6K skills · sorted by relevance
Build fully-integrated 3-statement models (IS, BS, CF) in Excel with working capital schedules, D&A roll-forwards, debt schedule, and the plugs that make cash and retained earnings tie. Pairs with excel-author.
The English summary is being prepared. Showing the original description.
Build comparable company analysis in Excel — operating metrics, valuation multiples, statistical benchmarking vs peer sets. Pairs with excel-author. Use for public-company valuation, IPO pricing, sector benchmarking, or outlier detection.
The English summary is being prepared. Showing the original description.
Canvas LMS integration — fetch enrolled courses and assignments using API token authentication.
The English summary is being prepared. Showing the original description.
Build institutional-quality DCF valuation models in Excel — revenue projections, FCF build, WACC, terminal value, Bear/Base/Bull scenarios, 5x5 sensitivity tables. Pairs with excel-author. Use for intrinsic-value equity analysis.
The English summary is being prepared. Showing the original description.
Build auditable Excel workbooks headless with openpyxl — blue/black/green cell conventions, formulas over hardcodes, named ranges, balance checks, sensitivity tables. Use for financial models, audit outputs, reconciliations.
The English summary is being prepared. Showing the original description.
Search arXiv papers by keyword, author, category, or ID.
The English summary is being prepared. Showing the original description.
Gmail, Calendar, Drive, Docs, Sheets via gws CLI or Python.
The English summary is being prepared. Showing the original description.
Author/validate/export Google's DESIGN.md token spec files.
The English summary is being prepared. Showing the original description.
Download media (images/videos/GIFs/audio) from Twitter/X using gallery-dl. Supports single tweet URLs, user timelines, date filtering, post count limiting, retweet filtering, video quality selection, and various media types. Use when users want to download media from Twitter/X accounts with proxy support (HTTP/SOCKS4/SOCKS5) and cookie authentication. Supports downloading tweet text with links alongside media.
The English summary is being prepared. Showing the original description.
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
The English summary is being prepared. Showing the original description.
Authors xUnit v3 tests -- Facts, Theories, fixtures, parallelism, IAsyncLifetime.
The English summary is being prepared. Showing the original description.
Creates NuGet packages. SDK-style csproj, source generators, multi-TFM, symbols, signing.
The English summary is being prepared. Showing the original description.
Authors Roslyn analyzers. DiagnosticAnalyzer, CodeFixProvider, CodeRefactoring, multi-version.
The English summary is being prepared. Showing the original description.
Hardens .NET apps per OWASP Top 10 -- injection, auth, XSS, deprecated security APIs.
The English summary is being prepared. Showing the original description.
Builds gRPC services. Proto definition, code-gen, ASP.NET Core host, streaming, auth.
The English summary is being prepared. Showing the original description.
Authors .editorconfig rules. IDE/CA severity, AnalysisLevel, globalconfig, code style enforcement.
The English summary is being prepared. Showing the original description.
Secures ASP.NET Core APIs. Identity, OAuth/OIDC, JWT bearer, passkeys, CORS, rate limiting.
The English summary is being prepared. Showing the original description.
Build and harden high-performance APIs with strong security controls, endpoint budgets, rate limiting, and resilience patterns. Use when tasks involve API latency/throughput tuning, abuse resistance, authz hardening, or API release gates.
The English summary is being prepared. Showing the original description.
Use when reading or changing example.com content, settings, products or pricing through the MCP API at /api/mcp — the 27 JSON-RPC tools, how to authenticate, which changes need a redeploy and which are live immediately, and the commercial scope rule that the product tools enforce.
The English summary is being prepared. Showing the original description.
Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications to achieve remote code execution during authorized penetration tests.
The English summary is being prepared. Showing the original description.
Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applications to identify unauthorized access, data injection, intent hijacking, and redirect manipulation. Use when assessing mobile app attack surface through custom URI schemes, Android App Links, iOS Universal Links, or intent-based navigation. Activates for requests involving deep link security testing, URL scheme exploitation, mobile intent abuse, or link hijacking.
The English summary is being prepared. Showing the original description.
Executes authorized attack simulations against Active Directory environments to identify misconfigurations, weak credentials, dangerous privilege paths, and exploitable trust relationships that could lead to domain compromise. The tester uses BloodHound for attack path analysis, Mimikatz for credential extraction, and Impacket for protocol-level attacks including Kerberoasting, AS-REP Roasting, and delegation abuse. Activates for requests involving Active Directory pentest, AD attack simulation, domain compromise testing, or Kerberos attack assessment.
The English summary is being prepared. Showing the original description.
Identifying and exploiting Insecure Direct Object Reference vulnerabilities to access unauthorized resources by manipulating object identifiers in API requests and URLs.
The English summary is being prepared. Showing the original description.
Identifying and exploiting SSRF vulnerabilities to access internal services, cloud metadata, and restricted network resources during authorized penetration tests.
The English summary is being prepared. Showing the original description.