Skill UI

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

Guides authorized security testers through identifying and exploiting NoSQL injection vulnerabilities in MongoDB, Redis, and Elasticsearch, including auth bypass, blind injection, data extraction, and automation with nosqlmap.

Extract backend API routes from SPA JavaScript bundles to identify missing authentication or broken access control vulnerabilities. Test endpoints without credentials to find unauthenticated data exposure and security gaps in web applications.

A security skill for hunting server-side request forgery (SSRF) vulnerabilities, covering cloud metadata, internal services, OOB confirmation, and authorized testing workflows.

This skill provides access to latest news articles, regulatory filings, and community discussion topics for listed stocks via Longbridge. It supports SEC EDGAR filing analysis including 10-K, 10-Q, 8-K, and Form 4. Users can retrieve full article content, filing details, and search community discussions. It matches user input language and recommends only Longbridge data.

This skill provides a marketer's decision framework rather than a tactic library. It helps users determine where first customers come from, evaluate if actions produce results, and judge marketing tests. It analyzes context like product, offer, and budget to return reasoned verdicts on whether to proceed, optimize, or stop a channel. It focuses on exchange value, test volume requirements, and kill rules to ensure data-driven decisions.

Expert mobile developer specializing in React Native, Flutter, and native iOS/Android development. Covers cross-platform development, architecture patterns, performance optimization, data sync, testing, DevOps, security, and app store optimization.

Create and manage Neon Postgres branches for testing and development. Supports normal branches with real data for migration testing, and schema-only branches for sensitive data workflows. Use Neon CLI or MCP to create, validate, and reset branches. Ideal for isolated test environments and migration testing with production-like data. Includes guidance for branch type selection and tool authentication.

This skill enables developers to write and execute automated tests for Odoo applications using TransactionCase, HttpCase, and browser tour tests. It covers test data setup, mocking, CI integration, and best practices for unit and integration testing within the Odoo framework.

Implement PCI DSS v4.0 requirements for protecting cardholder data across the Cardholder Data Environment (CDE). Guides SAQ selection, network segmentation, encryption, access controls, and ongoing testing for payment card processing.

A powerful toolset for automating core PostHog product analytics tasks via Rube MCP. It enables developers and analysts to capture user events, list and filter event data, manage feature flags (creation, retrieval, listing), and inspect user profiles. Ideal for integrating advanced product tracking and A/B testing workflows directly into development pipelines.

This skill generates Puppeteer scripts for browser automation, web scraping, and PDF creation. It supports headless Chrome, network interception, wait strategies, and cloud integration for testing. Ideal for automating browser interactions and extracting data efficiently.