Skill UI

This skill autonomously improves generated academic papers by simulating a multi-round review, fixing, and recompilation cycle. It is designed to enhance writing quality, fix theoretical inconsistencies, and improve presentation structure after the initial drafting phase. It operates in rounds (default 2 rounds) using external LLM review and can optionally accept a style reference paper to guide structural fixes.

This skill fetches the latest, live documentation and code examples for specific libraries and frameworks (e.g., Next.js, React, Prisma). Instead of relying on static or outdated training data, it utilizes the Context7 MCP to provide accurate, up-to-date answers for setup questions, API references, and code generation based on current best practices.

A comprehensive guide for discovering and exploiting broken link hijacking vulnerabilities. This skill focuses on identifying references to expired domains, decommissioned cloud resources (like S3 buckets), and dead external services. It covers advanced techniques such as subdomain takeover, supply chain security assessment, and resource claiming for authorized penetration testing.

This comprehensive guide details the methodology for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities. It teaches users how to systematically test broken access control in modern web applications and APIs. By manipulating predictable object identifiers (such as user IDs, order numbers, or document slugs), testers can validate if object-level authorization is properly enforced, preventing unauthorized horizontal or vertical data access.

This skill provides a comprehensive guide for identifying and exploiting insecure local data storage vulnerabilities in Android and iOS applications. It covers analyzing plaintext credentials, unencrypted SQLite databases, insecure SharedPreferences, and improper keychain/keystore usage. Essential for performing robust mobile penetration testing focused on OWASP M9.

This tool implements network segmentation based on the Purdue Enterprise Reference Architecture (PERA). It helps secure Industrial Control Systems (ICS) by mapping assets and data flows to specific Purdue levels (0-5), defining necessary firewall rules, and establishing DMZs. It ensures strict traffic control between IT and OT domains, adhering to standards like IEC 62443 and facilitating secure network retrofitting.

This tool automates the entire process of compiling a LaTeX source file into a submission-ready PDF. It handles multi-pass compilation, diagnoses common LaTeX errors (e.g., missing packages, undefined references, bibtex syntax errors), and iteratively attempts fixes to ensure the final document is accurate and adheres to specified page limits.

This skill generates a structured, section-by-section outline for academic papers. By synthesizing diverse inputs—including research narratives, auto-review conclusions, and experiment results—it guides researchers in structuring their findings into a cohesive draft plan. It also supports optional style references to align the outline's section structure with specific target venues or published works.

Automatically generates structured academic papers in LaTeX format. By integrating a detailed paper plan, the research narrative, and generated figures, this tool structures the content section by section. It supports major conference and journal templates (e.g., ICLR, NeurIPS, IEEE), manages complex citation fetching via DBLP/CrossRef, and allows structural guidance using reference papers. Ideal for drafting the complete manuscript.

This skill automates the end-to-end academic paper writing process. It transforms raw narrative reports, research ideas, or existing plans into polished, submission-ready LaTeX source and PDF. The comprehensive pipeline includes planning, figure generation, structured writing, compilation, and an advanced improvement loop, allowing users to achieve publication-quality results. Users can optionally guide the structural style using a reference paper.

A comprehensive framework for testing REST and GraphQL APIs against Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR). This tool simulates an attacker's behavior by systematically intercepting and modifying object identifiers (IDs, UUIDs, slugs) within API calls. It helps identify critical authorization flaws, ensuring that an authenticated user cannot access or modify resources belonging to other tenants or users, adhering to OWASP API Security Top 10.

A comprehensive methodology for penetration testing web applications to identify broken access control vulnerabilities. This guide covers systematic testing for Role-Based Access Control (RBAC), privilege escalation, insecure direct object references (IDOR), and API authorization flaws in multi-tenant environments. It outlines the use of tools like Burp Suite and ffuf to map endpoints and simulate various user roles.