Browse Skills

Audit Flow traces system flows interactively across code, API, auth, data, and network layers with SQLite persistence and Mermaid export. Use it for security audits, compliance documentation, flow tracing, debugging, architecture reviews, or incident post-mortems.

Authentication Patterns compares session-based, JWT, and OAuth 2.0 authentication approaches and helps select providers like NextAuth, Clerk, Supabase Auth, and Lucia. Use it when implementing, reviewing, or migrating authentication flows to follow security best practices.

AWS Penetration Testing guides security assessment of Amazon Web Services environments, including IAM enumeration, privilege escalation, SSRF to metadata, S3 bucket exploitation, and Lambda attacks. Use it when asked to pentest AWS or test cloud infrastructure security.

Broken Authentication Testing identifies and exploits authentication and session management vulnerabilities in web applications. Use it when asked to test for broken authentication, session fixation, credential stuffing, weak password policies, or authentication bypass flaws.

Burp Suite Testing guides web application security testing with Burp Suite, including HTTP traffic interception, request modification with Repeater, and automated vulnerability scanning. Use it when you need to intercept HTTP traffic, modify web requests, analyze HTTP history, or test for web vulnerabilities.

Cloud Penetration Testing provides techniques for authorized security assessments of AWS, Azure, and GCP, covering reconnaissance, enumeration, privilege escalation, data extraction, and persistence. Use it for authorized cloud security engagements.

Code to Diagram analyzes codebases via static analysis to generate architecture diagrams, flowcharts, and org charts in Mermaid or SVG format. Use it when you need to visualize module dependencies or understand code structure.

Code Vulnerability Audit scans code for dependency vulnerabilities, hardcoded secrets, and OWASP security anti-patterns such as SQL injection and XSS. Use it when asked to run security scans, vulnerability detection, secret leak checks, or code security audits.

Cross-Examine interviews the user relentlessly about a plan or design until shared understanding is reached, asking one question at a time and resolving each branch of the decision tree. Use it when someone wants to stress-test a plan, get grilled on a design, or says "grill me".

Deep Module Refactor explores a codebase like an AI would, surfaces architectural friction, and proposes module-deepening refactors as GitHub issue RFCs to improve testability and AI-navigability.

Daytona Electron Den validates an Electron app against a Daytona Den server using two sandboxes, covering cloud auth, marketplace, org policy, provider sync, worker proxy, and desktop handoff. Use it when testing full-stack cloud behavior and producing unified proof.

Daytona Flow Validator validates Daytona Electron and browser flows end-to-end using CDP to drive real user journeys, capture frame-by-frame HTML proof, and repair failures before declaring success. Use it when you need pass/fail evidence for UI features in Daytona or iPolloWork.