Skill UI

Automates Google Classroom workflows by creating a new course, inviting students, and listing enrollments via gws commands; ideal for admins or teachers scripting fast class rollouts.

Provides step-by-step techniques for assessing AWS security, covering IAM enumeration, privilege escalation, SSRF metadata attacks, S3/Lambda exploitation, and red-team persistence workflows with recommended tools and commands.

A comprehensive guide to optimizing website content for modern AI search systems, including ChatGPT, Perplexity, and Google AI Overviews. It covers structural improvements, maximizing citability scores, incorporating multi-modal elements, building brand authority, and implementing technical standards like llms.txt and proper server-side rendering (SSR). Essential for maximizing organic reach in the LLM era.

This guide details strategies for finding the full legal birth names of European actors, particularly those from French and Eastern European backgrounds. When English sources or IMDb only list stage names, this technique emphasizes using regional resources like French Wikipedia and specific cultural identifiers (e.g., "People's Artist" USSR) to perform deep, targeted searches, ensuring the retrieval of accurate birth details.

A senior-level tool for performing deep-dive technical SEO audits and site architecture mapping. It analyzes crawl health, indexing blocks, sitemap integrity, and structural issues (like canonicalization, link flow, and crawl budget waste). Use this to diagnose complex Google Search Console errors and propose a full, engineered roadmap for website stabilization and optimization.

This comprehensive checklist guides users through identifying and exploiting open redirect vulnerabilities in web applications. It covers parameter identification, advanced bypass techniques (e.g., URL encoding, CRLF injection), and chaining the vulnerability with other flaws like OAuth or SSRF. Ideal for web application penetration testing and bug bounty hunting.

This comprehensive guide provides a detailed methodology for detecting and exploiting Server-Side Request Forgery (SSRF) vulnerabilities. It covers basic, blind, and out-of-band techniques, including testing against cloud metadata endpoints (AWS/GCP/Azure) and advanced bypass methods like DNS rebinding. It is an essential resource for web application security testing and bug bounty hunting.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill integrates 10 major academic literature APIs (including PubMed, arXiv, OpenAlex, Crossref, etc.). It guides users on converting complex research intents into reproducible, verifiable lookups for papers, preprints, citations, and open-access full texts. It ensures results include verifiable provenance and follows a rigorous workflow for maximum accuracy in scholarly research.

This skill helps plan engaging, structured puzzle-based activities for various settings like classrooms, parties, and corporate team-building events. Users provide the event description, target audience, and overall goal, and the planner generates a comprehensive activity schedule. It includes a minute-by-minute timeline, necessary materials checklist, and generates pre-configured generator links for diverse puzzles (Word Search, Crossword, Sudoku, etc.), ensuring content is theme-appropriate and ready for one-click use.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.