Skill UI

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

Guides security pros through WordPress 7.0 attack surfaces covering discovery, enumeration, vulnerability scanning, credential checks, and exploitation with WPScan, Burp, Metasploit, and manual curl probes for authorized assessments.

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

This skill manages complex coding tasks from initial implementation through testing, review incorporation, deployment, and final runtime verification. It ensures the task meets explicit Definition of Done (DoD) criteria iteratively, minimizing the need for manual prompting across multiple development stages.

A comprehensive guide simulating real-world attacks against internet-facing infrastructure (firewalls, web servers, DNS, etc.). It covers the entire penetration testing lifecycle, including passive and active reconnaissance, vulnerability scanning (using tools like Nmap, Nessus, and Nuclei), manual validation, and simulated exploitation, adhering to standards like PTES and OSSTMM.

A comprehensive guide for authorized red team engagements, detailing manual enumeration and automated tooling to escalate privileges from a low-level user to root on Linux. Techniques cover exploiting misconfigurations, vulnerable services, kernel flaws, and weak permissions, mapped directly to MITRE ATT&CK framework. Use only in controlled, authorized security testing environments.

A comprehensive guide for manually assessing critical business rules and workflows in web applications. This technique goes beyond automated scanning by simulating attacks like price manipulation, multi-step process bypass, and privilege escalation. Ideal for securing e-commerce checkout funnels, financial transactions, and complex authorization systems.

Validate business ideas with Sahil Lavingia’s Minimalist Entrepreneur playbook by selling a manual version, defining precise users, testing processes without code, and gauging if customers will pay before building.

A comprehensive guide to setting up CI/CD pipelines for ElevenLabs integrations. It implements a robust two-tier testing strategy: running mocked unit tests on every push to save API quota, and executing gated, real integration tests only on main branches or manually. Essential for automated validation of TTS projects using GitHub Actions.

This playbook is designed for advanced vulnerability assessment, covering flaws invisible to automated scanners. It guides testing for race conditions, complex workflow bypasses, state machine manipulation, financial parameter tampering (e.g., price/quantity manipulation), and coupon/credit abuse in multi-step applications. Essential for deep manual security testing.

This skill automatically generates comprehensive unit tests based on provided source code. It supports multiple programming languages (Python, JavaScript, Java, Go, Rust) and popular testing frameworks (pytest, Jest, JUnit). Use it to improve code coverage, test boundary conditions, and validate error handling efficiently, saving manual testing time.