Skill UI

A comprehensive guide and toolkit for performing deep security assessments on mobile application backends. It covers identifying vulnerabilities such as broken authentication, insecure token management (JWT, opaque tokens), session fixation, privilege escalation, and IDOR (Broken Object-Level Authorization) across various OAuth flows (OIDC, PKCE). Essential for penetration testers assessing API security.

This tool serves as a persistent memory and state manager for complex coding projects within the Claude environment. It allows users to initialize new projects with structured metadata, track detailed session progress (including summaries, decisions, and next steps), and save the entire context reliably. By ensuring project continuity across disconnected sessions, it drastically improves the flow and consistency of the development workflow.

Tmux is a powerful terminal multiplexer that enables users to manage multiple sessions, windows, and panes within a single terminal connection. It is essential for maintaining persistent connections on remote servers (surviving SSH disconnects), running long-term background jobs, and automating complex, multi-pane workflows directly from shell scripts, significantly enhancing remote development efficiency.

A structured planning system that uses markdown files (task_plan.md, progress.md) to manage complex, multi-step projects, research tasks, or workflows requiring extensive steps. It provides robust session recovery and includes file tampering detection, treating all plan contents as immutable data. Ideal for highly structured project management.

This skill is designed to manage complex, multi-step tasks by coordinating the efforts of multiple specialized AI agents. It provides structured methods for listing available agents, initiating real-time conversations, submitting complex background tasks (such as data analysis or report generation), tracking task status, and maintaining conversational context using session IDs. It is essential when a core task requires diverse expert knowledge or sequential collaboration.

A robust orchestration skill designed for managing large-scale, complex machine learning experiments on remote GPU clusters via SSH. It handles multi-seed sweeps, sequential wave transitions, and deep learning pipelines requiring state management. Features include OOM-aware automatic retries, cleanup of stale terminal sessions, and deterministic scheduling to prevent race conditions, making it ideal for grid computing and staged training.

A tool designed for persistent context management within AI coding sessions. Memory Kit solves the problem of context loss that occurs during compaction or session restarts by saving, loading, updating, and sharing critical session state to a dedicated `MEMORY.md` file. Key functions include creating snapshots of goals and decisions, syncing context across team members via Git, and auditing/pruning stale entries, ensuring continuous workflow and knowledge retention.

A speed-optimized, comprehensive checklist for rapid security assessments. This guide covers full-cycle penetration testing methodologies, including deep reconnaissance (WAF bypass, CDN mapping), access control testing (MFA, JWT, API keys), and session management vulnerabilities. Ideal for time-boxed engagements, CTF competition, or initial service triage.

This guide details how to perform authentication and data operations with the Veeva Vault platform using its REST API. It covers obtaining session IDs via username/password or OAuth 2.0, and executing complex queries using VQL (Veeva Query Language). Ideal for developers integrating document management systems in the life sciences sector.

This guide provides fundamental security and technical guidance for integrating with Veeva Vault. It covers REST API authentication (OAuth 2.0, session-based), executing VQL queries, and utilizing the VAPIL Java SDK. It is an essential resource for developers working with Veeva Vault for clinical operations, document management, and CRM systems.

This API provides key-value store abstractions, enabling developers to manage persistent or temporary data within their web services. It offers two distinct scopes: a global (non-tenant-scoped) store and a tenant-scoped store. This is essential for applications requiring structured data management, such as application settings, caching mechanisms, or session data, while maintaining clear data isolation.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.