Skill UI

A comprehensive guide for systematically assessing modern API endpoints (REST, GraphQL, gRPC) against the OWASP API Security Top 10 (2023). This workflow covers identifying endpoints, testing for Broken Object Level Authorization (BOLA/IDOR), assessing broken authentication, and validating rate limiting. Use this during authorized penetration tests or before production deployment to ensure robust API security.

A comprehensive guide for assessing the security of JSON Web Token (JWT) implementations. This toolkit details attacks against cryptographic weaknesses, including algorithm confusion (e.g., RS256 to HS256), 'none' attacks, brute-forcing HMAC secrets, and claim manipulation. Ideal for penetration testing and security audits of modern APIs and SSO systems.

A specialized skill for generating production-ready, SEO-optimized visual assets. It handles various use cases including OG social cards, blog hero images, product visuals, and infographics. The system ensures outputs adhere to best practices like specific aspect ratios, schema markup, and file naming conventions, making content publishable and discoverable by search engines.

Analyze a codebase to assemble an interactive knowledge graph showing architecture, components, and relationships, enabling full rebuilds, incremental updates, or audits with optional auto-update control.

Helps developers answer codebase questions by leveraging the `.understand-anything/knowledge-graph.json` graph; walks through project metadata, nodes, edges, and layers to explain dependencies and contexts.

Launches an interactive web dashboard designed to visualize the knowledge graph derived from a target codebase. This tool helps developers gain a high-level, structural understanding of complex projects by mapping out relationships, module dependencies, and the overall knowledge network of the code, making maintenance and onboarding significantly easier.

Use the understand-diff skill to analyze git changes against the stored knowledge graph so you can quickly summarize modified files, affected components, and risk areas before reviewing or merging.

Provide step-by-step explanations of specific files, functions, or modules, leveraging the understand-explain workflow to map graph context, layer placement, internal structure, and data flow for developers needing deep clarity.

Creates a comprehensive onboarding guide for new teammates by extracting project context from the knowledge graph, layering architecture descriptions, guiding tours, and highlighting complex files so newcomers can ramp up quickly.

Guides frontend designer-engineers to deliver memorable, production-ready interfaces by defining an aesthetic stance, scoring feasibility with DFII, and translating every intentional decision into code, typography, motion, and texture.

This powerful tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates identified components against the NVD CVE database via API, building dependency graphs and calculating risk scores. It is essential for assessing third-party risk, identifying transitive vulnerability paths, and generating comprehensive compliance reports for supply chain security.

A comprehensive skill for conducting authorized Bluetooth Low Energy (BLE) security assessments. It covers detecting various attacks, including sniffing, Man-in-the-Middle interception, replay attacks, and GATT enumeration abuse. The workflow guides users through packet capture using specialized sniffers (Ubertooth, nRF Sniffer), analyzing services and characteristics via Python/bleak, and performing cryptographic analysis using tools like crackle.