format-strings

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

RuVLLM local inference with chat formatting, MicroLoRA fine-tuning, and SONA adaptation

3 skills · 1 command · 1 agent

Query Trackio projects, runs, and metrics using the `trackio` CLI. Use when the user needs to list projects/runs/metrics, get summaries, or retrieve metric values from local Trackio databases. Supports both human-readable and JSON output formats. Covers project discovery, run inspection, metric querying, and system metrics. Designed for LLM agents and automation scripts.

1 skill

Official Carbone skill — complete templating language reference covering tags, loops, conditions, formatters, aggregators, and all output formats (DOCX, XLSX, PPTX, ODT, HTML, Markdown, PDF)

1 skill

Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security

4 skills · 3 agents

Build beautiful documentation sites with Mintlify. Convert non-markdown files into properly formatted MDX pages, add and modify content with correct component use, and automate documentation updates.

1 skill · 1 MCP server

Ship a new language without the usual breakage. Three deterministic stdlib scripts: a translation-file checker for JSON/ARB (i18next, ICU), .properties, .strings, Android strings.xml and gettext .po that blocks on missing keys, renamed placeholders, ICU syntax errors, plural/select without other, zero branches that never match and plural categories the target locale needs, from the embedded Unicode CLDR 49 table (ru few/many, ar six forms); a hardcoded-string scanner for React, Vue, Svelte and HTML that flags text and user-facing attributes outside t(), concatenated translations, locale-less toLocaleString and '$' + amount; and a pseudo-locale generator (en-XA accented and expanded, ar-XB right-to-left) that keeps placeholders and ICU syntax intact. Ships cs-i18n-engineer agent, /cs-i18n-check and /cs-pseudo-locale commands and 3 cited references.

1 skill · 2 commands · 1 agent