Skill UI

This comprehensive checklist guides users through critical operational readiness steps for a ClickHouse production deployment. It covers server tuning (config.xml), schema design best practices, robust backup strategies (S3), detailed monitoring setup (Prometheus/Grafana), security hardening, and application integration verification. Use this document before go-live, during major upgrades, or when auditing production systems to ensure maximum stability and performance.

The skill generates professional diagrams (flowcharts, architecture, UML, ERD) using the native draw.io desktop CLI. It creates editable .drawio XML files and exports them to common formats like PNG, SVG, PDF, and JPG. Ideal for visualizing complex systems, data flows, or component relationships.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

Create, edit, and manage Lark slides. Supports reading XML presentation structures, planning slides, rendering visual elements like charts and whiteboards, and applying custom templates.

This skill guides the systematic migration of Java enterprise code from the legacy `javax.*` namespace to the modern `jakarta.*` namespace. It is essential for developers upgrading applications to Jakarta EE 10 or running on Tomcat 11+. The process covers updating imports, modifying dependency coordinates in build files (pom.xml), and adapting web deployment descriptors.

Use this comprehensive skill to generate, manipulate, and export draw.io diagrams. It converts diagrams into native .drawio files and allows exporting to high-quality formats like PNG, SVG, and PDF. Crucially, it embeds the editable XML data, ensuring the resulting diagrams are professional, scalable, and easily integrated into documents.

This router serves as the main entry point for comprehensive injection testing. It helps security professionals classify dangerous input flows—such as XSS, SQLi, SSRF, XXE, etc.—by determining the final sink or interpreter (e.g., browser context, database, XML parser, shell). Use it when unsure which specific injection vector to prioritize.

This skill provides a comprehensive playbook for testing the security of SAML-based Single Sign-On (SSO) solutions. It focuses on validating assertion trust by checking signature coverage, audience and recipient restrictions, handling of Assertion Consumer Service (ACS), and identifying potential XML parsing weaknesses or IdP/SP confusion flaws. Use this when evaluating enterprise authentication systems for critical security vulnerabilities.

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

This skill provides comprehensive capabilities for working with Microsoft Word documents (.docx). It supports full document lifecycle management, including text extraction (via pandoc), raw XML manipulation, creating new documents, and complex editing. Specialized workflows are available for redlining, handling tracked changes, managing comments, and preserving intricate formatting, making it ideal for professional, academic, and business document processing.

A comprehensive skill for handling PowerPoint (.pptx) files. This includes text extraction, deep content analysis via raw XML access (comments, notes, layouts, themes), and programmatic creation of new presentations from scratch. It guides users through design principles, color theory, and structured document generation workflows.

This meta-skill scans a target codebase path, intelligently determines the most appropriate architectural diagram type (e.g., sequence, component, class), and concurrently generates the diagram in two standardized formats: PlantUML source code and draw.io XML. Finally, it composes these deliverables into a cohesive architecture document (DOCX). Ideal for creating comprehensive onboarding guides or technical RFCs that require both text-friendly and highly editable views of the system architecture.