Skill UI

This powerful CLI allows users to interact with the MiniMax AI platform directly from the terminal. It supports generating and managing diverse multi-modal content, including text, images, video, speech, and music, in addition to performing web searches and analyzing images. It is essential for integrating complex AI capabilities into automated workflows, CI/CD pipelines, or agent-based systems.

This powerful script uses Nano Banana models to facilitate advanced image creation and manipulation. Users can generate high-quality images from simple text prompts, perform detailed image edits (inpainting/outpainting), or combine multiple images into a single collage. It supports various resolutions and aspect ratios, making it ideal for artists, designers, and anyone requiring advanced visual content generation.

This is an all-in-one command-line tool for generating and editing images using the full Nano Banana model family. Users can select the optimal model—Gemini 3.1 Flash for balanced performance, Gemini 3 Pro for high-quality output, or Gemini 2.5 Flash for speed—to suit their needs. Key features include text-to-image generation, precise single image editing, and multi-image collage composition, making it versatile for creative and technical workflows.

This skill automates the validation of Navan API integrations within CI/CD pipelines. It generates robust GitHub Actions workflows to perform comprehensive tests, including token health checks, booking data schema validation, and automated compliance report generation. By integrating these checks into your push/pull request process, it ensures the stability and adherence of your Navan connection without requiring a dedicated SDK.

This skill manages the end-to-end Navan expense reporting workflow. It allows users to retrieve detailed transaction data via API, automate multi-level approval workflows based on configured policies, and map expenses to specific General Ledger (GL) codes. It is designed to generate journal entry payloads for seamless synchronization with major accounting systems like NetSuite, Xero, and QuickBooks, streamlining financial reconciliation.

Generates professional and customized Non-Disclosure Agreements (NDAs) for various business scenarios, including partnerships, hiring, and vendor relationships. It supports mutual, one-way, employee, and vendor variants, ensuring comprehensive coverage across 15 mandatory legal sections. A key feature is the inclusion of plain English annotations after each section, allowing non-legal personnel to clearly understand the agreement's terms and implications.

This skill analyzes complex legal contracts and agreements, identifying unfavorable, high-risk, or one-sided clauses regarding liability, IP, or termination. It generates a structured negotiation strategy document, providing prioritized counter-proposals, recommended replacement language, and professional talking points to guide users through high-stakes contract reviews before signing.

This comprehensive workflow provides core CRUD (Create, Read, Update, Delete) operations for Notion integrations. It allows users to perform complex database queries using nested filters (AND/OR) across various property types (select, date, number, etc.). Furthermore, it facilitates the structured creation and updating of pages, making it essential for automating data management, content generation, and complex information retrieval within Notion.

This skill guides the comprehensive process of crash triage, enabling the assessment of vulnerability exploitability. It covers advanced techniques using debuggers (WinDbg/GDB), sanitizers (ASAN/MSAN), and interpreting low-level data like stack traces and register dumps. It is essential for vulnerability researchers analyzing crash dumps or fuzzer-generated failures to identify root causes and potential attack vectors.

This is a detailed offensive checklist for identifying and exploiting insecure deserialization vulnerabilities across multiple programming languages (Java, Python, PHP, .NET, Node.js, etc.). It covers techniques like gadget chain generation, magic method abuse, type confusion, and modern attack vectors, providing a deep methodology for penetration testing and vulnerability research.

This comprehensive guide covers advanced fuzzing methodology, a core technique in exploit development. Learn how to use coverage-guided fuzzing with powerful tools like AFL++ and libFuzzer to automatically discover critical security vulnerabilities, such as memory corruption bugs. Ideal for setting up robust fuzz campaigns, optimizing corpus generation, and triaging complex vulnerability outputs.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.