Skill UI

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

A comprehensive guide detailing attack methodologies for Z-Wave smart home networks. Techniques covered include sniffing during inclusion (S0/S2), exploiting key derivation flaws, performing replay attacks on unauthenticated nodes, and crucial hub compromise (pivoting) to gain full control over the entire mesh network. Essential reading for IoT penetration testing.

This expert playbook provides comprehensive techniques for exploiting Server-Side Template Injection (SSTI). It covers polyglot detection probes, engine fingerprinting (Jinja2, Twig, FreeMarker, etc.), sandbox escape mechanisms (MRO chains), and advanced bypass techniques. Essential reading for security researchers and penetration testers assessing application vulnerabilities.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

An expert system for refining and enhancing existing marketing and conversion copy. This skill goes beyond simple proofreading, employing a systematic, multi-pass framework (including Clarity, Voice, Benefit, Proof, and Specificity) to ensure the copy is highly persuasive, crystal clear, and perfectly aligned with the brand voice. Ideal for reviewing drafts before publication.

This skill transforms a course syllabus (PDF, DOCX, etc.) into a highly curated, supplementary academic reading list. It parses topics and learning outcomes, calibrates content difficulty based on the target audience (undergraduate, graduate, etc.), and searches academic databases (Consensus) for recent, peer-reviewed papers. The output is a professional .docx file containing summaries, links, and advanced discussion questions, making it invaluable for educators and students needing structured, up-to-date course resources.

This tool accesses a persistent FTS5 knowledge base containing previously indexed project documentation, local content, and session memory. Instead of feeding entire raw sources into the conversation context, it allows users to perform targeted, efficient searches using specific queries and source scoping. This is ideal for quickly retrieving technical details, project specifications, or historical context without lengthy re-reading.

This skill acts as a literature-research assistant, orchestrating a Python CLI to interface with APIs like Semantic Scholar and arXiv. It enables users to search for academic papers by topic, retrieve detailed metadata, perform impact analysis using citation tracking, download PDFs, and extract text content. It streamlines the entire academic research workflow from initial discovery to deep reading.

This skill facilitates structured, bidirectional reading and knowledge synthesis for academic texts, theories, and articles. It forces users to first capture the source material's original intent, before critically mapping its relationships, conflicts, and absorptions against the CrossFrame framework. It ensures structured output with clear source boundaries, making it ideal for deep learning and scholarly work.

This skill provides explicit, pedagogical instruction on complex CrossFrame concepts. It is designed to move beyond simple definitions by structuring the output into plain language explanations, conceptual mapping, common misreading boundaries, real-world signals, and practical exercises. It is ideal for users who need deep, structured, and comprehensive understanding of complex theoretical frameworks.

A comprehensive guide to writing idiomatic and efficient Elixir code. Covers advanced topics like Pattern Matching, the Pipe Operator, OTP process management, robust error handling using tagged tuples, and efficient collection usage (Streams and comprehensions). Essential reading for intermediate to advanced Elixir developers aiming for production-grade stability.