Skill UI

A comprehensive skill for detecting and exploiting JavaScript prototype pollution vulnerabilities in both client-side and server-side applications. It demonstrates advanced property injection techniques to achieve critical security outcomes, including Cross-Site Scripting (XSS), Remote Code Execution (RCE), and authentication/authorization bypass, especially in Node.js environments and JSON merging scenarios.

Configure Azure AD Privileged Identity Management via Microsoft Graph API to enumerate eligible and active assignments, request just-in-time activations, audit logs, and enforce MFA or approval policies for zero-trust privileged access scenarios.

This skill guides the implementation of security chaos engineering experiments. It involves deliberately degrading or disabling security controls (like WAF, firewalls, or log pipelines) in a controlled environment to rigorously verify the detection, alerting, and response capabilities of the Security Operations Center (SOC). Users learn to use tools like boto3 and Python to simulate failure scenarios and assess system resilience and compliance posture.

This skill simulates various network attack scenarios, including bandwidth throttling, traffic shaping, and network degradation, using tools like tc, iperf3, and Scapy. It is designed for authorized security assessments to test the resilience of applications, validate Quality-of-Service (QoS) policies, and assess the ability of network monitoring tools to detect sophisticated traffic manipulation attacks (e.g., Slowloris-style attacks).

This guide facilitates comprehensive tabletop exercises simulating major ransomware incidents. It systematically tests an organization's preparedness, decision-making processes, and communication protocols across executive, legal, PR, and technical teams. Scenarios cover double extortion, regulatory compliance (GDPR, HIPAA), and varying backup compromise levels, helping organizations identify critical gaps before a real-world attack.

A comprehensive guide detailing how to detect and exploit second-order SQL injection vulnerabilities. This technique targets scenarios where malicious input is stored in a database (e.g., user profiles, comments) and subsequently executed in an unsafe SQL query during a completely different application operation, bypassing initial sanitation checks.

This guide provides a comprehensive workflow for recovering deleted files from forensic disk images and storage media. Utilizing PhotoRec and file signature carving techniques, it addresses scenarios where file systems are corrupted, formatted, or metadata is unavailable. The process includes setup, running the recovery tool in both interactive and command-line modes, and advanced steps for organizing, hashing, and validating file integrity.

A foresight agent that runs a rigorous 12-step pipeline combining Claude’s qualitative intelligence with Python’s deterministic arithmetic to analyze high-stakes future scenarios, infer reasonable horizons, and surface quantitative signals for prediction requests.

Soft Predict Future is a structured foresight engine that triggers whenever the user asks about future outcomes or scenarios. It enforces a nine-step analytical pipeline (validation, signal collection, scoring, driver extraction, etc.), highlights required searches and inputs, and directs the user to web-enabled reasoning for predictive analysis.

This tool assesses whether coding agents adhere to defined skills, rules, or agent definitions. It automatically generates scenarios with varying prompt strictness, executes the agent, and generates a comprehensive report detailing the compliance rate of tool calls against predefined workflow specifications using advanced LLM classification.

This skill guides users through evidence-based terminal operations. It is designed for scenarios requiring direct command execution, Git status checks, debugging CI/build failures, and pushing narrow, verified fixes. It emphasizes following a structured, minimal-scope workflow and accurately reporting the repository's current state (e.g., local changes vs. pushed code).

A comprehensive guide on integrating Firebase Data Connect into Flutter applications. Learn how to define schemas using GraphQL, implement typed queries and mutations, set up real-time listeners, handle offline scenarios, and apply best practices for performance and robust security within a mobile environment.