Skill UI

This skill enables users to build reusable command-line scripts and utilities for interacting with the Hugging Face API. It supports chaining API calls, automating repetitive tasks, and processing model or dataset data efficiently. Scripts utilize HF_TOKEN for authentication and can leverage the hf CLI for advanced repository interactions.

A security testing skill that maps nine account takeover paths, including password reset poisoning, token leakage, JWT manipulation, and email change flaws, with proof and false-positive guidance for authorized assessments.

This skill helps identify CAPTCHA bypass vulnerabilities in web applications by testing various patterns such as omitting the CAPTCHA field, sending empty values, replaying tokens, and testing alternate endpoints. It is intended for authorized security assessments only.

A skill for hunting CSRF vulnerabilities in web applications. Covers raw HTTP client techniques, token bypass methods, and high-value target identification, with an emphasis on authorized testing.

This skill identifies authentication flaws in password reset flows, including username enumeration, exposed reset tokens, token replay, and missing rate limits. It helps security professionals assess account recovery security risks and prevent unauthorized access.

This skill identifies and exploits JWT cryptographic weaknesses such as alg:none and key confusion attacks. It helps security professionals find critical vulnerabilities in authentication systems by forging tokens to bypass security checks and gain unauthorized access.

Authorized assessment of federated identity systems: SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token-confusion issues. Provides workflow checklists and toolchain guidance for validating SSO flows, signature checks, redirect_uri handling, PKCE, and more.

Routes enumerable judgment steps (did it work, which option, how risky) to the Jev judgment model via MCP tools, batching questions into single calls and handling escalated verdicts. For agents needing fast typed decisions without token generation.

Improve LLM prompts using task-specific evaluation, structured instructions, chain-of-thought reasoning, and regression checks for production-ready AI applications.

This skill provides comprehensive techniques for optimizing prompts used with any Large Language Model (LLM). It teaches proven methodologies—including Role definition (R), Context setting (S), Constraints (C), Instructions (I), and Templates (T)—to transform vague inputs into precision-engineered instructions. Users can reliably achieve structured JSON output, implement Chain-of-Thought reasoning, reduce hallucinations, and minimize token usage, ensuring consistent and high-quality results across different AI platforms.

This skill enables security auditing of meme coins and tokens on EVM and Solana blockchains. It identifies critical vulnerabilities like hidden mint functions, honeypot transfer restrictions, fee manipulation, and liquidity pool drains. Users must obtain explicit authorization before scanning targets to ensure ethical use.

Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers that handle custom authentication extensions, including token claim enrichment, attribute collection customization and validation, and custom OTP delivery.