Skill UI

Guide on automating Espocrm tasks through Composio's toolkit via Rube MCP, outlining how to configure MCP, discover tools, validate active connections, and execute schema-compliant workflows with the required search and memory calls.

Guides sales engineers through RFP/RFI analysis, competitive feature matrices, POC planning, demo prep, and proposal delivery using Python tooling and checkpoints to ensure coverage, differentiators, and win/loss insights.

This router acts as an index and dispatcher for four specialized business and growth skills. It routes requests across the entire B2B lifecycle, covering customer success management (churn risk, expansion), sales engineering (RFP analysis, PoC planning), revenue operations (pipeline forecasting, GTM efficiency), and contract writing. Use this when a growth or revenue request requires determining the correct specialized skill module.

This skill guides authorized security professionals through testing web applications for clickjacking vulnerabilities. It involves checking frame embedding controls (like X-Frame-Options and CSP) and crafting complex proof-of-concept overlays to see if users can be tricked into performing unintended sensitive actions, such as deleting accounts or transferring funds.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

This tool verifies the integrity of the witness chain for Cognitum Seed IoT devices. It systematically checks for epoch gaps and hash chain breaks, calculating a precise integrity score (0.0–1.0). This is essential for maintaining a secure and auditable provenance trail in industrial or critical IoT deployments.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This comprehensive guide helps researchers determine the fit and required standards for submitting manuscripts concerning Earth-system futures, the Anthropocene, and complex human-Earth interactions. It covers journal positioning, scope, methodology rigor, data handling (FAIR principles), and structural requirements (e.g., Plain Language Summary), ensuring submissions are suitable for interdisciplinary, high-impact publishing.

A deep-dive methodology for authorized penetration testing targeting dependency confusion and namespace resolution vulnerabilities across major package ecosystems (npm, PyPI, NuGet, Maven, etc.). This skill details advanced reconnaissance techniques, from analyzing lock files and source maps to exploiting error messages, alongside safe Proof-of-Concept (PoC) creation using DNS canaries for discovery during penetration engagements.

A comprehensive methodology covering advanced offensive techniques targeting the software supply chain. This includes exploiting dependency confusion across npm, PyPI, and NuGet, executing build system hooks, tampering with CI/CD pipelines, and compromising container images. It provides detailed PoC patterns and detection guidance for red team operations.