Skill UI

This skill performs a rigorous, 5-dimension expert critique on any digital artifact, such as landing pages, presentations, or prototypes. It systematically evaluates five critical areas—Philosophy, Visual Hierarchy, Detail Execution, Functionality, and Innovation—scoring each 0-10. The output is a comprehensive, evidence-backed HTML report providing actionable insights, a radar chart, and prioritized lists (Keep/Fix/Quick-wins) to guide systemic design improvements.

This skill generates a sophisticated, single-screen consumer dashboard mimicking a high-end lifestyle publication's dating column. It moves beyond simple swiping mechanics to visualize complex social metrics, mutual matches, and connectivity trends using editorial typography and restrained design. Ideal for concepts requiring data-driven storytelling about personal or community relationships.

Automates the end-to-end software release workflow for a GitHub repository. This skill handles Semantic Versioning (SemVer) version bumping, analyzes code changes by generating sophisticated diffs, and automatically creates a formatted changelog and release pull request. It relies exclusively on the GitHub CLI (gh) and Git for robust version control and deployment.

Generates a sophisticated, long-form poster mimicking an editorial essay from a Sunday magazine or newsprint. This layout is highly type-driven, featuring oversized serif headlines, datelines, numbered content sections, and annotated pull-quotes. Use it when your brief requires a professional, journalistic, or manifesto-style aesthetic.

This skill generates a single, full-bleed, looping motion composition using only inline CSS animations. It functions as a high-fidelity poster frame, specifically designed to be captured by keyframe exporters (like HyperFrames or Lottie) to create animated hero videos, title cards, or video posters for marketing campaigns. Ideal for briefs requiring sophisticated 'motion design' or 'animated hero' assets.

HyperFrames is a comprehensive framework that treats HTML as the source of truth for video production. It allows users to create complex video compositions, including animated title cards, dynamic captions synced to audio, advanced text-to-speech narratives, and sophisticated audio-reactive visuals (like beat synchronization). The tool manages the entire video workflow, from composition authoring and timing to scene transitions (crossfades, wipes) and final rendering.

This skill fetches and compares live pricing for various Azure services, such as Virtual Machines, Storage, and SQL Databases. It utilizes the Azure Retail Prices API to allow users to check costs in specific geographic regions or compare the same service across multiple regions, helping them find the most cost-effective deployment option.

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A comprehensive playbook covering advanced cryptographic hash attack techniques. Learn how to exploit inherent weaknesses such as length extension attacks (MD5, SHA-256), generating identical-prefix or chosen-prefix collisions, and analyzing side-channel timing leaks. Essential for CTF challenges and authorized penetration testing scenarios.

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

An expert playbook detailing advanced attacks against JWT and OAuth 2.0 tokens. Covers cryptographic weaknesses like alg:none, key confusion (RS256 to HS256), and header injection (kid, jku). It also addresses critical OAuth flow abuses, such as missing state parameters, account takeover, and token leakage, essential for robust application security testing.