Skill UI

Runs the Centinela QA agent to scan for dead code, tech debt, outdated or vulnerable dependencies, code smells, and TODO/FIXME audit results, generating a documented report for release or refactor readiness.

Aggregates Uncle Bob’s Clean Code, Architecture, Coder, Agile, and design-pattern guidance to evaluate reviews, refactors, and architecture decisions, and to surface professionalism heuristics without replacing your linter or formatter.

A powerful code review utility designed for SwiftUI projects. It comprehensively analyzes code quality, ensuring adherence to modern Swift APIs, optimal performance, robust data flow management, and compliance with Apple's Human Interface Guidelines and accessibility standards (like VoiceOver and Dynamic Type). Use this tool when writing, refactoring, or reviewing complex SwiftUI implementations to maintain high code hygiene and maintainability.

This utility converts a single, high-level objective into a comprehensive, step-by-step build plan suitable for complex, multi-agent, or multi-session engineering projects. It automatically handles dependency mapping, detects parallel steps, and structures each step with self-contained context briefs, ensuring any new agent can execute it without prior knowledge. Ideal for large-scale refactoring or feature development spanning multiple PRs.

A comprehensive guide to writing reliable and maintainable tests for Kotlin projects. This skill covers modern testing patterns using Kotest for various spec styles (FunSpec, BehaviorSpec), MockK for dependency mocking, and enforces TDD principles (RED/GREEN/REFACTOR). Learn how to implement unit tests, property-based testing, and ensure high code coverage with Kover.

This command executes the entire AgentHub lifecycle in a single, chained invocation. It automates complex development tasks by sequentially handling initialization, capturing performance baselines, spawning multiple specialized agents, evaluating the results (via metrics or LLM judging), and finally presenting a winner for merging. Use this when running an end-to-end competition or complex refactoring task.

This skill provides a programmatic method for analyzing Advanced Persistent Threat (APT) groups using the MITRE ATT&CK framework. By querying TTPs and generating multi-layer JSON files compatible with ATT&CK Navigator, analysts can visualize threat actor coverage, map detection capabilities, and identify critical security gaps to build highly targeted, threat-informed defenses.

This guide details advanced threat hunting techniques to proactively uncover adversary persistence mechanisms leveraging Windows Management Instrumentation (WMI) event subscriptions. It monitors the creation and binding of WMI events (Filter, Consumer, Binding) to detect malicious, fileless backdoors used by sophisticated threat actors, especially when standard persistence locations are clean.

This skill maps observed adversary behaviors, security alerts, and detection rules to the MITRE ATT&CK framework. It is essential for quantifying detection coverage, building ATT&CK heatmaps, tagging SIEM alerts, and prioritizing security controls based on known threat actor playbooks. Use it for comprehensive gap analysis and risk reporting.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.

Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers. It normalizes various threat intelligence objects (indicators, actors) into platform-native schemas, enabling automated ingestion, validation, and routing to SIEM, TIP, and EDR systems. Ideal for integrating new ISAC feeds or building bi-directional intelligence pipelines.

Develops comprehensive profiles for Advanced Persistent Threat (APT) groups, criminal organizations, and hacktivist collectivities. This tool aggregates TTP documentation, campaign data, and attribution indicators from major intelligence sources (MITRE ATT&CK, Mandiant, CrowdStrike) to help organizations update threat models, prioritize defensive controls, and prepare executive briefings on sector-specific risks.