Skill UI

LaZagne is an open-source post-exploitation tool utilized by red teams to harvest stored credentials from compromised endpoints. It supports Windows, Linux, and macOS, extracting passwords from browsers (Chrome, Edge), databases (MySQL, SQLite), system vaults (DPAPI, LSA), and various applications. It is crucial for privilege escalation and lateral movement during authorized security assessments.

A comprehensive guide detailing how to detect and exploit second-order SQL injection vulnerabilities. This technique targets scenarios where malicious input is stored in a database (e.g., user profiles, comments) and subsequently executed in an unsafe SQL query during a completely different application operation, bypassing initial sanitation checks.

This comprehensive skill guides the testing of web applications for Cross-Site Scripting (XSS) vulnerabilities. It covers reflected, stored, and DOM-based injection points. Testers learn to map input/output contexts, craft context-appropriate payloads, and bypass complex sanitization and CSP protections, ensuring thorough client-side security assessment.

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

Use the understand-diff skill to analyze git changes against the stored knowledge graph so you can quickly summarize modified files, affected components, and risk areas before reviewing or merging.

A comprehensive guide on using the nacos-cli tool to discover, install, update, merge, and publish AI skills stored in a Nacos registry. It covers key commands for listing, getting, uploading, reviewing, and releasing skills, ensuring version-aware publishing workflows for personal and team use.

Use the OpenViking CLI to search memories, skills, and resources with semantic and literal queries across directories, surfacing context-aware results whenever agents need stored knowledge or documentation.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

This tool facilitates the migration of stored procedures and functions from Oracle PL/SQL to PostgreSQL PL/pgSQL. It handles complex syntax translation, preserves function signatures and type-anchored parameters, and manages explicit collation mapping. Use this when converting an existing Oracle database schema or application logic to a PostgreSQL environment.

This skill manages a persistent, structured personal knowledge base (Wiki). It provides core operations for ingesting external articles, synthesizing insights from conversations, and querying stored knowledge. By maintaining structured files, index lists, and cross-references, it helps build a comprehensive knowledge graph, ensuring all insights are captured and easily retrievable.

The ETE Toolkit is a powerful Python library designed for analyzing, manipulating, comparing, and visualizing phylogenetic trees stored in Newick or Nexus formats. It allows users to perform topology edits, calculate phylogenetic distances (e.g., Robinson-Foulds), detect evolutionary events, and query external taxonomic databases like NCBI/GTDB. Note that this tool analyzes existing trees; it is not used for inferring trees from raw sequences.

This skill provides a seamless workflow for publishing content stored in Obsidian notes to X (Twitter). It intelligently handles both short-form posts (text, images, videos) and rich, long-form articles (X Articles) derived from Markdown. By utilizing a real Chrome browser, it ensures compatibility and bypasses anti-bot detection mechanisms, making it ideal for content creators and knowledge workers who need to automate their social media sharing process from their local knowledge base.