Browse Skills

Meme Coin Audit detects rug pulls in EVM and Solana token contracts, including honeypots, hidden mint, fee manipulation, LP drains, bonding curve exploits, and authority retention. Use it for pre-investment due diligence or token security reviews.

Mobile App Pentest tests Android/iOS apps by installing them, proxying traffic through Burp/mitmproxy, and driving the UI to capture API requests. It escalates to apktool/jadx and Frida/objection when traffic is pinned or absent to find hardcoded secrets and hidden endpoints.

Security Arsenal provides security payloads, bypass tables, wordlists, and bug bounty submission rules. Use it when testing for common web vulnerabilities or checking if a finding is submittable.

Triage Validation applies a 7-question gate, 4 pre-submission gates, and a never-submit list to bug bounty findings before writing any report. Use it to filter out invalid, out-of-scope, or unproven issues and reduce N/A submissions.

Web2 Recon maps a target's attack surface by enumerating subdomains, discovering live hosts, crawling URLs, analyzing JavaScript, and fuzzing directories. Use it when starting recon on a web2 target or when asked about asset discovery, subdomain enumeration, or attack surface mapping.

Web2 Vulnerability Classes provides a complete reference for 26 web2 bug classes with root causes, detection patterns, bypass tables, exploit techniques, and real paid examples. Use it when hunting a specific vulnerability class or studying what makes bugs pay.

Web3 Audit catalogs 10 DeFi bug classes with grep patterns, Foundry PoC templates, and pre-dive kill signals for smart contract bug bounties.

Caveman keeps technical substance while removing communication waste, defaulting to concise direct answers in AI coding tools. Use it for terse, low-token responses plus built-in code review and commit message patterns.

Coss UI gives an AI assistant deep knowledge of coss ui components, composition patterns, styling conventions, migration rules, and common pitfalls. Use it when building or migrating coss components in a TypeScript project.

Deploy to Vercel handles deploying applications and websites to the Vercel platform, always as preview unless production is explicitly requested. Use when the user asks to deploy, push live, or create a preview deployment.

Huashu Design creates high-fidelity HTML prototypes, interaction demos, slides, animations, and design variants, acting as a designer rather than a programmer. Use it when you need visual design outputs, design direction exploration, or expert review of UI and motion work.

Lazy Senior Dev guides coding agents to write minimal, efficient code by reusing existing utilities, standard libraries, platform features, and installed dependencies before adding new code. Enable it for bug fixes and feature work where the shortest correct diff wins, but not for exploratory research or redesigns.