Skill UI

This tool systematically tests API endpoints for mass assignment (over-posting) vulnerabilities. It simulates an attacker injecting undocumented or privileged fields (such as 'role' or 'balance') into standard API requests. By analyzing the server's response, it determines if the API binds all client-supplied parameters to the data model without proper filtering, which could allow unauthorized privilege escalation or data modification. This is critical for achieving OWASP API Top 10 compliance.

CCPM orchestrates software delivery from PRD through epics and GitHub issues into parallel agent execution, covering planning, decomposition, syncing, workstart, and status checks with mandated script-based reporting.

Auto-generate professional GEO service proposals from audit data, translating findings into business risks, tiered recommendations, pricing, timeline, and PDF-ready documentation for prospect follow-up.

This guide details implementing an IEC 62443 compliant conduit architecture for secure remote access into Operational Technology (OT) environments. It mandates the use of jump servers, MFA gateways, session recording, and approval workflows within a DMZ to strictly control vendor and engineer access, eliminating direct VPN connections to critical ICS assets.

This tool provides a structured methodology for assessing the security posture of SCADA Human-Machine Interface (HMI) systems. It evaluates potential vulnerabilities in web-based HMIs, thin-client configurations, authentication mechanisms, and communication pathways between HMIs and PLCs, ensuring compliance alignment with rigorous standards like IEC 62443 and NIST SP 800-82.

This tool audits the token consumption across all components (agents, skills, rules, MCP servers) within a Claude Code session. It analyzes token overhead, identifies bloat (e.g., overly long descriptions, redundant components), and generates a detailed context budget report. Use it to maintain optimal context window usage, improve performance, and prevent context saturation.

Hono is a minimal and ultrafast web framework built entirely on Web Standards (Request/Response/fetch). It allows developers to build high-performance APIs and full-stack applications that run seamlessly across multiple environments, including Cloudflare Workers, Deno, Bun, and Node.js. It is ideal for edge deployment, Backend for Frontend (BFF) layers, and type-safe backend services.

This guide details how to build an MCP app, which is an MCP server enhanced to serve interactive UI resources. It allows developers to render complex widgets—such as forms, pickers, dashboards, and confirmation dialogs—directly inline within a chat conversation. Learn about the architecture, host specifics, and when to use a widget versus standard text output.

The Stock Analyzer Skill provides comprehensive technical analysis for stocks and ETFs. It utilizes industry-standard indicators like RSI, MACD, and Bollinger Bands to generate actionable trading signals. Users can perform advanced technical comparisons, monitor portfolio strength, and identify chart patterns through natural language queries, eliminating the need for manual indicator calculation.

This skill systematically audits a given project by analyzing its historical memory, rollout summaries, and local skill definitions. It identifies repeated complex workflows, recurring operational patterns, or areas where existing skills are stale. The audit process guides the user to recommend the highest-value skills to either add (if a new pattern emerges) or update (if current skills are outdated or incomplete), ensuring the AI agent operates with the most accurate and context-specific knowledge base for optimal project execution.

This expert reviews and rectifies complex Swift Concurrency issues, such as actor isolation violations, Sendable safety breaches, and data races. It applies modern patterns (like `@MainActor` and `actor` usage) to ensure code adheres to Swift 6.2+ standards while minimizing behavior changes. Use it when debugging concurrency warnings or migrating legacy codebases.

A comprehensive tool for generating publication-quality figures essential for Machine Learning and AI academic papers. It supports two distinct workflows: generating complex system architecture and workflow diagrams using AI (Gemini), and creating precise, data-driven visualizations (line charts, heatmaps, etc.) using standard libraries like matplotlib and seaborn. Use it when preparing any figure for a conference submission.