201 skills · sorted by relevance
Build web application features across the interface, API, and database, with authentication, input checks, and safe data handling. The skill guides technical design, implementation, error handling, and component testing in one workflow.
Inspect game code, data files, live memory, and graphics captures to understand the internals needed for a mod. Choose tools for the game’s technology, document findings, and validate unknown file formats by decoding and re-encoding them.
Find workspaces on remote nodes, inspect their details, browse folders, and read or write files. Supports text files and binary content, such as images, through base64 encoding, a text representation of binary data.
Recover failed writes of large files or code containing special characters by placing content in a temporary Python script. Use raw strings or Base64 encoding, then check that the output file exists and has content.
Compare a file’s current content with its intended replacement before writing. Skip matching files to avoid unnecessary rebuilds and timestamp changes, with guidance on readable diffs, line endings, encoding, and exact content requirements.
Troubleshoot CSV and XLSX processing when execute_code_sandbox fails. The workflow locates input files, saves processing code as a Python script, captures execution errors, checks dependencies and file access, and confirms output exists before reading it.
Use shell heredocs, which pass multiline text directly to a command, when write_file fails on complex code. Save TypeScript, JSX, JSON, or shell scripts with literal quotes and formatting, then verify the file and its contents.
Extract text from downloaded PDFs by checking for invalid files, trying three extraction tools in sequence, and validating the results. This workflow helps identify download errors, empty output, and encoding problems during document retrieval.
Generate Word, PDF, and HTML documents from Markdown through visible conversion steps. Check available tools, handle special characters according to the output format, switch to alternative converters when needed, and verify the resulting files.
Generate Word, PDF, and HTML documents from Markdown while diagnosing conversion failures. The workflow checks required tools, replaces problematic characters for PDF, tries alternative conversion engines, and verifies the resulting files.
Investigate insecure deserialization, where restoring objects from stored or transmitted data can execute unwanted code. Covers multiple languages, input format recognition, vulnerable processing points, verification methods, and documentation of affected libraries and entry points.
Test whether a browsing AI agent follows fake security verification instructions that expose stored personal information through URL paths. Examine chained navigation, memory disclosure, and constructed URLs, then document confirmed findings with evidence and mitigation suggestions.
Write and review .NET calls to native C/C++ libraries using P/Invoke. Covers function declarations, string conversion, memory ownership, and platform differences to help investigate crashes, memory leaks, and corrupted data.
Check citations in LaTeX and Quarto manuscripts against a bibliography file. Find missing references, unused entries, and likely citation key typos, then flag incomplete fields, author formatting problems, and character encoding issues.
Design and implement repeatable preprocessing pipelines for cleaning, encoding, transforming, and validating ML input data.
The English summary is being prepared. Showing the original description.
Comprehensive data visualization toolkit for creating beautiful, mathematically elegant visualizations with D3.js, Chart.js, and custom SVG. Use when (1) building interactive data visualizations, (2) designing color palettes for charts, (3) choosing scales and visual encodings, (4) creating data pipelines from Census/SEC/Wikipedia APIs, (5) crafting narrative-driven data stories, (6) making perceptually accurate charts, or (7) implementing force-directed networks, timelines, or geographic maps.
The English summary is being prepared. Showing the original description.
Hardware-offloaded erasure coding with DOCA Erasure Coding (Reed-Solomon, doca_ec) on a BlueField DPU, ConnectX NIC, or host: generating parity for data blocks, rebuilding lost blocks from the survivors, and refreshing parity after a change. Trigger on "one data block changed, how do I refresh parity without re-encoding", "a disk failed and 2 parity blocks are gone, can I rebuild", "RAID-6 resilience across 12 disks", "my doca_ec_task_create returns NOT_PERMITTED", or "is this N+K layout still recoverable", even without naming DOCA Erasure Coding. Covers bringing up a doca_ec context, the create / recover / update tasks, matrix type / N / K / block size, doca_ec_cap_* queries before sizing, doca_mmap src/dst permissions, and DOCA_ERROR_* from doca_ec_task_*. Refuse and route elsewhere for non-Reed-Solomon codes (fountain / LDPC / raptor), pure-replication designs, network FEC, or other DOCA accelerator libraries (SHA / Compress / AES-GCM / DMA).
The English summary is being prepared. Showing the original description.
Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles. Prefer a more specific skill first when the challenge is mainly web, pwn, reverse, forensics, malware, OSINT, or crypto. Treat this as the fallback skill for genuine cross-category or edge-case challenges, not the default starting point.
The English summary is being prepared. Showing the original description.
Spawn the comment-sicko subagent, fix accepted findings, and offer encodings for claimed constraints.
The English summary is being prepared. Showing the original description.
Azure Queue Storage JavaScript/TypeScript SDK (@azure/storage-queue) for message queue operations. Use for sending, receiving, peeking, and deleting messages in queues. Supports visibility timeout, message encoding, and batch operations. Triggers: "queue storage", "@azure/storage-queue", "QueueServiceClient", "QueueClient", "send message", "receive message", "dequeue", "visibility timeout".
The English summary is being prepared. Showing the original description.
HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree with the origin on message framing (Content-Length vs Transfer-Encoding), on HTTP/2→HTTP/1 translation, or when exploring client-side desync via browser fetch pipelines.
The English summary is being prepared. Showing the original description.
WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloads (SQLi, XSS, RCE) and you need to craft bypasses using encoding, protocol-level tricks, or WAF-specific weaknesses.
The English summary is being prepared. Showing the original description.
Spawn Comment Sicko, fix accepted findings, and offer encodings for claimed constraints.
The English summary is being prepared. Showing the original description.
Video editing with ffmpeg including cutting, trimming, concatenating segments, and re-encoding. Use when working with video files (.mp4, .mkv, .avi) for: removing segments, joining clips, extracting portions, or any video manipulation task.
The English summary is being prepared. Showing the original description.