This skill should be used when the user asks to "exploit buffer overflow vulnerabilities", "develop stack-based exploits", "find EIP offset", "identify bad characters", "create shellcode payloads", "perform fuzzing for crashes", or "gain remote code execution via memory corruption". It provides comprehensive techniques for discovering and exploiting buffer overflow vulnerabilities in Windows applications.
This skill should be used when the user asks to "test for XSS vulnerabilities", "perform cross-site scripting attacks", "identify HTML injection flaws", "exploit client-side injection vulnerabilities", "steal cookies via XSS", or "bypass content security policies". It provides comprehensive techniques for detecting, exploiting, and understanding XSS and HTML injection attack vectors in web applications.
This skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web applications", "find LFI vulnerabilities", or "access files outside web root". It provides comprehensive file path traversal attack and testing methodologies.
Best practices for Claude Code performance optimization, context management, storage cleanup, and troubleshooting slowdowns
Measure execution time and memory usage of code. Use when analyzing performance characteristics.
Check Mojo code for memory safety issues (ownership violations, use-after-free, etc.). Use to catch memory bugs.
Comprehensive Windows 11 system diagnostics via PowerShell. Diagnoses crashes, freezes, reboots, BSOD, disk health, memory issues, hardware errors, and performance problems. Use when troubleshooting Windows stability issues, analyzing Event Viewer logs, checking disk/memory health, investigating hardware errors, or diagnosing system performance problems.
Use when optimizing end-to-end latency, reducing response times, or improving performance for latency-sensitive applications. Covers latency budgets, geographic routing, protocol optimization, and latency measurement techniques.
Explain compiler/runtime errors in plain language. Use when a junior developer needs help understanding an error message.
Verify memory safety in Mojo code including ownership, borrowing, and lifetime management. Use when reviewing code or debugging memory issues.
Audit Solana programs (Anchor or native Rust) for security vulnerabilities. Use when reviewing smart contract security, finding exploits, analyzing attack vectors, performing security assessments, or when explicitly asked to audit, review security, check for bugs, or find vulnerabilities in Solana programs.
Audit, optimize, and maintain 60fps performance for emotive-mascot animations. Use when diagnosing performance issues, optimizing particle systems, reducing bundle size, or ensuring smooth animations across devices.
Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".
Analyze Ruby and Rails code quality with RubyCritic. Identifies code smells, complexity issues, and refactoring opportunities. Provides detailed metrics, scores files A-F, compares branches, and prioritizes high-churn problem areas. Use when analyzing Ruby code quality, reviewing PRs, or identifying technical debt.
Comprehensive testing patterns with Pest. Use when working with tests, testing patterns, or when user mentions testing, tests, Pest, PHPUnit, mocking, factories, test patterns.
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
ๅฝ็จๆทๆญฃๅจ่ฟ่ก CTF ๆฏ่ตๆ็ปไน ๏ผ้ๅฐ Misc ็ฑปๅ้ข็ฎๆถ่งฆๅๆญค Skillใ ้็จๅบๆฏๅ ๆฌ๏ผ - ็จๆทไธไผ ๆๆๅไบ้ณ้ขๆไปถ๏ผwav/mp3/flac๏ผใๅพ็ๆไปถ๏ผpng/jpg/bmp/gif๏ผใๅ็ผฉๅ ใpcap ๆต้ๅ ใๅ ๅญ้ๅ๏ผraw/vmem/dmp๏ผ็ญ - ็จๆทๆ่ฟฐไบ้ๅใ็ผ็ ใๅฅๅจใๆไปถๅๆใๅ ๅญๅ่ฏ็ธๅ ณ้ฎ้ข - ็จๆทๆ็กฎ่ฏด"CTF"ใ"Misc"ใ"้ๅ"ใ"ๆพ flag"ใ"่ฟๆฏไธ้้ข"ใ"ๅ ๅญๅ่ฏ"ใ"Volatility"็ญๅ ณ้ฎ่ฏ - ็จๆทๆไพไบ base64/hex/binary ็ญ็ผ็ ๅญ็ฌฆไธฒ้่ฆ่งฃ็ - ็จๆท้่ฆๅๆๅฏ็ๆไปถใๆๅ้่ๆฐๆฎใ่ฟๅๅ่ฎฎๅ ๅฎนใๅๆๅ ๅญ้ๅ
Use this skill when asked to analyze, investigate, or report on honeypot server security. Triggers on keywords like "honeypot investigation", "analyze honeypot", "honeypot security", "honeypot report", or when a server name is mentioned with honeypot analysis context. This skill provides comprehensive security analysis including attack patterns, threat intelligence correlation, IP enrichment, vulnerability assessment, and executive report generation.
ๅฝ็จๆทๆญฃๅจ่ฟ่ก CTF ๆฏ่ตๆ็ปไน ๏ผ้ๅฐ Web ็ฑปๅ้ข็ฎๆถ่งฆๅๆญค Skillใ ้็จๅบๆฏๅ ๆฌ๏ผ - ็จๆทๆ่ฟฐไบ SQL ๆณจๅ ฅใXSSใSSRFใSSTIใXXEใๆไปถๅ ๅซใๅฝไปคๆง่ก็ญ Web ๅฎๅ จ้ฎ้ข - ็จๆท้่ฆ่ฟ่กไฟกๆฏๆ้ใ็ฎๅฝๆซๆใ็ซฏๅฃๆซๆ็ญๆธ้ๅๆๅทฅไฝ - ็จๆท้ๅฐ PHP ็นๆงๅฉ็จใๅๅบๅๅใJWT ไผช้ ็ญ้ซ็บงๆปๅปๅบๆฏ - ็จๆทๆๅ "CTF"ใ"Web"ใ"ๆธ้"ใ"ๆณจๅ ฅ"ใ"็ป่ฟ"ใ"ๆผๆด" ็ญๅ ณ้ฎ่ฏ - ็จๆท้่ฆๅๆ Java ไปฃ็ ๅฎก่ฎกใๅบๅ้พๅฎๅ จใ็ปไปถๆผๆดๅฉ็จ็ญ้ฎ้ข - ็จๆท้่ฆๆ้ payloadใ็ผๅ exploitใๅๆ WAF ็ป่ฟ็ญ็ฅ
Use when errors occur deep in execution and you need to trace back to find the original trigger - systematically traces bugs backward through call stack, adding instrumentation when needed, to identify source of invalid data or incorrect behavior
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
Detects when user requests warrant critical analysis via /advise command
