Skill UI

Generates a comprehensive and actionable UX research plan for any product feature or question. This skill covers the entire research lifecycle, including defining objectives, selecting methodology (e.g., usability testing, interviews), creating participant screeners, writing discussion guides, and structuring a synthesis framework. Ideal for product managers and UX researchers needing a structured approach to validate assumptions and drive design decisions.

This skill automates end-to-end (E2E) functional testing for Android applications. It parses an XML specification defining a multi-step user 'journey.' The executor sequentially performs interactive UI actions (taps, swipes, text input) using ADB commands and verifies application states through assertions. It outputs a detailed, standardized JSON report, making it ideal for robust CI/CD integration and quality assurance.

This skill acts as a central router, helping users determine the correct specialized skill or workflow to tackle development challenges. It guides the entire software development lifecycle, from initial idea refinement (Idea -> Ship) and prototype testing, to managing complex multi-session builds and handling incoming bugs via triage. It is essential for navigating the vast ecosystem of AI coding agents.

This workflow is designed to rigorously stress-test any plan, design, or architectural concept before implementation. It acts as a demanding interviewer, asking deep, cascading questions one at a time to identify hidden dependencies, resolve ambiguities, and ensure comprehensive coverage. Use this when you need to validate a concept against all possible failure modes or explore every corner of a complex system design.

Use Mailtrap Email Sandbox to capture and inspect outbound emails without sending them to real recipients. This is crucial for development, staging, and CI/CD environments. It allows developers to test email content, headers, attachments, and spam scores using dedicated APIs, SMTP settings, or SDKs, ensuring mail integrity before deployment. Ideal for automation and rigorous quality checks.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

This guide details the architecture and implementation of a ransomware-resilient backup strategy, adhering to the extended 3-2-1-1-0 methodology. It covers critical steps including defining RPO/RTO, establishing immutable/air-gapped copies, isolating backup credentials from the production domain, and automating periodic restore testing. Use this framework to ensure business continuity against sophisticated cyberattacks.

This skill demonstrates how to exploit the Windows Data Protection API (DPAPI) to extract sensitive, encrypted secrets, including saved user credentials, browser logins, RDP passwords, and vault data. It covers online, offline, and domain-wide decryption techniques, essential for post-exploitation red team engagements and penetration testing.

ROADtools is a comprehensive offensive toolkit for Microsoft Entra ID (Azure AD). It consists of ROADrecon for offline directory enumeration (users, groups, roles, policies) and roadtx for advanced token acquisition and exchange. It is designed for authorized red-teaming and penetration testing to discover attack paths and pivot tokens across various Microsoft resources.

This skill simulates advanced red-teaming techniques targeting Microsoft Entra ID's OAuth 2.0 device-code flow and illicit consent mechanisms. It demonstrates how attackers can steal access and refresh tokens, bypass Multi-Factor Authentication (MFA), and pivot across various Microsoft 365 services. It is designed for authorized security testing to validate token protection and conditional access policies.

Automate security regression testing for Large Language Model (LLM) applications by integrating Promptfoo and DeepTeam into CI/CD pipelines. This skill enforces a critical security gate, automatically testing endpoints against OWASP LLM Top 10, OWASP Agentic threats, and common jailbreaks/prompt injections. It ensures that security patches do not regress over time due to prompt or model changes, providing continuous risk monitoring.

Stratus Red Team is an open-source tool designed for detection engineering and purple teaming. It programmatically detonates granular, documented offensive techniques across major cloud platforms (AWS, Azure, GCP, and Kubernetes). It validates existing security detections (like CloudTrail/GuardDuty) by simulating real attacker activity in a controlled, reversible environment. The tool ensures deterministic lifecycles, guaranteeing that all created resources are cleaned up after testing.