Skill UI

This comprehensive guide outlines the principles and technical implementation for creating highly accessible, high-contrast user interfaces. It ensures WCAG AAA compliance by specifying pure black/white color pairings, clear boundaries, and legible typography across web (CSS), iOS (SwiftUI), and Android (Flutter) platforms. Ideal for applications requiring maximum legibility and stark visual impact.

Security skill for detecting missing or weak rate limiting on authentication endpoints. Identifies brute force vulnerabilities in OTP, password reset, and login systems. Requires explicit authorization for authorized security assessments only. Includes shadow-throttle detection and enumeration techniques.

This skill identifies and exploits JWT cryptographic weaknesses such as alg:none and key confusion attacks. It helps security professionals find critical vulnerabilities in authentication systems by forging tokens to bypass security checks and gain unauthorized access.

This skill focuses on identifying security vulnerabilities in Large Language Model (LLM) and AI features. It covers prompt injection, system prompt leakage, cross-tenant access, and data exfiltration techniques. Users must verify findings against false positives using reproducibility checks and out-of-band callbacks before reporting.

This skill provides structured patterns for combining vector similarity search with traditional keyword-based search. It is essential for building advanced Retrieval-Augmented Generation (RAG) systems, sophisticated search engines, or any retrieval task requiring high recall. Use this when pure semantic understanding is insufficient, and precise matching of specific terms (like names or codes) is necessary.

This system treats ideas like living species on an 'evolution island.' Instead of simple storage, it runs structured, multi-round iterations simulating biological processes: competition, crossbreeding, and mutation. Users input initial concepts, and the tool systematically evaluates them using a 6-dimensional scoring framework (Novelty, Feasibility, Value, etc.). It helps users deepen viability, discover unexpected connections between disparate ideas, and prioritize the most robust concepts for development and investment.

idea-os is a comprehensive, five-phase pipeline designed to transform a raw, abstract idea into a fully structured, build-ready plan. It guides users through Triage, Clarification, Deep Research, detailed PRD creation (including non-goals and metrics), and finally, a phased execution plan. The system adapts its complexity and vocabulary to the user's sophistication level, providing everything from foundational market analysis to actionable technical stack recommendations.

Authorized assessment of federated identity systems: SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token-confusion issues. Provides workflow checklists and toolchain guidance for validating SSO flows, signature checks, redirect_uri handling, PKCE, and more.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

This skill provides expert guidance for Site Reliability Engineering (SRE) incident response. It covers rapid problem resolution, modern observability practices, and comprehensive incident management workflows. Use it for assessing severity, establishing command structures, stabilizing systems, investigating root causes using distributed tracing and metrics, communicating with stakeholders, and conducting blameless post-mortems to improve system resilience.

This skill orchestrates multi-agent incident response workflows following modern SRE practices. It guides detection, triage, investigation, mitigation, and resolution phases to ensure rapid service recovery and learning. Includes severity classification, observability analysis, root cause analysis, and deployment strategies for critical system outages and security breaches.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.