Skill UI

A powerful technique used when full XSS is blocked by CSP, sanitizers, or WAFs, but HTML injection is possible. It leverages unclosed HTML tags (like <img> or <link>) to capture and exfiltrate sensitive page data (CSRF tokens, session IDs, form values) by forcing the browser to include the subsequent content in a request URL.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A specialized Codex CLI alias designed to check the operational status of the PUA agent or team. This tool reports current active states, corresponding Process IDs (PID), Time To Live (TTL), and identifies stale or inactive records. It is primarily used for system debugging and monitoring agent health via the command line.

This specialized agent allows applications to programmatically join, monitor, and leave live video conferences. It reads real-time events visible to the current identity, such as participants joining/leaving, speaking, chatting, and screen sharing. It is ideal for querying what happens during an active meeting or identifying the correct active meeting IDs. Note: It does not handle post-meeting tasks like transcriptions or recordings.

This skill guides users on creating highly optimized, high-volume content (like directory pages, templates, and comparisons) using data and patterns. It teaches core principles of programmatic SEO, ensuring each page provides unique value, matches search intent, and avoids Google's thin content penalties, enabling scalable growth.

This skill provides comprehensive guidelines for building a clean, minimalist, and highly usable design system. It covers foundational elements including typography, structured color tokens, spacing grids, and strict adherence to WCAG 2.2 AA accessibility standards. The output is structured for immediate implementation by engineers and designers, ensuring consistency and clarity across all product screens.

A comprehensive technical and aesthetic guide for building a modern, high-contrast user interface. This system defines foundational constraints, including color tokens, typography scales, and spacing grids, while rigorously ensuring WCAG 2.2 AA accessibility standards. It provides structured rules for component states, interactions, and development workflow to ensure consistency and superior user experience.

A comprehensive design system guide for building modern, high-density, and data-rich dashboards. It establishes foundational rules covering dark-themed aesthetics, modular grids, typography, color tokens, and rigorous accessibility standards (WCAG 2.2 AA). Ideal for engineers and designers building complex cloud-platform interfaces for optimal productivity and data analysis.

This skill summarizes the current conversation into a structured handoff document, ideal for passing work to a fresh AI agent or starting a new session. It avoids content duplication by referencing existing artifacts (PRDs, plans, issues, commits) using their paths or URLs, ensuring the receiving agent has a concise and actionable overview of the project's state, open decisions, and next steps.

This skill provides comprehensive tools and methodologies for working with the Brain Imaging Data Structure (BIDS) standard. It is essential for organizing, validating, querying, and converting complex multi-modal neuroscience and biomedical datasets (including MRI, EEG, MEG, PET, etc.). Use this when setting up BIDS-compliant directory structures, ensuring data integrity before publication, or converting raw DICOM scans into standardized formats.

This guide details how to deploy and manage web projects on Vercel using token-based authentication via the CLI. It provides comprehensive steps for locating and setting the VERCEL_TOKEN, identifying project IDs, and executing deployment commands (including linking and direct deployment) without relying on interactive login.

An internal utility designed for deep investigation of JavaScript or TypeScript stack traces. It analyzes complex runtime errors, providing specific checks for asynchronous boundaries, module resolution issues, JSON parsing failures, and type contract violations. It aids developers by generating minimal reproduction commands and identifying potential patch targets for robust error handling.