Skill UI

This expert playbook details advanced techniques for exploiting stack-based vulnerabilities, including classic buffer overflows, Return-Oriented Programming (ROP), ret2libc, and specialized gadgets like ret2csu and SROP. It provides comprehensive guidance on bypassing modern memory mitigations (NX, ASLR, PIE) to hijack program control flow and achieve reliable remote code execution in userland binaries.

A comprehensive playbook for digital forensic experts. It details systematic techniques and tools for detecting and extracting hidden data embedded across various media types, including images (LSB, PNG chunks, JPEG DCT, EXIF metadata), audio (spectrogram, DTMF), and files (polyglots, appended data). Essential for deep-dive forensic investigations.

This guide details how to configure SMTP email delivery settings within a Webiny project using the `<Api.Mailer.Smtp />` component. It specifies the required properties (host, port, user, etc.) and emphasizes best practices, such as passing sensitive passwords via environment variables rather than hard-coding them. Ideal for developers setting up external email services.

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

This skill guides the design and optimization of production-grade multi-agent systems. It specializes in using LangGraph, LangChain, and DeepAgents to create structured, complex AI workflows. It covers state management, agent routing, memory integration, and tool calling, making it ideal for building robust, scalable agents like supervisors, planners, and coders.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.

This tool functions as a Command Line Interface (CLI) alias for implementing the specific 'pua:mama' protocol within advanced coding models like Codex or Claude Code. It loads and enforces a structured 'mama skill/protocol,' maintaining rigorous verification standards while adjusting the visible narrative style to a specific 'Chinese-mom nagging mode.' It manages configuration by interacting with `~/.pua/config.json`, ensuring existing user fields are preserved.

This utility serves as a Codex CLI alias, mapping specifically to the Claude Code `/pua:offline` command. It enables offline operation mode for developer tools by updating the user's configuration file (~/.pua/config.json). Use this for developers needing to simulate or operate in environments with limited connectivity, ensuring continued access to code assistance features.

This alias serves as a specialized Codex CLI interface for implementing the P7 protocol, mimicking the workflow of a P7 senior engineer. It enforces a highly structured development cycle: detailed planning, robust implementation, mandatory self-review (via three critical questions), and final, verifiable completion markers. Ideal for complex coding tasks requiring maximum rigor and accountability.

A specialized CLI alias designed to implement the PUA P9 protocol, simulating the role of a P9 tech lead for AI coding assistance (Codex/Claude Code). This tool helps users structure complex development tasks by focusing on writing precise prompts, managing execution steps, and strictly adhering to a defined professional protocol, minimizing direct code implementation unless reassigned. It ensures rigorous process management and evidence-based output.

A specialized Codex CLI alias designed to check the operational status of the PUA agent or team. This tool reports current active states, corresponding Process IDs (PID), Time To Live (TTL), and identifies stale or inactive records. It is primarily used for system debugging and monitoring agent health via the command line.

A comprehensive skill for building, auditing, and linting custom Kubernetes Operators. Focuses specifically on the Operator pattern, ensuring controllers correctly implement declarative reconcile loops. Tools validate Custom Resource Definitions (CRD) against best practices, catch common reconciliation bugs (like status drift or blocking calls), and score operators against industry capability levels.