Skill UI

A comprehensive playbook detailing advanced techniques for bypassing modern Endpoint Detection and Response (EDR) and Antivirus (AV) solutions on Windows. Covers exploiting vulnerabilities in AMSI, ETW, and implementing sophisticated process injection methods (e.g., Process Hollowing, Early Bird) to execute payloads while maintaining stealth.

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

This skill guides the safe execution of chaos engineering experiments to surface weaknesses in production systems without causing actual outages. It provides tools to design robust experiments by defining hypotheses, calculating the potential 'blast radius' before failure injection, setting strict abort criteria, and generating structured postmortems. Ideal for SRE teams running game days and resilience tests.

This guide outlines architectural patterns and best practices for building scalable, production-ready APIs with FastAPI. It covers proper project structure, separating concerns using routers, services, and CRUD layers, implementing dependency injection for database sessions and authentication, defining Pydantic schemas for request/response, handling asynchronous operations, and managing custom error responses.

This skill guides developers on integrating CommunityToolkit.Mvvm ViewModels with Microsoft's Dependency Injection system. It covers setting up the composition root using the .NET Generic Host, managing service lifetimes (Singleton, Transient, Scoped), implementing constructor injection, and correctly registering messaging services (IMessenger) for robust, cross-platform XAML applications (WPF, MAUI, Uno, Avalonia).

This comprehensive guide covers best practices for building modern Angular applications. It provides detailed instructions on component architecture, state management using Signals, advanced routing, dependency injection, handling forms (prioritizing Signal Forms), and implementing accessibility (ARIA). It also details setup procedures for new projects and modern rendering strategies like SSR.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A powerful PreToolUse hook designed to act as a safety net during code writing sessions. It automatically scans both file paths and content for 12 common security anti-patterns, including SQL injection, XSS, command injection (Node.js/Python), and unsafe deserialization. It blocks the writing operation and provides immediate warnings, ensuring adherence to secure coding practices when handling sensitive code like authentication or payment logic.

This guide details the use of Deneb, a certified custom visual, to embed Vega and Vega-Lite declarative visualization specifications directly into Power BI reports (PBIR). It outlines the complete workflow, from data binding and spec authoring to injection and validation using the pbir CLI. It emphasizes best practices, such as preferring Vega-Lite and handling complex field name escaping for robust report mutation.

This guide details the process of creating advanced, static visualizations in Power BI using Python libraries like matplotlib and seaborn. It covers the full workflow, from script writing and data injection to best practices and limitations, enabling users to render complex, custom charts not supported by native Power BI visuals.

Luna serves as the final quality gate, rigorously reviewing code for objective correctness, security vulnerabilities, and overall reliability. It checks for critical flaws such as injection vulnerabilities, authorization bypasses, race conditions, and adherence to the architectural blueprint. It ensures that only high-quality, safe code progresses to QA and deployment.