Skill UI

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Auto-activating skill provides guidance for HTTP method helper tasks, covering REST, GraphQL, OpenAPI, authentication, and API design patterns while producing production-ready code and validations.

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

An expert specialist for rigorous visual validation, focusing on UI testing, design system compliance, and WCAG accessibility verification. This skill systematically analyzes visual evidence for cross-platform consistency, pixel-perfect accuracy, and adherence to modern design standards, utilizing principles from visual regression testing and comprehensive QA methodologies.

A structured methodology for de-risking product ideas and validating market opportunities. This framework guides teams through defining measurable outcomes, building Opportunity Solution Trees (OST), mapping critical assumptions (Desirability, Viability, Feasibility), and planning rigorous experiments (prototyping, interviews, usability tests) before committing to full development resources. Ideal for discovery sprints and pre-build validation.

This guide details the exploitation of the critical Zerologon vulnerability (CVE-2020-1472) in Active Directory Domain Controllers. It demonstrates the methodology for resetting the DC machine account password to empty, achieving full domain compromise. Subsequent steps include dumping domain credentials using DCSync. Essential for authorized red-teaming and security validation.

This skill guides the deployment and implementation of Breach and Attack Simulation (BAS) platforms. It provides a continuous, automated method to validate security control effectiveness against real-world attacker techniques mapped to the MITRE ATT&CK framework. Use this when moving beyond traditional point-in-time penetration testing to establish continuous control validation and automated adversary emulation across the entire IT environment.

This skill guides users through performing comprehensive threat modeling using the OWASP Threat Dragon tool. It covers creating Data Flow Diagrams (DFD), identifying vulnerabilities using established methodologies like STRIDE and LINDDUN, defining mitigations, and generating formal PDF reports. Ideal for secure design reviews, architecture validation, and achieving GRC compliance.

This skill executes an end-to-end workflow combining research refinement and experiment planning. It transforms vague research directions into a focused final proposal and detailed experiment roadmap. It chains research-refine and experiment-plan to generate method theses, review histories, and validation plans. Ideal for academic research where both methodology and experimental validation are needed simultaneously.

This skill orchestrates deep critical reviews of research work using external AI models like Codex, Gemini, or Claude. It gathers project context, identifies logical gaps, and provides adversarial feedback on methodologies and results. Suitable for academic papers, experimental validation, and refining research ideas through multi-round reasoning.

This skill provides a comprehensive guide and methodology for identifying and exploiting Cross-Origin Resource Sharing (CORS) misconfigurations in web applications. It covers testing origin validation bypasses, analyzing preflight requests, and simulating data exfiltration during authorized penetration tests, crucial for assessing API security.

Defines a systematic, multi-phase research methodology that prioritizes broad exploration, targeted deep dives, and validation before initiating any content generation, ensuring reliable, multi-angle web intelligence.