Skill UI

A comprehensive guide detailing how to detect and exploit second-order SQL injection vulnerabilities. This technique targets scenarios where malicious input is stored in a database (e.g., user profiles, comments) and subsequently executed in an unsafe SQL query during a completely different application operation, bypassing initial sanitation checks.

GoldRush API by Covalent lets agents query wallet balances, token prices, transaction history, DEX pairs, and live OHLCV across 100+ chains via REST, CLI, SDK, or WebSocket, avoiding chain-specific plumbing.

bdistill transforms AI interactions into a structured, queryable knowledge base. It extracts, structures, and quality-scores domain knowledge from both closed-source AI models (in-session) and local open-source models (via Ollama). Users can build comprehensive reference datasets, Q&A pairs, or generate structured training data for traditional machine learning, ensuring validated and exportable domain expertise.

A powerful operational companion for database developers. This skill assists with the daily lifecycle of database interactions, including translating natural language requirements into optimized SQL queries, generating database migrations, performing comprehensive schema introspection across multiple dialects (PostgreSQL, MySQL, SQLite, SQL Server), and identifying performance bottlenecks through detailed query optimization and index recommendations. It also supports ORM patterns like Prisma and SQLAlchemy.

This tool monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance for owned domains, discover hidden subdomains, and track suspicious certificate activity. By querying public CT logs and APIs (like crt.sh), it helps build continuous security pipelines, identify potential phishing infrastructure, and map the external attack surface for comprehensive threat intelligence.

`jq` is the standard and powerful CLI tool for querying, filtering, and reshaping JSON data. This skill provides expert-level practical patterns for working with deeply nested structures, handling complex transformations (like flattening, renaming, and grouping), and integrating JSON logic into shell pipelines. Essential for parsing API outputs (AWS, GitHub), log files, and building robust Bash scripts.

This skill provides a comprehensive guide and structured SQL templates for performing deep forensic investigations on AWS cloud logs. It utilizes AWS Athena to query massive datasets from CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs. Ideal for detecting unauthorized access, data exfiltration, and privilege escalation during security incident response.

This skill detects malicious Command and Control (C2) communications tunneled through the DNS protocol. It analyzes DNS query logs for indicators such as DNS tunneling tools (Iodine, dnscat2), Domain Generation Algorithms (DGA), and encoded payloads within TXT/CNAME records. Techniques include Shannon entropy analysis of subdomains, statistical anomaly detection, and machine learning classification. Ideal for network security analysts conducting deep threat hunting and forensic investigations.

Automates creation, querying, editing, and bulk operations for Feishu Bitable apps, including field, view, and record management with guidance on required formats, batch limits, and concurrency controls.

Handles Feishu calendar operations like creating and updating events, inviting attendees, querying availability, and managing repeat instances with timezone-aware ISO 8601 inputs, ensuring hosts stay in sync with RSVPs.

Manage Feishu tasks and tasklists through intent-based actions: create, query, update, complete, reopen, and organize assignments with role-aware members and ISO 8601 deadlines.

This utility ensures the prevention of silent floating-point mismatch bugs across all EVM chains. It covers runtime querying of decimals, chain-aware caching, handling precision drift in bridged tokens, and safe normalization for bots, dashboards, and DeFi tools. It is crucial for accurate cross-chain balance comparison.