Skill UI

A comprehensive skill for identifying and exploiting Cross-Site Scripting (XSS) vulnerabilities in web applications. It systematically tests reflected, stored, and DOM-based contexts by injecting various JavaScript payloads. The process involves mapping all user input points, identifying output contexts (HTML body, attribute, JS string, etc.), and crafting payloads to bypass sanitization and Content Security Policy (CSP) protections, simulating real-world attacks like session hijacking and credential theft.

Launches an interactive web dashboard designed to visualize the knowledge graph derived from a target codebase. This tool helps developers gain a high-level, structural understanding of complex projects by mapping out relationships, module dependencies, and the overall knowledge network of the code, making maintenance and onboarding significantly easier.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

Analyze Zeek network logs to flag SMB admin share use, DCE/RPC service creation, NTLM spray patterns and Kerberos anomalies, enabling security teams to hunt lateral movement and stage-aware internal transfers.

Detects and prevents injection attacks targeting serverless functions by combining static analysis, event mapping, runtime behavior monitoring, and IAM auditing so SOCs can spot poisoned triggers, malicious layers, and privilege escalations across Lambda, Azure, and GCP environments.

Automates GDPR DSAR workflows including intake, identity verification, PII discovery via regex/NER, data mapping, templated Article 15 responses, deadline tracking, batch processing, and audit logging for compliant subject access handling.

Automates the end-to-end Privacy Impact Assessment workflow, linking data inventories, flow mapping, and risk scoring to GDPR Article 35, CCPA/CPRA, and NIST/ICO guidance so teams can assess new systems and data processing programs faster.

A diagnostic skill designed to stress-test product direction and core assumptions *before* developing detailed specifications or committing to implementation. It helps users validate the fundamental 'why' by conducting structured analyses across market fit, user journey mapping, competitive advantage, and feature prioritization using frameworks like YC principles and ICE scoring. Ideal for early-stage product discovery and strategic planning.

Assesses AI/ML systems for prompt injection, jailbreak, model inversion, data poisoning, and agent tool abuse using MITRE ATLAS mapping, signature detection, and scoring metrics before deployment.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Provides direct REST API access to UniProt, the premier resource for protein sequence and functional information. This skill enables users to search proteins by name, gene, or accession number, retrieve sequences in FASTA format, perform cross-database ID mapping (e.g., Ensembl, RefSeq), and analyze functional annotations (GO terms) for building comprehensive bioinformatics pipelines.

This skill acts as a Cognitive Psychologist, diagnosing a target audience's precise stage on the awareness ladder (from unaware to most aware). It applies psychological frameworks (like ELM) to calibrate the optimal messaging, language register, and persuasion strategy. Use it when you need to tailor marketing content, sales pitches, or educational materials based on the audience's current knowledge and readiness to buy, ensuring the message resonates and minimizes resistance.