Build TypeScript applications with consistent types across frontend and backend. Get help designing reusable types, checking values with type guards, configuring the compiler, and improving builds, with code and explanations of design choices.
Use Wireshark to capture and filter network packets, the small units of transmitted data. Examine saved traffic, reconstruct conversations, and review statistics to investigate connection problems, performance issues, or suspicious activity and document findings.
Turn a business scenario into a compliance checklist covering GDPR and Chinese privacy, data, and advertising regulations. Organize legal references, risk levels, current status, and recommended actions into a prioritized remediation plan.
Guides security scanning across networks, web applications, wireless systems, and cloud environments. Helps select and configure tools, check findings for false positives, prioritize risks, and prepare reports with remediation recommendations.
Assess SSH services by discovering servers, reviewing encryption settings, testing passwords and keys, and investigating known vulnerabilities. Includes guidance on SSH tunnels and port forwarding, with reports covering configuration, authentication weaknesses, and forwarding setups.
Build Next.js 14+ applications with App Router, covering pages, server-side processing, data fetching, and caching. The skill also guides performance improvements, search engine metadata, and production deployment to Vercel or a self-hosted environment.
Work with PDFs to extract text, tables, and images, combine or split documents, rotate pages, and create new files. The guide also covers forms, watermarks, password protection, and OCR, which recognizes text in scanned pages.
Plan and coordinate penetration tests with checklists covering objectives, scope, environment preparation, tester selection, monitoring, and follow-up. Helps teams define deliverables, prioritize vulnerabilities, arrange fixes and verification, and clean up test accounts and artifacts.
Look up commands for authorized penetration tests, from finding hosts and services to checking web vulnerabilities, testing passwords, and analyzing traffic. Examples cover Nmap, Metasploit, Nikto, SQLMap, Hydra, John the Ripper, and other tools.
Create Playwright tests for user workflows, APIs, and visual changes. Use TypeScript or JavaScript examples to choose reliable page elements, manage login state, diagnose intermittent failures, and configure automated test runs in CI.
Explains how to assess paths from limited user access to administrator privileges on Linux and Windows. Covers local permission weaknesses and Active Directory, a Windows domain management system, with tool selection and documentation guidance for authorized testing.
Estimate software development effort by breaking requirements into tasks and choosing three-point estimates, relative T-shirt sizes, or function points that measure functional scope. Produce workload reports with uncertainty ranges and relevant risk adjustments.
Upload files to Cloudflare R2, AWS S3, or compatible storage and receive temporary download links. Choose a storage bucket, set the link expiration, and manage recent uploads with listing and deletion tools.
Build animated 3D scenes in React Three Fiber using examples for object motion, model playback, and spring effects. Guidance covers blending character movements, responding to interactions, and managing state to reduce unnecessary React rendering.
Write, review, and optimize React Three Fiber code for 3D scenes in React. Apply prioritized guidance on unnecessary re-renders, animation loops, model loading, state management, visual effects, and physics across the Poimandres ecosystem.
Guides performance improvements when writing, reviewing, or refactoring React and Next.js applications. Prioritized rules cover data fetching, bundle size—the amount of code delivered to browsers—and rendering, with explanations and code examples.
Map an authorized target's subdomains, active websites, and technologies, then organize vulnerability checks with security tools. The skill covers reconnaissance workflows, automated scans, and XSS testing for flaws that let injected scripts run in web pages.
Run linear or logistic regression on CSV or Excel tables to examine relationships between variables. Get coefficients, measures of model fit, significance tests, and checks for overlapping predictors, with explanations in plain language.
Examine a plan or design through focused questions, each with a recommended answer. Work through connected decisions to reach shared understanding, using codebase exploration to resolve questions that the code can answer.
Assess AWS security through penetration testing, a process for checking exploitable weaknesses. Examine IAM permissions, storage, compute resources, and credential exposure to identify privilege escalation paths and document security audit findings.
Turn reference UI screenshots into documented design rules, product requirements, and prompts for building React interfaces. Extract colors, typography, spacing, and component styles, then use them to create consistent screen variations.
Test whether changing record IDs or filenames exposes another user's data in a web application. This skill guides access control checks, evidence collection, impact assessment, and fixes for IDOR, a flaw in resource authorization.
Turn source code imports and folder structure into diagrams for understanding a project, reviewing dependencies, or preparing documentation. Supports Python, JavaScript, TypeScript, Go, and Java, with Mermaid text output and optional SVG images.
Refactor React components that have accumulated many boolean options. Apply component composition, meaning building interfaces from cooperating parts, and shared state patterns to design reusable component libraries and clearer APIs, with guidance specific to React 19.
Is this your account? Link GitHub to bring it onto your creator page (Japanese)