Skill UI

A specialized skill designed for agents to proactively identify, analyze, and strategize high-impact contributions within trending Open Source repositories. It systematically performs repository discovery, extracts targeted issues (like 'help wanted' or 'good first issue'), and conducts deep feasibility analysis (including mergeability and complexity). Finally, it generates a structured 'Contribution Dossier' with actionable plans, significantly accelerating the process of becoming a top-tier OSS contributor.

Provide REST API access to ClinPGx, the successor to PharmGKB, for querying gene-drug interactions, CPIC/DPWG/FDA guidelines, allele functions, and evidence that supports precision dosing and pharmacogenomics-driven clinical decisions.

FluidSim is a Python-based CFD framework offering pseudospectral solvers (2D/3D Navier-Stokes, shallow water, stratified flows) with FFT, MPI, Pythran/Transonic acceleration, and rich output analysis for turbulence or geophysical studies.

Produces 50+-page market research dossiers with consulting-style LaTeX formatting, deep data lookups, strategic frameworks, and automated visual assets for investment and planning briefs.

A comprehensive skill for building detailed threat actor profiles. It systematically collects and correlates intelligence from diverse open-source sources, including vendor reports, dark web forums, social media, and code repositories. The resulting structured dossiers map adversary motivations, capabilities, infrastructure, and Tactics, Techniques, and Procedures (TTPs), enabling robust attribution and defensive planning.

This skill covers implementing robust API abuse detection using advanced rate-limiting algorithms like Token Bucket and Sliding Window. It uses Redis for distributed counting and allows for adaptive limits, dynamically tightening during detected attacks and relaxing during normal traffic. Ideal for securing APIs against DDoS, brute force, and scraping attacks.

A comprehensive guide to configuring multi-layered DDoS protection using Cloudflare. This skill covers mitigating volumetric (L3/4) and application-layer (L7) attacks by setting up managed rulesets, Web Application Firewall (WAF) rules, rate limiting, and Bot Management. Ideal for strengthening security architecture and meeting compliance standards.

This guide details how to implement robust Security Orchestration, Automation, and Response (SOAR) playbooks using Palo Alto XSOAR. It covers building automated, multi-stage incident response workflows (e.g., phishing, malware analysis, DDoS containment) by integrating various security tools. Use this when automating manual SOC tasks, structuring incident playbooks, or improving overall security posture and compliance.

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

This skill automates GraphQL introspection attacks to extract the complete API schema, including all types, queries, mutations, and subscriptions. It maps the attack surface, tests for query depth limits, and exploits GraphQL-specific weaknesses like batching attacks or nested query DoS. Used for comprehensive GraphQL security auditing and penetration testing.

This skill demonstrates how to secure AWS API Gateway endpoints using AWS WAF (Web Application Firewall). It implements essential security measures including protection against OWASP Top 10 vulnerabilities, custom rate-limiting rules, IP reputation filtering, and bot control. Ideal for deploying public API endpoints that require robust defense against common web attacks and API abuse.

A comprehensive guide and code suite for performing penetration testing on real-time WebSocket APIs (WS/WSS). This tool assesses vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), missing handshake authentication, message injection, input validation failures, and DoS risks. It guides users through analyzing the handshake process and testing authorization enforcement using Python and specialized tools.