Agent skills for Windsurf (legacy)

Automate budget vs actual variance analysis in Excel with flagging, commentary, and executive summaries for financial reporting and FP&A…

Use reportable/renderable exceptions, structured logs, and channel strategy for observability and graceful failures

Methodology for executing a single WebBench benchmark task via browser automation.

Create executive summaries from documents, reports, and written content.

Use when finalizing the tables and figures for a Journal of International Business Studies (JIBS) manuscript — cross-country descriptives…

Use when editing .tsx/.jsx/.css/.html, React components, pages, routes, forms, styles, or layouts.

Apply in-product expectation cues — typography, animation, spacing, copy tone, micro-interactions, and visual register that signal "this…

Explain code, concepts, or technical decisions in clear, understandable terms

Explains concepts using Socratic-style dialogue.

Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1

Tests API parameters, headers, and request bodies for injection flaws — SQL injection, NoSQL injection, OS command injection, LDAP…

Analyzes and simulates BGP hijacking scenarios in authorized lab environments

Tests APIs for Broken Function Level Authorization (OWASP API5:2023) by identifying admin and privileged endpoints, then reaching them…

Identifying and exploiting insecure deserialization vulnerabilities in

Performs Kerberoasting (MITRE ATT&CK T1558.003) using Impacket's GetUserSPNs.py to request Kerberos TGS tickets for SPN-registered service…

Discovers and exploits mass assignment (autobinding) in REST APIs by injecting unexpected or hidden parameters (e.g. role, isAdmin, plan)…

Detects and exploits NoSQL injection vulnerabilities in MongoDB, CouchDB,

Detecting and exploiting SQL injection vulnerabilities using sqlmap to

Detects and exploits Server-Side Template Injection (SSTI) vulnerabilities

Uses the Metasploit Framework (msfconsole and its exploit, auxiliary,

Testing WebSocket implementations for authentication bypass, cross-site