Skill UI

This guide details advanced techniques for bypassing Web Application Firewalls (WAFs). It covers methods such as payload obfuscation, advanced URL encoding, HTTP method manipulation (PUT, PATCH, etc.), parameter pollution, and utilizing specialized tools like SQLMap tamper scripts to smuggle exploit payloads (e.g., SQLi, XSS) past perimeter security controls. Essential for penetration testing and red team engagements.

A comprehensive guide for performing systematic security assessments on web applications. Following the OWASP Web Security Testing Guide (WSTG), this process identifies critical vulnerabilities such as broken authentication, authorization flaws (IDOR), SQL injection, and Cross-Site Scripting (XSS). The workflow covers reconnaissance, mapping, and advanced testing techniques using tools like Burp Suite and sqlmap, ensuring deep coverage beyond automated scanner capabilities. Ideal for pre-production security validation and compliance audits.

Nikto is a powerful, open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests over 7,000 potentially dangerous files and checks for critical issues like XSS, SQL injection, outdated versions, and misconfigurations across modern web applications. Ideal for security audit, penetration testing, and validating web server security controls.

polars-bio accelerates genomic interval math and bioinformatics I/O by combining Polars, Arrow, and DataFusion to handle BED/VCF/BAM/GFF/FASTA streams, SQL queries, and cloud storage with overlap, coverage, and nearest APIs plus streaming fallbacks.

Comprehensive Snowflake development assistant covering SQL best practices, dynamic tables, streams, tasks, Snowpipe, Cortex AI functions/agents, Snowpark Python, dbt integration, performance tuning, and security hardening for production data platforms.

A comprehensive guide to advanced development practices on the Snowflake platform. Covers best practices for SQL (MERGE, semi-structured data, colon prefix rule), modern data pipeline construction (Dynamic Tables, Streams/Tasks, Snowpipe), and deep integration with Cortex AI functions and Snowpark Python. Essential knowledge for data engineers building robust, scalable, and intelligent data applications.

A powerful operational companion for database developers. This skill assists with the daily lifecycle of database interactions, including translating natural language requirements into optimized SQL queries, generating database migrations, performing comprehensive schema introspection across multiple dialects (PostgreSQL, MySQL, SQLite, SQL Server), and identifying performance bottlenecks through detailed query optimization and index recommendations. It also supports ORM patterns like Prisma and SQLAlchemy.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

This skill provides a comprehensive guide and structured SQL templates for performing deep forensic investigations on AWS cloud logs. It utilizes AWS Athena to query massive datasets from CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs. Ideal for detecting unauthorized access, data exfiltration, and privilege escalation during security incident response.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This skill enables users to analyze uploaded Excel and CSV files using DuckDB. It supports schema inspection, SQL querying, statistical summaries, and exporting results to various formats. Ideal for data exploration, aggregation, and structured data processing tasks.

A comprehensive guide for writing safe, explicit, and observable database code in Go. It covers best practices for using standard libraries like `database/sql`, `sqlx`, and `pgx`. Key topics include parameterized queries, context propagation, transaction management, connection pooling, and ensuring data integrity while avoiding common pitfalls like ORMs and SQL injection.