Backend

Access ClinPGx pharmacogenomics data (successor to PharmGKB).

Access USPTO APIs for patent/trademark searches, examination history (PEDS), assignments, citations, office actions, TSDR, for IP analysis and prior art…

Delegate bounded side tasks to a DeepSeek-backed Codex CLI subagent through the official DeepSeek API, persistent sessions, and an interactive Terminal monitor.

Generate framed, checked thumbnails from Portolan collections using chiitiler (MapLibre GL Native).

Read-only documentation drift audit comparing what the docs claim against what the code does.

Read-only documentation drift audit comparing what the docs claim against what the code does.

Uses Home Assistant APIs on NixOS for integration config flows, entity/device inspection, and token setup.

Stealth Firefox browser server for agent-driven Google OAuth and bot-protected sites.

Inspect Forgejo repositories through the REST API and web endpoints, especially Actions CI, task/run metadata, logs, package registry tags, haku-state CI, and…

Viral video replication tool that supports copying popular video structures, scripts, and styles to generate similar content.

Use when implementing GPT chat, streaming, function calling, embeddings for RAG, images, audio or batch jobs, or troubleshooting 429 rate limits and API or…

一句话生成数据管理后台。当用户描述想要一个管理系统、后台、CRUD 系统、信息管理平台，或各类业务系统如 CRM（客户管理）、ERP、OA、进销存、库存管理（WMS）、订单管理（OMS）、会员管理、人事管理（HR）、CMS 内容管理、工单系统、报名/预约系统（如"生成一个图书管理后台"、"做一个…

Search X (Twitter) data using Felo X Search API.

Extract webpage content with Felo Web Extract API.

Examine Linux system artifacts (auth logs, cron/systemd persistence, shell history, SSH keys, and system configuration) to uncover evidence of compromise…

Query the Malpedia API to look up malware family aliases and naming (platform.family_name), pull community/vendor YARA rules, link families to threat actors…

Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD…

Audit MCP servers for tool poisoning, tool shadowing, rug pulls, SSRF, and unauthenticated exposure using Invariant Labs' mcp-scan for static/runtime scanning…

Deploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard)…

Build dumb-pipe and traffic-filtering C2 redirectors with nginx (proxy_pass) and Apache (mod_rewrite), deriving filter rules from a Malleable C2 profile…

Deploy DefectDojo as a centralized vulnerability management dashboard that ingests findings from 200+ security scanners, deduplicates results, tracks…

Conduct internal Active Directory reconnaissance using BloodHound Community Edition's graph database with the SharpHound (AD) and AzureHound (Entra ID)…

Detect and test for OWASP API3:2023 Broken Object Property Level Authorization (BOPLA), covering excessive data exposure in API responses and mass assignment…

Free, no-auth multi-chain DEX pair data — prices, volume, liquidity, transactions, and token profiles