Skill UI

Automates the creation of Ansible playbooks in advanced DevOps workflows by triggering whenever users mention the generator and offering best-practice guidance, production-ready code, and validation for IaC, Kubernetes, Terraform, and CI/CD stacks.

A comprehensive guide for solo founders and indie hackers to launch profitable micro-SaaS products quickly. Covers the entire lifecycle: idea validation frameworks, building a Minimum Viable Product (MVP) using modern solo-founder stacks, implementing effective pricing psychology, and executing high-impact launch playbooks. Ship a real business in weeks, not months.

Guides founders on AI positioning, ICP definition, messaging architecture, and quarterly PMF validation so they can translate technical capabilities into the business outcomes buyer-facing teams care about.

This skill guides the execution of structured purple team exercises, simulating real-world adversary techniques (Red Team) and validating the effectiveness of existing detection rules and controls (Blue Team). It is essential for Security Operations Center (SOC) teams to identify critical detection gaps, optimize analyst response playbooks, and enhance the overall security posture against specific threat actors mapped to MITRE ATT&CK techniques.

This skill simulates security incidents using discussion-based tabletop exercises for Security Operations Center (SOC) teams. It is designed to test incident response procedures, evaluate cross-functional communication workflows (e.g., Legal, PR, Executive), and assess decision-making capabilities under pressure, all without touching production environments. Ideal for compliance validation, playbook refinement, and comprehensive team training.

Validate business ideas with Sahil Lavingia’s Minimalist Entrepreneur playbook by selling a manual version, defining precise users, testing processes without code, and gauging if customers will pay before building.

A comprehensive playbook for security testing APIs relying on JWT, bearer tokens, or API keys. It covers token validation weaknesses (e.g., 'alg:none', RS256 confusion), claim misuse, header spoofing, rate limit bypass, and mass assignment vulnerabilities. Ideal for penetration testers assessing authentication boundaries.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

A comprehensive, expert playbook for challenging insecure file upload mechanisms. It provides advanced attack vectors covering validation bypass (magic bytes, extension), storage path abuse (traversal, overwrite), and exploitation of post-upload processing chains (XXE, RCE, CMDi). Essential for deep security auditing of file-handling workflows.