Skill UI

This skill focuses on identifying clickjacking vulnerabilities where malicious sites overlay transparent iframes over legitimate pages to trick users into unintended actions. It involves checking security headers like X-Frame-Options and CSP, verifying if sensitive actions can be triggered via framing, and ensuring proper authorization before testing. It is strictly for authorized security assessments and bug bounty programs.

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS, SharePoint, Exchange, and other Windows-based services. This skill guides authorized security assessments to detect exposed NTLM authentication headers, parse Type-2 challenges, and extract internal domain, computer names, and other juicy details for reconnaissance.

Assess on-premises Microsoft SharePoint Server farms (2013/2016/2019/Subscription Edition) during authorized red-team or bug-bounty work: fingerprint versions via response headers, map exposed endpoints such as ToolPane.aspx and Authentication.asmx, and prioritize permanently unpatched legacy CVEs.

Use Mailtrap Email Sandbox to capture and inspect outbound emails without sending them to real recipients. This is crucial for development, staging, and CI/CD environments. It allows developers to test email content, headers, attachments, and spam scores using dedicated APIs, SMTP settings, or SDKs, ensuring mail integrity before deployment. Ideal for automation and rigorous quality checks.

This skill generates complete, import-ready Postman Collection v2.1 JSON files from natural language API descriptions or cURL commands. It parses headers, authentication, body, and query parameters to create structured API collections and companion environment files. Ideal for API testing and development workflows.

Configure nginx and Traefik as reverse proxies with TLS termination, path-based routing, rate limiting, security headers, compression, and certificate automation.

Add distributed rate limiting to API routes, middleware, and edge functions with @upstash/ratelimit and Upstash Redis. Covers sliding window, fixed window, and token bucket algorithms, per-identifier keys, and returning 429 with Retry-After headers.

This skill enables developers to deploy frontend and full-stack applications on Vercel efficiently. It covers setting up preview environments for pull requests, configuring edge functions, managing environment variables across different stages, and implementing production guardrails. Includes integration with GitHub Actions for automated CI/CD pipelines and security best practices like custom domains and headers.