Skill UI

Read and edit Google Slides through authenticated connectors or reviewed API integrations, applying scoped changes with read-back verification to keep presentations accurate and avoid overwriting collaborator work.

A skill for identifying and exploiting business logic vulnerabilities in web applications, focusing on payment flows, verification bypasses, rate-limiting issues, and unprotected internal surfaces. Requires explicit authorization for testing.

Offensive security skill for hunting MFA and 2FA bypass flaws: workflow skipping, OTP replay, response tampering, prefix-oracle guessing, and race conditions on verification endpoints. Requires written authorization.

A security assessment skill for identifying WebSocket vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), message tampering, handshake-layer attacks, and socket.io authorization bypasses. Requires explicit written authorization before testing. Includes reconnaissance, endpoint discovery, and exploit verification techniques for authorized security assessments.

Hunts reflected, stored and blind XSS during authorized web security assessments: reflection verification, unique canary payloads, context-based injection and out-of-band confirmation.

This skill acts as a ruthless business-idea pathologist to validate concepts before development. It employs a kill-list check, five hard filters (pain, money, demand, legal, moat), a free-AI one-prompt test, and live ad-market verification. The output provides a clear verdict (DEAD or SURVIVED) with a named kill-pattern and evidence, helping founders avoid wasting resources on unviable projects.

Adaptable templates for incident response runbooks covering detection, triage, mitigation, resolution, and communication. Includes severity levels, runbook structure, and specific procedures for service outages, high latency, and partial failures with actionable steps and verification.

Plan and synthesize multi-perspective research using bounded parallel agents when delegation is authorized. Define questions, sources and deliverables, record evidence and uncertainties per perspective, then deduplicate and resolve conflicts against primary sources. Includes scope, privacy and verification limits.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.

Locate, select, and verify evidence in documents or code inventories. Supports source-span extraction, passage reranking, and claim checks. Preserves citations and handles no-match outcomes using graph tools for exact code lookup. Ideal for AI agents performing evidence-based reasoning.

Instrument LLM applications with Langfuse tracing, prompt versioning and evaluation. Covers SDK setup, masking sensitive data, span verification, dataset comparison and debugging production LLM pipelines.

This workflow guides developers to build and fix existing Laravel applications effectively. It emphasizes root-cause diagnosis, repository-native implementation, regression coverage, and risk-based verification. Suitable for feature implementation, bug fixing, and maintaining architectural conventions within established codebases.