Skill UI

This skill analyzes raw git diffs or change descriptions to generate clear, story-driven commit messages. It strictly adheres to the Conventional Commits specification, ensuring that messages thoroughly explain *why* a change was made, not just *what* changed. It is ideal for writing meaningful commit history, preparing pull requests, or summarizing complex code changes for team collaboration.

This skill fetches and compares live pricing for various Azure services, such as Virtual Machines, Storage, and SQL Databases. It utilizes the Azure Retail Prices API to allow users to check costs in specific geographic regions or compare the same service across multiple regions, helping them find the most cost-effective deployment option.

This utility evaluates complex arithmetic expressions using arbitrary-precision decimal mathematics. It is specifically designed for scientific, financial, or engineering calculations where standard floating-point arithmetic causes unacceptable rounding errors (e.g., 0.1 + 0.2). Supports addition, subtraction, multiplication, division, exponents, and parentheses.

This pipeline orchestrates the process of adapting a highly polished, existing academic paper for resubmission to a new conference or journal. It specializes in text-only microedits, integrating prior reviewer feedback (review corpus) while strictly forbidding new experiments, new citations, or major structural changes. It is designed for high-stakes, time-constrained resubmissions.

A comprehensive guide detailing advanced security threats in Machine Learning and AI systems. Covers model supply chain attacks (RCE via pickle, poisoning), adversarial examples (FGSM, PGD, physical-world), data privacy breaches, and LLM-specific vulnerabilities. Essential for building robust, secure AI pipelines.

This comprehensive playbook guides security testers through deep API authorization checks, focusing specifically on BOLA (Broken Object Level Authorization) and BFLA (Broken Function Level Authorization). Use this skill to test scenarios where object identifiers, nested resources, or privileged functions are exposed, ensuring thorough checks for mass assignment and privilege escalation.

A comprehensive playbook detailing advanced techniques for exploiting insecure deserialization flaws across Java, PHP, and Python. It covers traffic fingerprinting, identifying specific gadget chains (e.g., Commons Collections, Shiro), and utilizing tools like ysoserial to achieve Remote Code Execution (RCE) and privilege escalation.

The Exa Web Toolkit provides advanced capabilities for high-quality web search and content extraction. It excels at handling scientific, technical, and academic queries, allowing users to filter results by specialized categories like 'research paper' and specific academic domains. Beyond search, it can fetch and extract content from multiple URLs, including articles and academic PDFs, making it essential for deep scholarly research and current information gathering.

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

A comprehensive playbook detailing advanced techniques for exploiting glibc heap vulnerabilities using ptmalloc2. Covers various memory corruption primitives, including Use-After-Free, double free, and overflows. Provides version-specific guidance on bypassing modern protections like safe-linking (glibc >= 2.32) and RCE methods for post-2.34 environments.

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.