Skill UI

This skill focuses on identifying security vulnerabilities in Large Language Model (LLM) and AI features. It covers prompt injection, system prompt leakage, cross-tenant access, and data exfiltration techniques. Users must verify findings against false positives using reproducibility checks and out-of-band callbacks before reporting.

This skill helps identify and exploit specific vulnerabilities in Node.js applications. It covers techniques like prototype pollution, Express trust proxy abuse, and template engine SSTI. Users must have explicit authorization before testing. It includes fingerprinting, detection, and exploitation chains for critical security issues.

A security assessment skill for identifying WebSocket vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), message tampering, handshake-layer attacks, and socket.io authorization bypasses. Requires explicit written authorization before testing. Includes reconnaissance, endpoint discovery, and exploit verification techniques for authorized security assessments.

idea-os is a comprehensive, five-phase pipeline designed to transform a raw, abstract idea into a fully structured, build-ready plan. It guides users through Triage, Clarification, Deep Research, detailed PRD creation (including non-goals and metrics), and finally, a phased execution plan. The system adapts its complexity and vocabulary to the user's sophistication level, providing everything from foundational market analysis to actionable technical stack recommendations.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

This skill leverages Google Gemini's advanced image generation model to create high-quality, context-specific visuals. It is essential for developers needing placeholder images for UIs, generating detailed diagrams for technical documentation, or visualizing abstract concepts, logos, and assets across cross-platform projects (Windows, macOS, Linux).

A comprehensive set of production-ready runbook templates for managing technical incidents. These guides cover the full incident lifecycle, including detection, triage, mitigation, root cause analysis, and resolution procedures, ensuring systematic and rapid response to system outages and performance degradation.

A senior-level tool for performing deep-dive technical SEO audits and site architecture mapping. It analyzes crawl health, indexing blocks, sitemap integrity, and structural issues (like canonicalization, link flow, and crawl budget waste). Use this to diagnose complex Google Search Console errors and propose a full, engineered roadmap for website stabilization and optimization.

An adaptive and persistent coaching system designed for the entire job search lifecycle. It covers critical stages including Job Description (JD) decoding, resume optimization, mock interviews (behavioral, technical, case), transcript analysis, storybank building, and comprehensive salary negotiation support. The system tracks your progress and provides tailored coaching plans across 23 commands.

An elite advisory skill designed for CTOs, IT Managers, and digital leaders. It acts as a collective intelligence of eight experts, providing comprehensive guidance on modern IT strategy, governance, and operational excellence. Core capabilities include FinOps management, AI governance roadmapping, C-suite executive communication, and aligning technology investments with core business value.

This skill transforms the agent into a senior strategic consultant, specializing in Philip Kotler’s macro-marketing environment analysis. It systematically evaluates PESTEL factors (Political, Economic, Social, Technological, Environmental, Legal) and synthesizes them into a high-impact SWOT matrix. Use this for market entry research, periodic strategic audits, or validating business assumptions against real-time macro-economic indicators.

This comprehensive guide provides technical implementations for achieving a modern 'Layered Design' aesthetic. It teaches developers how to create depth, intentional overlapping, and clear stratification across various platforms. Includes detailed code examples for CSS, SwiftUI, Flutter, and React Native to build complex, dimensional user interfaces.