Skill UI

Offensive security skill for hunting insecure deserialization flaws in Java, PHP, Python, .NET and Ruby. Covers ysoserial gadget chains, PHP object injection, pickle payloads, ViewState and JNDI/Log4Shell, with strict authorization gates.

Guides authorized security testers through hunting Local File Inclusion, Remote File Inclusion, and Path Traversal vulnerabilities, including blind confirmation, PHP filter-chain RCE, log poisoning, wrappers, and safe OOB validation.

This skill helps developers create custom external web service APIs for Moodle LMS. It covers following Moodle's API framework and coding standards, enabling integration with external applications, mobile backends, and course management systems using PHP.

Comprehensive guidelines for writing idiomatic and efficient PHP code. Covers modern best practices including type safety, error handling, OOP patterns, and array operations to improve code quality and maintainability.

Generates production-grade Selenium WebDriver automation scripts and tests in Java, Python, JavaScript, C#, Ruby, or PHP. Supports local execution and TestMu AI cloud with 3000+ browser/OS combinations for robust cross-browser validation and CI/CD integration.

This workflow covers the complete WordPress development lifecycle including theme creation, plugin development, and WooCommerce integration. It also addresses performance optimization and security hardening. Additionally, it incorporates WordPress 7.0 features such as Real-Time Collaboration, AI Connectors, and PHP-only blocks to enhance modern development practices.

This workflow covers the complete process of developing custom WordPress plugins, including architecture, hooks, admin interfaces, and REST API integration. It incorporates security best practices and leverages WordPress 7.0 features like Real-Time Collaboration, AI Connectors, and PHP-only blocks. Suitable for extending functionality and integrating third-party services.

This skill analyzes raw WordPress Site Health reports (text, screenshots, or debug info). It converts diagnostic data into a prioritized, risk-tiered fix plan, identifying critical issues and recommended improvements. It provides exact, safe commands (WP-CLI/PHP snippets) necessary to address the site and strictly enforces safety protocols like backups, lint checks, and dry-runs.