Skill UI

This skill enables comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws and validate input sanitization. It supports detection of in-band, blind, and out-of-band attack vectors. Users can demonstrate exploitation techniques and extract data for authorized security testing purposes only. Requires explicit written permission before execution.

Diagnose slow SQL queries using execution plans, preserve results, and validate indexing or query modifications against representative data. This skill helps debug performance issues, design efficient schemas, reduce database load, and improve application scalability for growing datasets.

A static analysis tool that audits SQL code for common cost and performance anti-patterns (e.g., full-table scans, Cartesian joins). It calculates a query health score (0-100) for data warehouses like BigQuery, Snowflake, and Redshift, providing a prioritized, actionable plan with concrete fixes and estimated cost savings. Essential for FinOps and data quality assurance.

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. Covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for various DBMS.

This skill provides a structured five-phase workflow for bug bounty and SRC vulnerability hunting. It guides users through intake, reconnaissance, enumeration, active hunting, and reporting. Includes attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, CSRF, and file upload vulnerabilities. Features WAF bypass techniques, industry-specific guides, and evidence discipline for compliance.

This skill provides comprehensive guidelines for optimizing Postgres database performance and security. It covers query optimization, schema design, connection management, Row-Level Security, and concurrency handling. Use it when writing SQL, reviewing database configurations, or implementing indexes. Based on Supabase best practices to ensure efficient and secure database operations for production environments.

Provision and manage Google Cloud Platform infrastructure using Terraform with the hashicorp/google provider. Define repeatable, auditable IaC for VPC, GKE, Cloud SQL, IAM, and multi-environment CI/CD deployments.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

A specialized tool for auditing WordPress plugins, themes, and blocks before deployment. It checks for security vulnerabilities like SQL injection, XSS, and improper escaping, ensures API correctness, and enforces internationalization standards. Use it to review generated code or perform security assessments on WordPress environments.