Skill UI

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

This tool optimizes the codebase indexing within Cursor. It processes your entire codebase, converting code chunks into vector embeddings stored in a vector database. This enables advanced @Codebase semantic search, allowing users to ask natural language questions (e.g., "Where is authentication handled?") and retrieve the most relevant code snippets, significantly improving AI context awareness across chat and coding tasks.

This skill automates the creation of comprehensive documentation for relational databases (PostgreSQL/MySQL). By introspecting live schemas, it extracts detailed metadata including table structures, column descriptions, primary/foreign key relationships, indexes, views, and stored procedures. The output provides a data dictionary, entity-relationship map, and schema statistics, crucial for knowledge transfer and database lifecycle management.

This advanced workflow provides comprehensive meeting intelligence by allowing users to search across stored transcripts using keywords and date filters. It integrates the AskFred AI assistant for natural language Q&A over single or cross-meeting data. Furthermore, it aggregates detailed meeting analytics, providing key metrics such as total duration, action items, and top keywords for robust reporting and knowledge retrieval.

Generates production-ready stored procedures, functions, and triggers for PostgreSQL, MySQL, or SQL Server by analyzing requirements, using the stored-procedure-generator plugin, and returning optimized SQL code for complex logic, integrity, and transaction safety.

Map web inputs for reflected or stored HTML injection, send crafted tags via URLs, POST bodies, or visible fields, and document appearance/phishing manipulations for authorized security assessments.

A comprehensive skill designed to manage, track, and persist image assets generated by Ideogram's API. This tool addresses the critical issue of expiring image URLs by implementing a complete lifecycle pipeline. It handles metadata tracking (prompt, seed, model, style, etc.), immediate downloading, and robust storage to both local filesystems and cloud solutions like S3. Features include asset persistence, generation history logging, and image reproduction using stored seed values.

This skill provides comprehensive, structured audit logging for OpenRouter API interactions. It automatically captures essential metadata like total cost, token usage, model details, latency, and status, while also performing PII redaction. The resulting audit trail is stored in an append-only SQLite database, making it ideal for building compliance-ready systems, detailed cost monitoring, and deep debugging of production environments.

Automatically scans code for reflected, stored, and DOM-based XSS risks across HTML, JavaScript, CSS, and URLs, providing reports and safe proof-of-concept payloads for use in reviews, audits, or pre-deployment checks.

Assess web apps for client-side injection flaws, covering stored, reflected, and DOM XSS plus HTML injection, demonstrate session hijacking payloads, and guide validation and sanitization checks.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

Amazon Macie is a fully managed data security service that automatically discovers, classifies, and protects sensitive data (PII, financial records, credentials) stored in Amazon S3. It uses advanced machine learning and pattern matching to identify compliance risks and enforce data governance policies. Ideal for organizations needing automated data discovery for regulatory compliance and improving overall cloud security posture.