Skill UI

Guides security testers through identifying CDN caching layers, crafting deceptive static URLs, and exploiting path normalization and cache-key quirks to expose authenticated content via web cache deception attacks.

Harden serverless compute on AWS Lambda, Azure Functions, and Google Cloud Functions by enforcing least-privilege IAM roles, moving secrets into vaults, scanning dependencies, validating inputs, securing function URLs, and monitoring runtimes so injections, credential theft, and supply-chain threats are caught before deployment.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

A comprehensive pattern for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) in healthcare applications. It addresses adherence to major regulations like HIPAA and GDPR, covering data classification, implementing Row Level Security (RLS), robust auditing, and preventing data leakage across various system components (logs, errors, URLs).

A comprehensive tool and API wrapper for accessing, parsing, and analyzing research papers published on Hugging Face and arXiv. Users can input various URLs or IDs (e.g., arXiv ID) to retrieve structured metadata, full markdown content, and automatically link associated resources such as models, datasets, and application spaces. Ideal for researchers and developers needing structured access to cutting-edge AI knowledge.

A comprehensive tool for monitoring deployed URLs to detect performance, functional, or structural regressions. It is essential to run after major deployments, PR merges, or dependency upgrades, checking metrics like HTTP status, API health, and Core Web Vitals against established baselines.

This utility compresses verbose natural language notes, memories, and documents (like markdown files) into a highly dense format. By eliminating filler words, redundant phrases, and grammatical fluff, it significantly reduces the token count for large inputs. Crucially, it strictly preserves all technical content, including code blocks, inline code, URLs, file paths, and commands, ensuring technical accuracy while boosting AI processing efficiency.

Accelerates GitHub cloning, release/raw/archive downloads, and other resource access for Mainland China users by rewriting URLs through githubproxy.cc or fallback ghfast.top, with an optional URL converter script for quick adaptation.

This skill allows agents to persistently add external knowledge and conversational context to the OpenViking context database. It supports ingesting various resources (local files, URLs, repositories, directories) using 'add-resource', and storing rich, multi-turn conversation history as long-term memory using 'add-memory'. Use this when building a knowledge base, documenting projects, or ensuring conversation insights persist across sessions.

Command-line helper that pulls in URLs, local files, transcripts, podcasts, and YouTube links to deliver concise summaries or transcripts, with provider models and fetch fallbacks configurable for any workflow.

Deploy applications or static sites to Vercel instantly via a script that packages your project, auto-detects frameworks, uploads artifacts, and returns preview and claim URLs without requiring authentication.

This utility compresses natural language documents (notes, preferences, memory files) into a highly condensed, 'caveman-speak' format. Its primary function is drastically reducing input tokens for efficiency while meticulously preserving all technical substance, including code blocks, URLs, file paths, and markdown structure. Ideal for optimizing memory consumption when interacting with AI models.