Skill UI

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

A comprehensive playbook detailing NoSQL injection techniques, moving beyond traditional SQLi. Covers deep vulnerabilities in MongoDB, including operator injection, login bypass, blind data extraction using regex, and $where execution. Also includes attacks specific to Redis, CouchDB, and general API parameter pollution.

This router serves as the initial guide for comprehensive security assessments on new targets or unknown attack surfaces. It helps users map the scope, discover hidden assets, perform detailed technology fingerprinting, build endpoint inventories, and strategically plan the optimal testing path before diving into specific vulnerability checks (e.g., API, Auth, Injection).

This tool searches a comprehensive database of over 2500 curated open-source repositories for tools related to Large Language Models (LLMs), ChatGPT, RAG, agents, and NLP. It interprets natural language queries, converts non-English inputs to core English keywords, and systematically filters results across multiple specialized categories (e.g., LangChain, Chatbots, CLIs). Use it whenever the user needs to find specific AI development libraries or open-source AI tooling.

This skill performs a comprehensive post-generation visual polish on existing slide decks (PPTX/Beamer). It utilizes per-page Codex review against a specified reference PDF to ensure consistent visual weight, typography, and layout across all slides. It fixes font scaling, text overflow, and structural drift without altering core content, ensuring a professional and cohesive presentation.

This expert playbook details advanced techniques for exploiting stack-based vulnerabilities, including classic buffer overflows, Return-Oriented Programming (ROP), ret2libc, and specialized gadgets like ret2csu and SROP. It provides comprehensive guidance on bypassing modern memory mitigations (NX, ASLR, PIE) to hijack program control flow and achieve reliable remote code execution in userland binaries.

A comprehensive playbook for digital forensic experts. It details systematic techniques and tools for detecting and extracting hidden data embedded across various media types, including images (LSB, PNG chunks, JPEG DCT, EXIF metadata), audio (spectrogram, DTMF), and files (polyglots, appended data). Essential for deep-dive forensic investigations.

This guide details how to configure SMTP email delivery settings within a Webiny project using the `<Api.Mailer.Smtp />` component. It specifies the required properties (host, port, user, etc.) and emphasizes best practices, such as passing sensitive passwords via environment variables rather than hard-coding them. Ideal for developers setting up external email services.

A comprehensive playbook for testing XSLT injection vulnerabilities. This guide details advanced attack chains, starting with processor fingerprinting (Java, PHP, .NET, libxslt). It covers critical vectors including XXE (External Entities), Server-Side Request Forgery (SSRF) via document(), arbitrary file writing (EXSLT), and achieving Remote Code Execution (RCE) through language-specific extensions.

This skill guides the design and optimization of production-grade multi-agent systems. It specializes in using LangGraph, LangChain, and DeepAgents to create structured, complex AI workflows. It covers state management, agent routing, memory integration, and tool calling, making it ideal for building robust, scalable agents like supervisors, planners, and coders.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.