Skill UI

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

Comprehensive guidance on using Shodan’s web UI, CLI, and API for reconnaissance, exposed-service discovery, screenshot capture, and exporting JSON/CSV data during penetration tests.

Guides using SQLMap to automate SQL injection discovery, enumerate databases/tables/columns, dump data, and collect hashes across MySQL/PostgreSQL/MSSQL/Oracle during authorized penetration tests.

This skill guides users through a comprehensive, multi-stage process for creating high-quality documentation. It systematically moves through Context Gathering (understanding the background and audience), Refinement & Structure (iteratively building and editing sections), and Reader Testing (simulating external review to catch blind spots). Ideal for drafting complex specifications, proposals, or design documents that need to be robust and clear for a wide audience.

Provides the official Opentrons Protocol API v2 integration for OT-2 and Flex robots, enabling Python-based automation of liquid handling, module control, labware setup, pipetting flows, and protocol testing before execution.

Expert guide for building durable distributed systems with the Temporal Go SDK, covering deterministic workflow rules, mTLS worker configuration, advanced patterns, and testing/observability strategies for production workloads.

This skill provides a comprehensive framework for performing end-to-end UI testing and verification on Android emulators. It guides users through systematic processes including device calibration, UI element discovery using uiautomator, performing complex interactions (tap, swipe, input), and robust reporting via visual screenshots and logcat analysis. Ideal for ensuring the stability and functional correctness of React Native or native Android applications.

Automatically scans modern API frameworks (Next.js, Express, FastAPI, Django) to generate comprehensive, ready-to-run test suites. It ensures complete coverage for critical areas including authentication, input validation (boundary/injection), error code matrices, pagination, file uploads, and rate limiting. Ideal for TDD, contract testing, and security audits.

A comprehensive toolkit designed to professionalize LLM prompt workflows. It moves prompts from ad-hoc drafts to measurable, production-ready assets through A/B testing against structured test cases, immutable version tracking, and governance guidelines. Essential for marketing teams needing verifiable quality and safety for AI-generated content.

Creates detailed implementation plans for multi-step tasks by outlining file responsibilities, concrete coding/testing steps, and commit guidance so developers can execute with no prior context.

An expert guide for planning, designing, and implementing statistically rigorous A/B tests and product experiments. It covers core principles like formulating strong hypotheses, selecting primary/guardrail metrics, calculating sample sizes, and analyzing results to drive actionable business insights.