Skill UI

Expert guidance for using ffuf in authorized web penetration testing: content discovery, subdomain and parameter fuzzing, authenticated raw requests, auto-calibration, filtering, and result analysis.

This skill helps developers create highly focused, folder-specific documentation (`CLAUDE.md` and `AGENTS.md`). It systematically analyzes all files in a target directory to extract project purpose, operational constraints, naming conventions, and critical decisions. This deep context ensures that future AI agents (like Claude or Codex) operate with localized knowledge, preventing them from relying on global, generalized instructions and improving their accuracy in that specific domain.

Learn pragmatic fp-ts patterns for handling errors as values with Either and TaskEither, replacing try/catch spaghetti in TypeScript validation and domain logic.

A portable discipline for type safety at the network edge of React apps. It establishes a single typed API client as the fetch boundary, enforcing parse-don't-validate rules to transform wire JSON into trusted domain types. This approach normalizes errors and uses branded identifiers to prevent silent bugs, ensuring untyped data never escapes the boundary.

Design and review Haskell code: advanced type systems, pure domain logic, parsing with Megaparsec/Aeson, STM and async concurrency, Cabal/Stack builds, and measured performance tuning.

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS, SharePoint, Exchange, and other Windows-based services. This skill guides authorized security assessments to detect exposed NTLM authentication headers, parse Type-2 challenges, and extract internal domain, computer names, and other juicy details for reconnaissance.

This skill enables security professionals to identify subdomain takeover vulnerabilities by enumerating subdomains, analyzing DNS records, and verifying unclaimed third-party resources. It is used in authorized security assessments to find high-value targets like GitHub Pages, GitLab Pages, or S3 buckets that can be exploited to serve malicious content under a trusted domain.

This skill extracts up to 50 highly relevant, SEO-friendly keywords and tags from any given text. It is designed to identify core topics, domain terminology, and potential search phrases, formatting them into a strict, comma-separated list suitable for metadata generation, tagging, or search engine optimization (SEO). Use it whenever you need to optimize content for search engines.

This skill covers setting up infrastructure for fine-tuning Large Language Models (LLMs) using techniques like QLoRA, LoRA, and full fine-tuning. It includes configuring distributed training with DeepSpeed or FSDP, utilizing frameworks such as Hugging Face TRL and Axolotl, and implementing alignment methods like RLHF and DPO. Suitable for domain-specific model adaptation and production deployment.

Add and verify a Mailtrap sending domain: publish SPF, DKIM and DMARC records, troubleshoot DNS propagation, automate setup via API and DNS provider APIs, and complete compliance for live email sending.

This skill provides comprehensive guidance on Makepad 2.0's Domain Specific Language (DSL) syntax for building UI code. It covers key rules like property assignment, named instances, merge operators, and registration patterns. Use this when developing or debugging Makepad applications to understand the runtime script_mod! macro and Splash scripting language.

This skill provides a comprehensive framework for mastering microservices architecture patterns. It covers critical aspects of building robust, distributed systems, including defining service boundaries (Domain-Driven Design), managing inter-service communication, handling distributed data transactions, and implementing various resilience patterns (e.g., circuit breaker, circuit breaker). It is essential for large-scale system decomposition.