizes, and adherence to modern design languages like Liquid Glass. Use it when reviewing mockups or developing native-feeling Apple apps to ensure accessibility and optimal user experience.

This skill acts as an expert Design Systems Lead, analyzing complex technical assets (HTML, CSS, screenshots) from existing projects. It synthesizes a comprehensive 'Semantic Design System' into a structured DESIGN.md file. This output serves as the authoritative 'source of truth' for AI prompting, ensuring that any new UI generated by tools like Stitch adheres perfectly to the established visual language, color palette, and component standards.

This skill acts as a Senior Solution Architect specializing in the Microsoft Power Platform ecosystem (Power Apps, Power Automate, Power BI, etc.). It excels at analyzing unstructured input, such as meeting transcripts or high-level use case descriptions, and generating a comprehensive technical solution architecture. The output includes component selection, detailed implementation steps, and visualizations (e.g., Mermaid.js diagrams) required to build a robust digital solution.

Expert assistance for building, modifying, and debugging Minecraft server plugins for the Paper, Spigot, and Bukkit ecosystems. This includes implementing complex gameplay mechanics such as minigames, advanced combat systems, persistent player progression (perks, economy, quests), custom command handling, and robust state management. We handle configuration, listener registration, and adherence to best practices for Java-based server API usage.

This skill performs a rigorous, 5-dimension expert critique on any digital artifact, such as landing pages, presentations, or prototypes. It systematically evaluates five critical areas—Philosophy, Visual Hierarchy, Detail Execution, Functionality, and Innovation—scoring each 0-10. The output is a comprehensive, evidence-backed HTML report providing actionable insights, a radar chart, and prioritized lists (Keep/Fix/Quick-wins) to guide systemic design improvements.

A comprehensive guide detailing advanced security threats in Machine Learning and AI systems. Covers model supply chain attacks (RCE via pickle, poisoning), adversarial examples (FGSM, PGD, physical-world), data privacy breaches, and LLM-specific vulnerabilities. Essential for building robust, secure AI pipelines.

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

An expert playbook for systematically testing Insecure Direct Object References (IDOR) and Broken Object/Function Level Authorization (BOLA/BFLA). This guide covers finding object identifiers across all request vectors (URL, body, headers, cookies), implementing A-B testing methodologies, identifying various ID patterns, and executing horizontal or vertical privilege escalation attacks. Essential for deep API security auditing.

An expert playbook detailing advanced techniques for pivoting across compromised Linux hosts. Techniques cover SSH agent hijacking, credential harvesting from common system files, key extraction, and abusing internal services via D-Bus and systemd exploitation, crucial for post-exploitation stages.

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.

A comprehensive playbook detailing advanced macOS process injection techniques. It covers exploiting system mechanisms such as DYLD_INSERT_LIBRARIES, dylib hijacking (weak/rpath), XPC abuse, and Mach port manipulation. Essential for security researchers and penetration testers aiming to execute code in target processes.

A comprehensive playbook for professional bug bounty hunting and penetration testing. This guide covers systematic reconnaissance, from initial asset discovery (subdomains, IPs) and technology fingerprinting to advanced endpoint and source code mining. Learn the structured methodology used by top hunters to maximize coverage and find high-severity vulnerabilities.