Skill UI

This skill provides a structured workflow for developing and modifying content management systems (CMS), applicable to platforms like WordPress, Shopify, and Drupal. It covers crucial architectural seams, including theme and template design, plugin/module development, content modeling, media asset pipelines, and static export processes, ensuring changes maintain structural integrity.

Automates end-to-end provisioning for freshly plugged M5Stack or ESP32 boards: detect the device, flash UIFlow 2.0 firmware, and install a MicroPython app bundle. Useful for first-time setup, reflashing, app refresh, and smoke testing.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

A comprehensive server providing research-grade access to arXiv. Users can search papers by topic, author, or date, download full texts, and analyze the scientific landscape by traversing citation graphs. It also supports local semantic search over downloaded documents and enables monitoring for new papers with real-time alerts. Ideal for academic research and literature review.

This router guides the testing of systemic flaws in business processes and state machines. It is essential when vulnerabilities stem from workflow abuse, race conditions, pricing flaws, or multi-step state attacks, rather than simple input sanitation issues. Use it to test complex business flows like payments, inventory management, and approval sequences.

This toolset provides a comprehensive development workflow for iterating on MicroPython applications (such as Claude Buddy, Hello, and Snake) on the Cardputer-Adv device. It allows developers to add new apps, push single updated .py files without full re-flashing, monitor device serial logs, or execute one-shot REPL commands directly from the host machine. Essential for rapid prototyping and debugging embedded systems.

This comprehensive playbook provides expert techniques for classical cipher identification and breaking. It covers fundamental methods like frequency analysis, Kasiski examination, and Index of Coincidence (IC), enabling the decryption of monoalphabetic, polyalphabetic, and transposition ciphers (Vigenere, Caesar, Playfair, etc.). It also guides the decoding of various formats (Base64, Hex, Morse).

This comprehensive guide serves as a co-marketing strategist for SaaS companies. It helps users identify ideal commercial partners by analyzing audience overlap, market gaps, and complementary value propositions. The skill provides structured frameworks for planning joint campaigns, covering content co-authoring, joint webinars, product integrations, and cross-promotions.

This expert playbook provides comprehensive techniques for testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications. It covers identifying state-changing endpoints, bypassing anti-CSRF tokens (including missing validation and predictable tokens), and exploiting modern weaknesses like SameSite=Lax via GET methods or misconfigured JSON APIs. Essential reading for security professionals and penetration testers.

A systematic auditor designed to evaluate the resilience and quality of complex AI workflows. It scans across five critical dimensions—Prompt Quality, Context Efficiency, Tool Health, Architecture Fitness, and Safety—providing a scored report and prioritized, actionable remediation steps. Use this tool to find hidden flaws and ensure robustness before deploying any AI agent or system.

A comprehensive playbook detailing advanced techniques for exploiting glibc heap vulnerabilities using ptmalloc2. Covers various memory corruption primitives, including Use-After-Free, double free, and overflows. Provides version-specific guidance on bypassing modern protections like safe-linking (glibc >= 2.32) and RCE methods for post-2.34 environments.