Skill UI

This skill provides an end-to-end workflow for creating a complete, local multimedia webpage project. Users only need to define the topic, target audience, visual style, and media preferences. The system automates the entire process, including requirement framing, content research, media acquisition (images, audio, video), code generation, project packaging, validation, and delivering comprehensive usage guides.

ccboard is a comprehensive TUI and Web dashboard designed for monitoring and managing Claude Code usage. It provides unified visibility into token consumption, detailed cost tracking, session history, and the real-time status of Model Context Protocol (MCP) servers. Use it to analyze usage patterns, manage configurations, and ensure cost efficiency across all projects.

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.

A specialized, downstream skill designed for forensic analysis within a confined sandbox environment, particularly for CTF challenges. It guides the user to inspect the full stack behavior, including API interactions, server routing, browser state (cookies, local storage), and asynchronous worker processes. Use this skill to trace complex, end-to-end request flows, debug authentication/session leaks, or diagnose discrepancies between frontend UI and backend enforcement.

This skill provides expert capabilities for professional HTML development, emphasizing semantic markup, WCAG accessibility, and modern HTML5 standards. Use it to build structurally sound, accessible, and responsive web pages, incorporating complex forms, multimedia (SVG, Canvas), and adhering to industry best practices.

A comprehensive, systematic workflow for reverse engineering client-side JavaScript. It guides users through five stages: Observation, Capture, Rebuilding, Patching, and Deep Dive. Applicable for locating API signatures, analyzing encryption parameters, tracking runtime function calls, and reconstructing complex web environments locally for evidence collection and reproduction. Utilizes advanced tools like jshookmcp and various js-reverse_* utilities.

This mode defines an autonomous, senior-level AI agent capable of resolving complex tasks from start to finish with minimal human supervision. It operates by strictly verifying every claim against real evidence (live web search, codebase, available tools). The agent prioritizes action over questioning, only interrupting the user for irreversible actions, genuine dead-ends, or critical ambiguities, ensuring maximum efficiency in hands-on engineering and operational workflows.

This skill generates browser-playable video assets for web pages by acting as an adapter for the OpenRouter API. It manages the entire asynchronous video generation lifecycle, including submitting the job, polling the status, downloading the final MP4 file, and outputting a structured media manifest for web integration. Use this when a local web video asset is required and configuration details are provided.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

A comprehensive, multi-step framework for conducting systematic QA testing on web applications. This guide covers scope detection (diff-aware), tiered testing depth (Quick, Standard, Exhaustive), detailed issue taxonomy (Functional, Visual, UX, etc.), structured bug documentation, and the critical fix-and-verify loop, ensuring high code quality throughout the development cycle.

This skill guides users on deploying OpenMed models completely on-device for maximum privacy and edge computing. It details running workflows using three backends: MLX (Apple Silicon), CoreML (iOS/macOS), and ONNX/WebGPU (cross-platform/browser). The process involves converting, optionally quantizing, and running models locally, ensuring PHI never leaves the host device.

This skill acts as the central orchestrator for multi-stage, complex penetration testing engagements. It guides the entire process—from initial reconnaissance (asset mapping, data leakage hunting) through boundary penetration (web exploits, supply chain attacks) to post-exploitation planning. It is essential for planning end-to-end attack paths, coordinating specialized sub-skills, and ensuring structured reporting of findings.