Skill UI

This skill ensures code adheres to security best practices and identifies vulnerabilities. It is used for authentication, authorization, input validation, file uploads, and API development. It covers secrets management, SQL injection prevention, XSS protection, and secure session handling.

Expert in handling file uploads and cloud storage solutions like S3 and Cloudflare R2. Covers presigned URLs, multipart uploads, and image optimization. Ensures security by validating file types and preventing path traversal attacks. Optimizes performance for large files without blocking.

Authorized-use hunting guide for XXE vulnerabilities: maps XML entry points, tests file uploads, SAML and SOAP endpoints, then escalates from inline file read to blind out-of-band exfiltration, SSRF pivoting and internal service access.

Handle n8n files and binary data across uploads, downloads, transforms, multimodal inputs, agent tools, and chat surfaces. Covers where binary lives, how to read/write it, preventing data loss, and the AI-agent tool boundary.