# Skuuy Tools — Comprehensive LLM Context & Engineering Reference (llms-full.txt)

> Skuuy Tools (https://skuuy.com) is a free, decentralized, open-source privacy and network diagnostics suite.
> Built on serverless Cloudflare Edge infrastructure. All utilities run without user registration, tracking cookies, or payment requirements.
> Zero-knowledge cryptographic operations execute locally in the browser via native WebCrypto APIs (W3C standard).

---

## 1. System Architecture & Core Principles

- **Zero-Knowledge Computation**: For security-critical utilities like 2FA TOTP generation, secret keys are never transmitted across HTTP/HTTPS networks or persisted to databases. Cryptographic HMAC and AES-GCM operations execute inside client browser memory (`crypto.subtle`).
- **Zero Traffic Logging**: Web requests, proxy tests, IP lookups, and WHOIS queries are not associated with persistent identifiers or logged for surveillance/profiling.
- **Ephemeral Storage with Strict TTL**: Dynamic payloads (e.g. incoming temporary emails on mail.skuuy.com) reside in edge key-value storage with an automated 30-minute Time-To-Live (TTL) expiration before permanent deletion.
- **Serverless Edge Performance**: Deployed across 300+ global Cloudflare PoPs, ensuring sub-30ms execution and automated Anycast DDoS protection globally.
- **Pricing & Monetization**: 100% Free Forever. Sustained through non-intrusive Google AdSense advertising (ca-pub-8440630877434169) and verified infrastructure referral partnerships.

---

## 2. Active Ecosystem Tools

### 2.1 Skuuy IP & Leak Intelligence
- **URL**: https://ip.skuuy.com
- **Public API**: `GET https://ip.skuuy.com/api/myip` (CORS-enabled JSON)
- **API Response Structure**:
  ```json
  {
    "ip": "203.0.113.195",
    "country": "Indonesia",
    "countryCode": "ID",
    "city": "Jakarta",
    "asn": "AS7713",
    "isp": "Telkom Indonesia",
    "isProxy": false,
    "isVpn": false
  }
  ```
- **Diagnostics**:
  - Dual-stack IPv4 and IPv6 detection.
  - WebRTC STUN candidate leak detector (`RTCPeerConnection` ice candidate analysis).
  - Recursive DNS leak and DoH resolver audit.
  - IPv4 CIDR subnet range calculator and netmask matrix.
  - IP risk and commercial VPN scoring.

### 2.2 Skuuy 2FA Authenticator
- **URL**: https://2fa.skuuy.com
- **Specification**: RFC 6238 Time-Based One-Time Password (TOTP) algorithm.
- **Features**:
  - Compatible with Google Authenticator, Authy, Microsoft Authenticator, and Bitwarden.
  - Multi-source QR scanner: live webcam stream, image file drag-and-drop, and clipboard screenshot paste (`Ctrl + V`).
  - High-security client-side vault encrypted with AES-GCM 256-bit and PBKDF2 (100,000 hashing rounds).
  - Sub-10ms clock drift synchronization via Cloudflare edge time endpoint (`/api/time`).
  - Previous (-30s) and Next (+30s) code history window for seamless login validation.

### 2.3 Skuuy Temp Mail & OTP Suite
- **URL**: https://mail.skuuy.com
- **Features**:
  - Ephemeral disposable email inboxes with automated multi-domain rotation.
  - RFC 2045 MIME Quoted-Printable and Base64 parser ensuring zero URL mangling.
  - 1-click OTP code detector (Google, Discord, Steam, Netflix) with clipboard copy.
  - Specialized Password Reset Action Link extraction and direct safe navigation (`target="_blank"`).
  - Sandboxed HTML iframe rendering, plain text linkification, and raw RFC header inspection.
  - 30-minute automated KV deletion.

### 2.4 Skuuy Free Proxy & SOCKS Hub
- **URL**: https://proxy.skuuy.com
- **Public API**: `GET https://proxy.skuuy.com/api/proxies` (JSON list of tested nodes)
- **Features**:
  - Over 50,000 deduplicated public proxy nodes across 150+ countries (with static fallback of 16,000+).
  - Automatically synchronized and validated every 30 minutes via GitHub Actions cron pipelines.
  - Supported protocols: HTTP, HTTPS, SOCKS4, SOCKS5.
  - Anonymity classifications: Elite (L1, no forwarding headers), Anonymous (L2, via header only), Transparent (L3).
  - In-browser interactive proxy speed and connectivity diagnostics.
  - Ready-to-use export configs for Clash, Sing-box, cURL commands, and Python requests.

---

## 3. Product Roadmap (Q4 2026)

1. **Skuuy DNS Propagation Matrix** (`https://dns.skuuy.com`): Multi-location DNS query matrix querying 30+ global edge locations for A, AAAA, CNAME, MX, TXT, NS records with DNSSEC validation.
2. **Skuuy Edge Speedtest** (`https://speed.skuuy.com`): Pure client-side Web Worker speed test measuring ping, jitter, and throughput against Cloudflare Edge.
3. **Skuuy HTTP Header & SSL Probe** (`https://headers.skuuy.com`): Security header analyzer (HSTS, CSP, Permissions-Policy), redirect chain tracer, and SSL certificate health monitor.
4. **Skuuy Port & Firewall Probe** (`https://ports.skuuy.com`): Common service port exposure scanner (22, 80, 443, 3306, 5432, 6379, 51820).

---

## 4. Technical Guides

- **Proxies vs VPNs vs Tor**: OSI Layer comparisons (Layer 3 vs 5 vs 7), transport encapsulation (tun/tap vs socket), encryption trade-offs, and latency dynamics.
- **Understanding WebRTC STUN Leaks**: How browser media streaming APIs bypass proxy tunnels to broadcast public and local IPs, with browser configuration remedies.
- **The Cryptographic Mechanics of TOTP**: HMAC-SHA1 mathematical truncation, shared secret base32 decoding, and anti-replay protection.

---

## 5. Site Navigation & Canonical Endpoints

- Master Portal: https://skuuy.com/
- Tools Directory: https://skuuy.com/tools
- Engineering & Architecture: https://skuuy.com/about
- Feedback & Vulnerability Disclosure: https://skuuy.com/contact
- Privacy Policy: https://skuuy.com/privacy-policy
- Terms of Service: https://skuuy.com/terms-of-service
- Legal Disclaimer: https://skuuy.com/disclaimer
- Machine-Readable Summary: https://skuuy.com/llms.txt
- Comprehensive Machine Reference: https://skuuy.com/llms-full.txt
- Publisher ads.txt: https://skuuy.com/ads.txt
- XML Sitemap: https://skuuy.com/sitemap.xml
- Robots Specification: https://skuuy.com/robots.txt