Skill UI

This comprehensive guide details advanced techniques for detecting and exploiting NoSQL injection vulnerabilities across various databases like MongoDB and CouchDB. It covers critical attack vectors, including authentication bypass using operators ($ne, $gt), blind data extraction via $regex, and executing arbitrary server-side JavaScript through the $where clause. Essential reading for penetration testers and security researchers assessing NoSQL backends.

This comprehensive guide details the professional process of detecting and exploiting SQL injection vulnerabilities using the powerful sqlmap tool. It covers the entire workflow, from initial vulnerability identification and basic scanning to database enumeration, data dumping, advanced exploitation (like file reading and OS command execution), and WAF bypass techniques, ensuring thorough penetration testing reporting.

This skill detects advanced lateral movement techniques used by attackers after initial compromise, mapping them to MITRE ATT&CK TA0008. It correlates multiple data sources, including Windows event logs (4624, 4769), Sysmon telemetry, network flow data, and endpoint logs, to identify suspicious activities like Pass-the-Hash, PsExec, WMI exploitation, RDP pivoting, and SMB spreading.

Provides CLI-driven access control for a Discord channel by reading/writing the shared JSON state. Use it to approve pairings, edit allowlists, set DM/group policies, and keep the channel server informed without touching Discord directly.

This comprehensive guide covers idiomatic C# and modern .NET best practices for building robust, high-performance, and maintainable applications. Topics include immutability, dependency injection, explicit coding, proper async/await usage, the Options pattern, and the Result pattern. Essential reading for developers designing services with ASP.NET Core.

A comprehensive skill for generating non-generic, professional frontend interfaces, perfect for landing pages, portfolios, and product redesigns. This agent enforces a strict design methodology: reading the user's brief (audience, vibe, constraints) first, configuring global design dials (variance, motion, density), and recommending real, industry-standard design systems (like Material or Fluent UI) to ensure the output is always polished and contextually appropriate.

Provides comprehensive guidelines on using Go's `context.Context` for managing request lifecycles. Learn how to correctly propagate cancellation signals, enforce deadlines, handle timeouts, and safely pass request-scoped values across API boundaries (HTTP handlers, services, databases). Essential reading for writing resilient and robust concurrent Go applications.

Provides Gmail access through the gws Gmail CLI, letting you manage messages, drafts, labels, threads, and watches while helper commands handle sending, triage, replying, forwarding, reading, and streaming new mail.

CLI skill that replies to Gmail messages given a message ID, automatically sets threading headers, quotes the original, and supports attachments, HTML bodies, drafts, and dry runs for efficient follow-up.

Reply to every recipient in a Gmail thread from the CLI with gws gmail +reply-all, handling threading automatically while allowing HTML bodies, attachments, drafts, and recipient adjustments such as adds, CC/BCC, or removals.

This skill provides comprehensive operations for Feishu Base (Multi-Dimensional Table), serving as a powerful internal database management system. It supports all CRUD operations, including creating and updating tables, managing fields (including formulas and lookups), writing and reading records, setting up complex views, building dashboards, and automating workflows. Use this skill when dealing with multi-dimensional tables, Bitable links, or the Base environment.

This skill provides comprehensive functionality for reading, creating, editing, and downloading content from Lark Feishu Docs (Docx/Wiki). Whether accessing via URL or token, it supports structured content manipulation using both XML and Markdown formats (v2 API). Use it for fetching document details, updating specific blocks, and managing embedded media and resources like whiteboards and images. Note that it requires prerequisite knowledge for advanced operations.