Skill UI

A comprehensive, expert-level playbook covering XML External Entity (XXE) vulnerabilities. This guide details advanced attack techniques across multiple contexts, including SOAP, REST, SVG, and Office files. Key topics covered include blind detection, out-of-band (OOB) data exfiltration, local file reading (e.g., /etc/passwd), and chaining XXE to achieve SSRF or RCE.

MockHunter is an advanced skill designed to audit live web pages, providing a comprehensive reality check on visible data. It analyzes every element to determine its true source: whether it is REAL (from the database), MOCK (simulated data), LLM-generated, HARDCODED, BROKEN (broken endpoints), or UNKNOWN. Ideal for auditing AI-generated UIs or reviewing proof-of-concept MVPs before customer sign-off.

This skill provides a mechanism to execute TypeScript scripts using tsx, enabling fetching and streaming responses from external HTTP endpoints. It is designed for users who need a lightweight Node.js helper utility to manage simple network API calls, making it ideal for rapid integration and data fetching tasks.

This CLI alias functions as a command for gracefully canceling an active PUA loop, mirroring the functionality of the Claude Code `/pua:cancel-loop` command. It cleans up loop state and worktree references, ensuring the cancellation event is recorded. It also safely manages configuration files, preserving unknown fields in `~/.pua/config.json`.

This utility serves as a Command Line Interface (CLI) alias for managing 'flavor' profiles within AI code environments (like Claude Code). It allows users to set or select specific configuration flavors in the ~/.pua/config.json file. Crucially, it is designed to safely update the configuration by preserving any unknown fields, ensuring no unrelated settings are accidentally overwritten.

This utility serves as a command-line alias for invoking the Claude Code `/pua:kpi` function. It loads necessary configurations (pua-pro) to generate comprehensive Key Performance Indicator (KPI) or performance report cards. It manages configuration files by updating `~/.pua/config.json` while preserving unknown fields and ensuring the directory structure exists.

This tool functions as a Command Line Interface (CLI) alias for implementing the specific 'pua:mama' protocol within advanced coding models like Codex or Claude Code. It loads and enforces a structured 'mama skill/protocol,' maintaining rigorous verification standards while adjusting the visible narrative style to a specific 'Chinese-mom nagging mode.' It manages configuration by interacting with `~/.pua/config.json`, ensuring existing user fields are preserved.

This utility serves as a Codex CLI alias, mapping specifically to the Claude Code `/pua:offline` command. It enables offline operation mode for developer tools by updating the user's configuration file (~/.pua/config.json). Use this for developers needing to simulate or operate in environments with limited connectivity, ensuring continued access to code assistance features.

This alias serves as a dedicated CLI command for Codex, simulating the core functionality of the Claude Code `/pua:on` command. It enables 'PUA always-on mode' by managing the `~/.pua/config.json` file. This utility is essential for maintaining continuous operational readiness and managing coding assistant feedback cycles.

This alias serves as a specialized Codex CLI interface for implementing the P7 protocol, mimicking the workflow of a P7 senior engineer. It enforces a highly structured development cycle: detailed planning, robust implementation, mandatory self-review (via three critical questions), and final, verifiable completion markers. Ideal for complex coding tasks requiring maximum rigor and accountability.

This CLI alias serves as a system maintenance tool for PUA agent state. It scans for stale PUA agent data, identifying and safely removing only confirmed orphan records to maintain system integrity. It also manages configuration files, ensuring unknown fields are preserved when updating the primary config JSON.

This CLI alias executes a comprehensive teardown protocol for PUA agents, designed for development environments. It safely releases all active agent and loop states, ensuring a clean system reset. It automatically manages configuration files like ~/.pua/config.json, preserving unknown fields while providing reliable, evidence-based cleanup.