Skill UI

This tool performs a comprehensive analysis of a single webpage for SEO optimization. It evaluates on-page elements, content quality, technical metadata, schema markup, images, and performance metrics. It generates a score card, identifies critical issues, and provides actionable recommendations to improve search engine visibility and overall user experience.

Performs a full GEO audit of any website by discovering business type, crawling prioritized pages, and delegating parallel subagents to evaluate AI visibility, platform readiness, technical infrastructure, EEAT content, and schema markup, then outputs a composite GEO score with prioritized actions.

This powerful tool leverages DNSTwist, a comprehensive domain permutation engine, to detect various forms of domain impersonation. It generates thousands of potential lookalike domains (including typosquatting, attribute flaws, and homographs) and performs deep checks on DNS records, web page similarity (ssdeep/pHash), and registration status. It is vital for security analysts and threat hunters to proactively monitor for brand squatting and sophisticated phishing threats targeting an organization.

This comprehensive guide outlines techniques for authorized penetration testing of real-time web applications using WebSocket connections. It covers discovering various WebSocket endpoints, testing for authentication bypass, identifying Cross-Site WebSocket Hijacking (CSWSH) vulnerabilities, and assessing message handling for injection flaws (SQLi, XSS). Essential for securing chat, trading, and live notification platforms.

This skill covers the deployment and fine-tuning of Web Application Firewall (WAF) rules across major cloud platforms like AWS, Azure, and Cloudflare. It addresses critical security needs such as mitigating OWASP vulnerabilities (SQLi, XSS), managing bot traffic, implementing rate limiting, and ensuring compliance (e.g., PCI-DSS). The workflow guides users through deploying managed rule sets, creating custom rate-based logic, and minimizing false positives.

Learn how to implement Runtime Application Self-Protection (RASP) agents for Java and Python web applications. This skill covers deploying OpenRASP, detecting OWASP Top 10 attacks (SQLi, XSS, RCE), configuring security policies, and integrating real-time security alerts with SIEM platforms for comprehensive defense in depth.

This skill details how to execute HTTP Parameter Pollution (HPP) attacks. HPP exploits differences in how web applications and Web Application Firewalls (WAFs) process duplicate parameters within a single request (e.g., query strings or POST bodies). It is crucial for penetration testing to bypass input validation, WAF rules, and uncover parameter parsing inconsistencies in APIs and web forms.

This tool performs comprehensive security testing on SOAP web services. It analyzes WSDL definitions to identify available methods and then tests for critical XML-related vulnerabilities, including XXE, XPath injection, XML bombs, and WS-Security bypass. It is designed for automated penetration testing of enterprise-level SOAP APIs.

This comprehensive guide provides a detailed methodology for performing security testing on web applications that handle email sending (e.g., contact forms, password resets, newsletters). It focuses on identifying CRLF/SMTP header injection vulnerabilities, guiding users on how to check if attackers can manipulate email headers, inject custom content, or abuse forms for spam relay during a penetration test.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

This skill generates ultra-minimalist, editorial-style web interfaces using a warm monochrome palette and flat bento grids. It enforces strict design constraints, avoiding generic fonts, heavy shadows, and clichéd copy. Ideal for creating premium, document-like workspace platforms with bespoke typography, muted pastel accents, and meticulous structural whitespace.