Skill UI

This advanced skill specializes in analyzing complex mail-related abuse scenarios, including OAuth consent flows, forwarding rule exploitation, shared mailbox access, and transport rule manipulation. It is used in forensic investigations to trace message artifacts, identify persistence mechanisms, and prove privilege escalation or data exfiltration following a compromise.

This specialized skill is designed to trace and prove the complete flow of OAuth or OIDC authentication, acting as a downstream specialization after an orchestrator has established sandbox assumptions. It meticulously tracks the entire journey—from initial redirect and parameter handling (state, nonce, PKCE) through token exchange, claim mapping, and ultimately to the point where an identity or privilege is accepted by the backend service. Use this when the critical task is proving the security and mechanics of the authentication chain.

A comprehensive security assessment skill for identifying vulnerabilities in federated identity systems, including SAML, OIDC, and OAuth 2.0 flows. It covers common misconfigurations, such as signature tampering, PKCE failures, redirect URI issues, and token confusion, ensuring robust SSO implementation.

A comprehensive guide for embedding OpenMed-powered tools into Electronic Health Records (EHRs) like Epic or Cerner. It covers the entire SMART on FHIR workflow, including OAuth2 PKCE authorization, granular scoping (e.g., patient/DocumentReference.rs), secure token handling, and processing clinical notes locally on-device for de-identification and Named Entity Recognition (NER).

Creates and edits Power Apps Canvas Apps via the Canvas Authoring MCP coauthoring session, handling staged experience design, targeted and partitioned edits, multi-screen changes, responsive layout, and compile-error convergence.

This skill configures the Canvas Authoring MCP server for Power Apps coauthoring sessions. It extracts parameters from the studio URL and connects the server to the specific app session. It handles authentication flows and checks for required .NET SDK versions. Use this before editing canvas apps to ensure MCP connectivity.

A read-only skill designed to connect with Microsoft Outlook (Office 365/Exchange) via OAuth2. It allows users to read, search for, and download emails and their attachments (such as NDAs, contracts, or documents). Ideal for automating workflows that require accessing email content, performing keyword searches, or chaining email data into other specialized skills for review and analysis.

Implements federated sign-in using Amazon Cognito as the central user pool. This skill allows developers to integrate various external Identity Providers (IdPs) such as Google, Facebook, Apple, and Microsoft (OIDC/Entra ID) for Single Sign-On (SSO). It automates the setup of Cognito User Pool Domains, OAuth configurations, and handles the complex identity synchronization process, ensuring seamless user experience while maintaining centralized user management.

This skill provides a structured methodology for authorized security assessments of REST, GraphQL, WebSocket, and SOAP APIs. It covers discovery, authentication flaws (JWT/OAuth), authorization issues (BOLA/IDOR), rate-limit testing, and CI/CD integration. Includes 10-phase workflow from reconnaissance to reporting, utilizing tools like Entropy, Burp, and FireTail for comprehensive vulnerability identification.

Automate Asana operations including tasks, projects, sections, teams, and workspaces through Composio's Asana toolkit via Rube MCP. Requires Rube MCP connection and Asana OAuth setup. Supports CRUD operations with parallel request capabilities for efficient bulk operations.

Master secure authentication and authorization implementation using industry-standard patterns. Covers user login systems, REST/GraphQL API security, OAuth2, SSO, session management, and RBAC design. Includes guidance on token lifecycle, secrets storage, and threat modeling to protect resource access boundaries effectively.

This Python SDK enables developers to manage Azure Bot Service resources programmatically. It supports creating, updating, and deleting bots, configuring channels like Microsoft Teams and Web Chat, and managing OAuth connections. Ideal for automating bot lifecycle management and integrating conversational AI into enterprise applications using Azure infrastructure.