Skill UI

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This library provides a complete and verified set of grep command patterns designed for auditing existing React codebases. It is essential for developers preparing for major React upgrades, specifically migration audits for React 18.3.1 or React 19. It detects deprecated APIs, removed features, unsafe lifecycle methods, batching vulnerabilities, and dependency conflicts, ensuring a smooth transition.

This specialist simulates the role of an App Store reviewer, auditing iOS source code and metadata against Apple's strict guidelines. It systematically identifies potential compliance risks, technical vulnerabilities, monetization gaps (IAP/Subscriptions), and critical UX shortcomings, delivering a prioritized risk register for fast approval.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

A universal assistant for conducting deep code reviews across major SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). It rigorously analyzes SQL code for critical vulnerabilities (like SQL injection), performance bottlenecks, maintainability issues, and adherence to industry best practices. Features include security audits, index optimization recommendations, query structure analysis, and schema design validation, ensuring robust and secure database development.

A comprehensive, five-stage methodology for reviewing code quality. This process systematically checks for requirements compliance, logical correctness, code maintainability, test coverage, and critical security/performance vulnerabilities. It provides actionable feedback categorized by severity (Blocker, Major, Minor, Nit), ensuring high standards for all merged code.

This tool provides access to the Cancer Dependency Map (DepMap) data, derived from genome-wide CRISPR screens, RNAi, and compound sensitivity assays. It allows users to query gene dependency scores, identify cancer-specific vulnerabilities, predict synthetic lethal interactions, and validate potential oncology drug targets across various cancer cell lines.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

Detects goal hijacking vulnerabilities where malicious instructions are hidden within external content sources processed by the agent, such as retrieved documents (RAG), uploaded files, or web page content. This skill simulates these attack vectors to ensure the agent only uses the provided context for the stated task and does not execute embedded hidden commands.

This tool provides comprehensive AI security scanning using the Tencent AI-Infra-Guard framework. It systematically audits AI infrastructure, scans tools and skills, checks agent security, and performs advanced LLM jailbreak evaluations to identify vulnerabilities and ensure the robustness and reliability of AI systems.

A comprehensive security tool designed for AI environments (OpenClaw). It functions as an 'antivirus' for AI skills, performing deep audits, scanning skills before installation, and running full security health checks. Its primary goal is to detect vulnerabilities, prevent data leaks, and mitigate privacy risks, ensuring the integrity and safety of the AI workspace.