Skill UI

Guides CRO experts through diagnosing signup friction, evaluating form fields and steps, and recommending quick wins, high-impact changes, and experiments to lift completion rates across trials, freemium, paid, and waitlist flows.

This comprehensive tool validates Claude Code plugins against official Anthropic specifications and internal enterprise standards. It performs two main types of checks: structural validation (checking `plugin.json` fields, file references, and permissions) and content validation (conducting deep grading using `SKILL.md`). Use this when building, auditing, or preparing plugins for marketplace submission to ensure compliance and quality.

Guides borrowers through refinance evaluation by collecting loan data, extracting mortgage statement fields, validating inputs against underwriting rules, and recommending the best products with clear, consumer-friendly explanations.

Utilize the Scapy library in Python to perform deep packet inspection, crafting, sending, and sniffing of various network protocols (TCP, UDP, ICMP, DNS). This skill is essential for analyzing pcap files, implementing advanced security techniques like SYN scans, extracting protocol fields, and detecting network anomalies such as fragmentation or tunneling indicators. Ideal for security researchers, SOC analysts, and penetration testers.

Authoring and tuning Falco rules to detect container escape techniques, including host filesystem mounts, nsenter usage, privileged containers, kernel module loading, and host manipulation. Covers rule syntax, condition tuning, output fields, priorities, and false positive reduction.

A specialized security testing skill designed to identify excessive data exposure in REST or GraphQL APIs, adhering to OWASP API3:2023 guidelines. It works by intercepting raw API responses and systematically comparing the returned data against what the frontend UI actually displays. This helps auditors detect leaked PII, internal identifiers, debug fields, or other sensitive business data that should have been filtered out by the endpoint response. Use cases include auditing microservice boundaries, assessing mobile API responses designed for multiple clients, and verifying proper respons...

Perform comprehensive security audits on Bluetooth Low Energy (BLE) devices, identifying potential vulnerabilities in IoT, healthcare, and smart home applications. This skill uses Python to discover devices, enumerate GATT services, and flag unencrypted or unauthenticated read/write access to sensitive data fields, helping organizations validate security controls.

This skill outlines the systematic process of integrating new data sources (e.g., Firewalls, EDR, Cloud, AD) into a SIEM platform. It covers planning, configuring collectors, building parsers, normalizing data fields (e.g., CIM), and validating data quality to enhance security monitoring and incident detection capabilities.

This script automates the testing of API endpoints for mass assignment (over-posting) vulnerabilities, adhering to OWASP API3:2023 guidelines. It systematically injects undocumented, privileged fields (like 'role', 'isAdmin', 'balance', 'price') into request bodies of typical endpoints (e.g., profile updates, order creation). It checks if the server binds these unexpected fields to the data model without proper filtering, potentially allowing unauthorized privilege escalation or data manipulation.

Generates implementation-ready JSON-LD schema markup for 10 types (e.g., FAQPage, Product, Article). It validates all fields against Google rich result eligibility rules, flags missing data with fix instructions, and provides clean, ready-to-paste script blocks to optimize search engine visibility and achieve rich results.

Provides a minimal skill definition that only includes the required fields, showing how to structure SKILL.md for quick testing or deployment of basic examples.

This skill provides comprehensive operations for Feishu Base (Multi-Dimensional Table), serving as a powerful internal database management system. It supports all CRUD operations, including creating and updating tables, managing fields (including formulas and lookups), writing and reading records, setting up complex views, building dashboards, and automating workflows. Use this skill when dealing with multi-dimensional tables, Bitable links, or the Base environment.