Skill UI

This skill enables structured AI red team exercises to evaluate model resilience against jailbreaks, data exfiltration, and harmful outputs. It helps identify exploitable failure modes before attackers do, suitable for new LLM features, third-party model evaluation, and compliance audits. Includes adversarial prompt libraries and automated testing scripts for security assessments.

Enables agents to perform authorized security assessments, blue team exercises, and penetration testing on AI products, agents, and infrastructure. Uses first-principles reasoning to identify vulnerabilities like prompt injection and tool abuse, generating evidence-based security reports without relying solely on payload libraries.

A comprehensive guide to building production-ready Apache Airflow Directed Acyclic Graphs (DAGs). This skill covers best practices for operators, sensors, testing, deployment, and designing robust data pipelines. Use this when orchestrating complex workflows, managing ETL processes, or ensuring reliable batch job execution in a production environment.

This skill enables the analysis of anti-debugging, obfuscation, and anti-tamper mechanisms within protected binaries. It is designed for authorized security assessments, malware analysis, and reverse engineering tasks. Users must confirm explicit written permission before proceeding to ensure legal compliance and ethical usage within defined scopes such as CTFs or penetration testing.

This skill provides a structured methodology for authorized security assessments of REST, GraphQL, WebSocket, and SOAP APIs. It covers discovery, authentication flaws (JWT/OAuth), authorization issues (BOLA/IDOR), rate-limit testing, and CI/CD integration. Includes 10-phase workflow from reconnaissance to reporting, utilizing tools like Entropy, Burp, and FireTail for comprehensive vulnerability identification.

This skill specializes in creating realistic mock services for development, testing, and demonstration purposes. It simulates real API behavior to enable parallel development and facilitate thorough testing. Use it for building mock APIs for frontend or integration testing, simulating partner APIs, creating demo environments, and validating API contracts before backend completion. Avoid using for production systems or security testing.

Converts existing software into reusable serverless Apify Actors packaged as Docker images with JSON input/output schemas, local testing, and deployment workflows.

This skill provides comprehensive techniques for penetrating AWS cloud environments. It covers IAM enumeration, privilege escalation, SSRF attacks on metadata endpoints, S3 exploitation, and Lambda code extraction. Designed for authorized security assessments and red team operations to identify vulnerabilities and persistence mechanisms.

Expert skill for managing AWS resources as code using SST v4 (Ion) and Pulumi. Covers authoring, testing, deploying, and troubleshooting infrastructure stacks. Includes conventions for Node runtime control, Output interpolation, and stateful migrations to ensure production stability.

This SDK enables running Playwright tests at scale using cloud-hosted browsers integrated with Azure portal reporting. It supports TypeScript configuration, Microsoft Entra ID authentication, and CI/CD integration for GitHub Actions and Azure Pipelines. Ideal for enterprise testing workflows requiring managed browser infrastructure and centralized reporting.

This .NET SDK enables developers to manage Microsoft Playwright Testing workspaces through Azure Resource Manager. It supports provisioning, quota management, workspace creation, updates, and name availability checks. It is designed for infrastructure management rather than test execution, allowing teams to automate cloud resource lifecycle operations for Playwright testing environments securely.

This skill prevents AI coding agents from entering ineffective repair loops by establishing a bounded repair contract. It uses stable failure fingerprints, a three-attempt budget, and real-path verification to ensure progress. When fixes do not change observable states, it mandates shifting root-cause strategies rather than retrying. Includes rollback controls and negative testing to validate actual system behavior over agent claims.