Skill UI

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation, covering tool selection, configuration, and authorized usage.

This skill provides a practical guide for comprehensive accessibility validation of web applications. It helps users test compatibility with various screen readers, validate ARIA implementations, and debug issues related to assistive technologies. Ideal for ensuring that web forms, dynamic content, and navigation are fully usable by people with disabilities.

This skill performs Static Application Security Testing (SAST) to detect code vulnerabilities across multiple programming languages and frameworks. It helps identify injection flaws, hardcoded secrets, and security policy violations before deployment. Suitable for code reviews, compliance checks like OWASP, and legacy code assessment. Requires source code access and is not for runtime testing.

Systematic methodology for using Shodan as a reconnaissance tool in authorized penetration testing, covering search queries, vulnerability discovery, IoT scanning, SSL analysis, and Python automation.

This skill enables comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws and validate input sanitization. It supports detection of in-band, blind, and out-of-band attack vectors. Users can demonstrate exploitation techniques and extract data for authorized security testing purposes only. Requires explicit written permission before execution.

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. Covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for various DBMS.

Squirrel is an advanced, full-cycle AI coding skill designed to guide software development from concept to production. It automatically detects the current project state (greenfield, in-progress, or mature) and adapts an 8-phase engineering pipeline. This comprehensive workflow covers planning, building, rigorous testing, bug hunting, code polishing, documentation, and deployment readiness, ensuring high-quality, maintainable results.

This skill enables comprehensive security assessments of SSH services. It covers enumeration, credential attacks, vulnerability exploitation, and configuration auditing using tools like Nmap, Hydra, and Metasploit. Suitable for authorized penetration testing and security research to identify weaknesses in SSH implementations.

Expert guide for building durable distributed systems with the Temporal Go SDK, covering deterministic workflow rules, mTLS worker configuration, advanced patterns, and testing/observability strategies for production workloads.

This skill provides production-ready Terraform module patterns for AWS, Azure, and GCP infrastructure. It helps build reusable infrastructure components, standardize cloud resource provisioning, and implement infrastructure as code best practices. Users can create multi-cloud compatible modules and establish organizational Terraform standards. Includes guidance on module structure, variables, outputs, and testing with Terratest.

Master AI-powered test automation using modern frameworks like Playwright and Selenium. Implement self-healing tests, CI/CD integration, and quality engineering strategies. Covers TDD, performance testing, and cross-platform validation for scalable software delivery.

This skill reviews generated or changed test code against universal testing rules before deployment. It prevents common failure modes like mock-heavy unit tests, near-duplicate test bodies, and tests that re-verify the framework. It enforces best practices such as testing behavior over implementation, justifying mocks at system boundaries, and ensuring every test has a clear justification. Use it when reviewing diffs, new test files, or when writing new tests to ensure high-quality, maintainable test suites.