1.7K skills · sorted by relevance
Check deployed URLs after releases for page and API failures, broken assets, streaming connection issues, and slower performance. Run a single check, monitor over a set period, or compare staging and production with baseline reports.
Check whether a web app is ready for PWA installation, which lets users install it like an app. Review HTTPS, app settings, icons, and offline responses, and identify missing or inconsistent configuration.
Check and fix hreflang tags, which identify language and regional versions of web pages for search engines. Review rendered HTML and HTTP responses to find missing reciprocal links, incorrect language codes, and fallback settings.
Audit important pages for settings that interfere with search indexing, including noindex directives, HTTP headers, and robots.txt rules. Identify accidental restrictions, suggest configuration fixes, and guide follow-up checks in Google Search Console.
Audit article update dates across the visible page, HTTP response headers, and structured data that describes the article to search engines. Align these signals with substantive content changes and review how the CMS or build process updates them.
Audit and set up favicons, the small site icons used in browser tabs and search results. Check HTML links, image formats and dimensions, HTTPS access, and crawler restrictions, with guidance for ICO, SVG, and iOS icons.
Review web content for factual claims, figures, and quotations that need reliable sources. Identify missing citations, suggest relevant external links with clear link text, and check the rendered page and HTTP response.
Find and fix malformed HTML, including unclosed tags, incorrect nesting, and document structure errors. Inspect rendered HTML and HTTP responses to identify specific pages or templates with problems that may affect rendering and search engine parsing.
Review a website’s contact page for working contact methods and easy access from other pages. Add relevant contact information or forms, and inspect rendered HTML and HTTP responses to check the final page.
Check whether pages clearly explain affiliate or sponsorship relationships before promotional links appear. Review the rendered HTML and HTTP responses, identify affected pages or templates, and suggest disclosure wording and placement that readers can easily understand.
Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.
Simulate man-in-the-middle attacks, where traffic is intercepted between communicating systems, in authorized environments. Use Bettercap, Ettercap, and mitmproxy to test encryption enforcement, certificate validation, and network detection, then document findings and recommendations.
Set up Havoc infrastructure for authorized attack simulations, including its command server, traffic listeners, Nginx relay servers, and Windows agents. The skill also covers communication profiles and operational precautions for running the infrastructure.
Map threat groups and their attack techniques to MITRE ATT&CK, a catalog of adversary behavior. Generate Navigator visualization files, compare groups, and overlay detection coverage to identify gaps that can guide defensive planning.
Map attacker behaviors and indicators of compromise, or traces of an intrusion, to MITRE ATT&CK techniques. Build coverage heatmaps, compare threat groups, and identify monitoring gaps to guide detection improvements and threat intelligence reporting.
Analyze malware communication with command servers to understand periodic check-ins, message formats, encoded data, and backup destinations. Produces a structured analysis report and network detection rules based on captured traffic and malware code.
Analyze Cobalt Strike communication profiles and Beacon payload configurations to extract request paths, headers, timing, and process injection settings. Turn these indicators into a JSON report and network detection rules for Suricata or Snort.
Add or maintain WeChat API support in WxJava. Review existing issues and implementations, map official API requirements to SDK code, and update tests and documentation while preserving Java 8 compatibility and existing public interfaces.
Review websites for security, browser compatibility, and code quality. Identify issues in HTTPS settings, third-party libraries, HTML, and error handling, then apply concrete improvements using checklists and implementation examples.
Develop Azure Functions with guidance for .NET, Python, and Node.js. Covers asynchronous processing, Durable Functions for coordinating tasks, startup delay optimization, and production concerns such as timeouts, HTTP client reuse, and monitoring configuration.
Build AWS applications with managed services that reduce server administration. Follow patterns for Lambda functions, HTTP APIs, database access, and queued background processing, with guidance on deployment and delays when functions first start.
Reproduce model connection failures and interrupted responses in the desktop app using a local fault server and test providers. Check error messages and retry behavior for refused connections, DNS failures, HTTP errors, stalled requests, and cut streams.
Test iPolloWork's handling of corporate certificates in a Daytona Windows sandbox. Set up valid and broken HTTPS certificate chains, then verify that the desktop app and runtimes it starts use certificates trusted by Windows.
Integrate Switchboard into Solana apps to access price feeds, custom external data, and verifiable random values. The guide includes TypeScript and Rust examples, plus Surge streaming for interfaces that need live price updates.