Skill UI

This guide provides a systematic framework for authorized email security reviews. It covers advanced phishing analysis, including deep dives into email headers, assessing SPF/DKIM/DMARC compliance, identifying Business Email Compromise (BEC) patterns, and researching mailbox token abuse. It is essential for incident response, threat intelligence, and security architecture review.

This skill extracts critical patient metadata (PHI) from DICOM headers using pydicom, and recursively pulls structured report narrative text from DICOM-SR content trees. It is essential for ingesting medical images into NLP pipelines, enabling subsequent de-identification and clinical text analysis.

This technique segments unstructured clinical documents (such as HPI, PMH, and A&P sections) into contextually rich, canonical chunks. This is crucial for improving the precision of downstream NLP tasks like Named Entity Recognition (NER) and de-identification. By identifying and normalizing headers and mapping them to LOINC codes, the system ensures that the source context (e.g., historical vs. active) is maintained, leading to significantly more accurate results.

Compiles an iOS Objective-C/Swift module into a flat device-slice .framework for a .ppmplugin bundle. Mac-only Xcode build, references React-Core headers only and never embeds React or uses CocoaPods. Leaves canonical ios/ sources untouched. Run after manifest generation and before plugin assembly.

This advanced skill translates complex legal documents—including contracts, deeds, agreements, and corporate formal texts—from any source language into publication-quality UK English. It is specifically designed to preserve all original .docx formatting, such as fonts, styles, headers, footers, and tables, ensuring the translated output is structurally accurate and fully usable for legal or business purposes.

This skill provides professional translation of legal documents, contracts, and formal agreements from any language into US English. It is designed to maintain the integrity of the original .docx formatting, including fonts, styles, headers, footers, and track changes. Use this whenever translating complex legal texts across domains such as M&A, IP, Real Estate, or corporate law, ensuring the output is publication-ready.

A comprehensive tool to inspect and configure critical HTTP security headers (such as CSP, CORS, X-Frame-Options) for modern web applications. It identifies security gaps, assesses cross-origin permissions, and guides users through hardening settings like cookie behavior, ensuring the site meets current industry security standards.

Drafting settlement letters requires choosing the correct legal footing (Open, WP, or WPSATC) to ensure the material is protected from disclosure while retaining necessary legal flexibility. This skill drafts the letter, applies the correct headers, and critically surfaces key exceptions (like the Unilever exceptions) where 'Without Prejudice' privilege may fail, ensuring the drafted document is legally sound for junior and in-house counsel.

Validates API requests based on method, URL, headers, body, auth, and query params. Provides concise verdicts with fixes for incorrect requests, asks targeted questions for ambiguity, and offers API documentation generation.

This skill empowers you to implement secure backend coding practices, focusing on input validation, authentication, and API security. It covers vulnerability prevention, defensive programming, and secure architecture implementation. Ideal for building security-first applications that resist common attack vectors like SQL injection, XSS, and CSRF. Includes expertise in database protection, secret management, and HTTP security headers.

A command-line utility to search and extract data from Burp Suite project files (.burp). It enables searching response headers or bodies with regex patterns, extracting security audit findings, and analyzing HTTP traffic. Requires Burp Suite Professional and a specific extension. Use sub-component filters to avoid large data dumps.

Authorized security testing skill for hunting web cache poisoning and password reset host-header injection. Maps CDN caching layers, probes unkeyed headers such as X-Forwarded-Host, and verifies cache HIT signals to confirm exploitable poisoned responses.