Skill UI

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

This expert playbook covers advanced techniques for email header injection and authentication bypass. It details exploiting CRLF vulnerabilities in SMTP headers (e.g., BCC/CC injection, body control) and bypassing modern email security standards like SPF, DKIM, and DMARC. Essential for penetration testing of contact forms, email APIs, and password reset workflows.

A comprehensive playbook for advanced API security testing targeting GraphQL and REST APIs. It guides users through schema introspection, discovering hidden or undocumented fields, analyzing batching capabilities, and identifying authorization gaps (like IDORs). Essential for deep reconnaissance and identifying privilege escalation vectors.

An expert AI specializing in Slang shader programming for high-performance graphics and compute applications. This model excels at writing, reviewing, refactoring, and optimizing production-grade code for various graphics stages (vertex, fragment, compute, ray tracing, tessellation). It ensures cross-platform compatibility across major APIs (D3D12, Vulkan, Metal, OpenGL) and supports advanced concepts like generics, parameter blocks, and automatic differentiation. Use this skill when integrating shaders into C++ engines or requiring deep knowledge of low-level GPU pipelines.

A critical discipline for managing expenses when integrating paid AI or inference APIs. This guard treats dollar cost as a third complexity dimension, mandating the definition of cost contracts (max calls per run, max budget per run, max budget per day). It enforces best practices for bounding loops, retries, and fan-out, ensuring that code bugs cannot lead to unexpected overspending. Best practice requires configuring hard caps both in the code and at the provider dashboard for defense in depth.

This guide provides best practices for building flexible, maintainable, and scalable React components. It emphasizes using composition patterns and compound components to avoid 'boolean prop proliferation,' while also detailing advanced concepts in component architecture, state management, and modern implementation techniques (including React 19 APIs). Ideal for refactoring complex systems or designing reusable component libraries.

This skill allows users to generate complete songs, including vocals or pure instrumental tracks, using advanced AI APIs. By providing a structured JSON specification, you can define the desired style, mood, scene, and optional lyrics. Ideal for creating background music, theme songs, jingles, or full compositions for creative projects.

This guide provides comprehensive details on the OpenPitrix application management system within KubeSphere. It covers the entire application lifecycle, including managing app repositories (Repo), uploading and versioning templates (Application/ApplicationVersion), conducting review processes, and finally deploying/upgrading applications (ApplicationRelease). Use this skill when troubleshooting App Store interactions, understanding KubeSphere's backend APIs, or managing deployed workloads.

This skill acts as a literature-research assistant, orchestrating a Python CLI to interface with APIs like Semantic Scholar and arXiv. It enables users to search for academic papers by topic, retrieve detailed metadata, perform impact analysis using citation tracking, download PDFs, and extract text content. It streamlines the entire academic research workflow from initial discovery to deep reading.

This skill provides a demonstration of interacting with external APIs and services using various command-line tools (CLI). It showcases core automation patterns, including fetching API documentation details and listing messages using specific application CLIs, making it ideal for testing and learning API integration flows.

A powerful utility that queries multiple free APIs (Pexels, Pixabay, Internet Archive, etc.) in a single query. It retrieves normalized, license-tagged results for real-world, historical, or archival images, videos, and GIFs, making it a peer to local semantic search and generative media tools. Includes specialized scripts for fetching and judging audio.

A comprehensive guide to creating a robust API versioning strategy document. It helps service teams define consistent rules for evolving their APIs over time, covering versioning schemes (URL path, headers), lifecycle policies (Stable, Deprecated, Sunset), and classifying breaking changes. Essential for maintaining backward compatibility and managing API deprecation.