Browse Skills

Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities, including excessive data exposure and mass assignment. Use for API security testing, SOC analysis, and building detection rules.

Provides detection rules and SIEM queries to identify API enumeration attacks such as BOLA and IDOR, enabling security teams to monitor and respond to unauthorized access attempts.

Test MCP servers and clients for tool poisoning, prompt injection, over-permissioning, credential theft, and RCE. Use for security assessments of AI agents and IDEs that load local or remote MCP servers.

Systematically test LLM-powered applications for prompt injection, jailbreaks, and data leaks. Use when assessing the security of chatbots, copilots, RAG systems, and autonomous AI agents.

Uses LLMs to accelerate vulnerability discovery by generating fuzzing seeds, evolving grammars against coverage, and scaling proof-of-vulnerability generation, with Burp MCP integration for evidence-driven web analysis.

Implement input/output validation guardrails for LLM-powered applications to prevent prompt injection, enforce content policies, detect PII, and validate responses. Use when deploying chatbots, AI agents, or RAG pipelines that need safety controls.

Test machine-learning model files and model-loading services for remote code execution during authorized security assessments. Covers insecure deserialization, archive traversal, and Hydra instantiation vectors.

Detects prompt injection attacks against LLM applications using a multi-layered defense with regex patterns, heuristic analysis, and a DeBERTa classifier. Ideal for pre-filtering user inputs before reaching the model.

Generates complete design systems with colors, typography, effects, and accessibility rules using a searchable database. Use when designing or reviewing UI components, pages, or full applications.

A guide for creating effective skills that extend Claude's capabilities with specialized knowledge, workflows, or tool integrations. Use when building or updating custom skills.

Comprehensive toolkit for building modern React and Next.js apps with TypeScript and Tailwind CSS. Includes automated scripts for component generation, bundle analysis, and project scaffolding.

Generate Vitest + React Testing Library tests for Dify frontend components, hooks, and utilities. Triggers on testing, spec files, coverage, Vitest, RTL, unit tests, integration tests, or write/review test requests.