Skill UI

This tool performs comprehensive security testing on SOAP web services. It analyzes WSDL definitions to identify available methods and then tests for critical XML-related vulnerabilities, including XXE, XPath injection, XML bombs, and WS-Security bypass. It is designed for automated penetration testing of enterprise-level SOAP APIs.

This tool automates the testing of web application URL parameters for Server-Side Request Forgery (SSRF). It probes sensitive endpoints, including cloud metadata services (AWS, GCP, Azure), internal network resources, and various URI schemes (file://, gopher://). It is designed for authorized penetration testing environments to confirm SSRF vulnerabilities and generate detailed threat reports.

Nikto is a powerful, open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests over 7,000 potentially dangerous files and checks for critical issues like XSS, SQL injection, outdated versions, and misconfigurations across modern web applications. Ideal for security audit, penetration testing, and validating web server security controls.

Astro is a modern web framework designed specifically for building high-performance, content-heavy websites like blogs, documentation sites, and portfolios. Its core innovation is the Islands Architecture, which ships zero JavaScript by default, drastically improving performance and Core Web Vitals. It supports multi-framework components (React, Vue, Svelte) in a single project, making it ideal for content developers prioritizing speed and flexibility.

Launches an interactive web dashboard designed to visualize the knowledge graph derived from a target codebase. This tool helps developers gain a high-level, structural understanding of complex projects by mapping out relationships, module dependencies, and the overall knowledge network of the code, making maintenance and onboarding significantly easier.

Gradio is a powerful Python library designed for creating interactive web user interfaces and showcasing machine learning demos quickly. This skill covers core patterns like Interface, Blocks, and ChatInterface, allowing users to build complex applications, components, and event-driven chatbots with minimal effort. Ideal for rapid prototyping and deep learning model visualization.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

Plotly is a powerful Python graphing library designed to create highly interactive, publication-quality visualizations. It supports over 40 chart types, including scatter plots, heatmaps, candlestick charts, and geographical maps. Ideal for building sophisticated dashboards, conducting deep exploratory data analysis, and creating rich, web-embeddable presentations with features like zooming, panning, and hover tooltips.

AgentPhone is an API-first platform designed for developers building AI agents with advanced telephony capabilities. It allows agents to manage phone numbers, make/receive voice calls, and handle SMS messages. Developers can utilize hosted mode for simple AI interactions or webhook mode for custom, complex logic, making it ideal for building sophisticated customer support bots or virtual assistants.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

This skill provides comprehensive interaction with the DeerFlow AI agent platform via its robust HTTP API. It is designed for managing complex, multi-step AI workflows, including deep academic research, code execution, web browsing, and file analysis. Users can initiate and continue conversation threads, manage agent memory, upload documents (PDF, etc.), and delegate complex research tasks to the autonomous agent system.

Defines a premium UI/UX persona that enforces agency-grade typography, textures, and motion choreography, guiding AI to avoid cheap defaults and deliver cinematic, tactile web experiences in varied archetypes.