Skill UI

This skill empowers you to implement secure backend coding practices, focusing on input validation, authentication, and API security. It covers vulnerability prevention, defensive programming, and secure architecture implementation. Ideal for building security-first applications that resist common attack vectors like SQL injection, XSS, and CSRF. Includes expertise in database protection, secret management, and HTTP security headers.

This skill guides authorized security assessments and bug bounty engagements. It covers scope definition, evidence collection, impact validation, and reporting. It enforces mandatory authorization checks before testing to ensure legal compliance and safety. It helps organize the workflow for finding and reporting vulnerabilities responsibly.

This skill helps developers review security practices and identify vulnerabilities in code. It covers secrets management, input validation, SQL injection prevention, authentication, and XSS protection. Use it when implementing authentication, handling user input, or creating API endpoints to ensure secure development.

Configure CDNs like CloudFront, Cloudflare, and Fastly for global content delivery optimization. Includes setting up caching, invalidation, security protocols, and infrastructure-as-code deployment using Terraform and AWS CLI. Essential for reducing latency and offloading origin server traffic.

A comprehensive skill for offensive security testing of cloud IAM across AWS, Azure, and GCP. It guides users through credential identification, read-only validation, and privilege escalation techniques, emphasizing authorized use only.

Audit authorized codebases for exploitable vulnerabilities using scoped reconnaissance, adversarial review, validation, and structured reporting. Use for security reviews, pen-testing, and vulnerability hunting in web apps, APIs, services, CLI tools, libraries, and daemons.

This skill assists in validating application configurations through schemas, tests, and security checks. It ensures environment consistency and error-free setups. Use it for configuration management workflows, best practices, and checklists. It helps create comprehensive validation strategies to maintain secure and reliable system configurations across all environments.

This skill enables reviewing defined code diffs from correctness, authorization, and performance perspectives. It supports bounded multi-agent review when authorized, ensuring findings are reproduced centrally. Users must pin repository paths and intended behavior. It does not install orchestration engines but provides a structured procedure for code quality assurance and security validation without overstepping user authority.

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns. Provides guidance on CSP configuration, safe DOM manipulation, input validation, clickjacking protection, and secure redirects.

This workflow orchestrates review, tests, commits, and branch pushes using parallel agents to ensure changes move through validation into a pull request. It enforces repository policies, branch protection, and security checks before merging. Ideal for completed implementation work requiring strict validation, automated testing, and compliance with maintainer guidelines without bypassing safeguards.

This skill enables identification and testing of HTML injection vulnerabilities in web applications to assess security risks. It involves using tools like Burp Suite and understanding HTTP structures. Strictly for authorized security assessments, defensive validation, or educational purposes in controlled environments.

Guides authorized security testers through hunting Local File Inclusion, Remote File Inclusion, and Path Traversal vulnerabilities, including blind confirmation, PHP filter-chain RCE, log poisoning, wrappers, and safe OOB validation.