Browse Skills

Return-Oriented Programming explains how to build ROP chains to reuse existing code when NX/DEP blocks injected shellcode. It covers ret2libc, ret2syscall, alignment, and gadget selection in authorized exploit development.

SOAP Security Testing analyzes WSDLs and tests SOAP endpoints for XML injection, XXE, SOAPAction spoofing, and WS-Security misconfigurations. Use it during authorized assessments or audits of SOAP web services.

Stack Buffer Overflow Exploitation describes how to confirm, offset, and weaponize stack-based overflows in native binaries during authorized testing. Use it to determine return-address control and build ret2win or ROP payloads.

Supply Chain Attack Simulation checks packages for typosquatting, dependency confusion, hash mismatches, and known vulnerabilities. Use it when assessing or auditing software supply chain security.

TDD Guide generates tests from requirements and code, then analyzes coverage and test quality. Use it to guide red-green-refactor workflows and find missing scenarios across common frameworks.

WebSocket API Security Testing checks WebSocket endpoints for authentication, authorization, injection, and denial-of-service issues. Use it when assessing real-time APIs for CSWSH, token handling, and message-level access control.

Windows Binary Exploitation covers exploiting 32-bit Windows stack buffer overflows in authorized assessments. Use it to confirm EIP control, find offsets, handle bad characters, and deliver shellcode after a crash.

Codex Slides Verification checks that slide, panel, version, checkpoint, and export changes are both persisted in project state and visible in the Codex Browser. Use it after editing, restyling, note changes, restores, or exports.

Reviews animation and motion code against a high craft bar derived from Emil Kowalski's design engineering philosophy. Defaults to flagging; approval is earned.

Agent Session Format Check verifies whether current Agent Sessions code still matches the latest agent session, storage, and usage formats. Use it when agent CLIs change, flags drift, or you need to confirm discovery paths, schemas, and usage probes.

BigCode Evaluation Harness evaluates code generation models on HumanEval, MBPP, MultiPL-E, and other benchmarks with pass@k metrics. Use it to compare coding ability, multi-language support, or overall code generation quality.

Debugging Strategies helps you reproduce bugs, narrow causes, and verify fixes with systematic techniques and debugging tools. Use it for crashes, performance issues, memory leaks, or unfamiliar codepaths.