Skill UI

Provides comprehensive guidance on integrating with Hootsuite's event system. It covers setting up webhook endpoints, implementing secure signature validation, and handling various social stream events (e.g., message sent, post failure). Users can leverage this for building robust, API-driven integrations within the Hootsuite App Directory, including message status polling.

This elite skill acts as an art director and implementation strategist for modern web development. It mandates an 'Image-First' workflow: first generating high-fidelity, premium design images for specific sections (e.g., hero, product features), deeply analyzing these visual references, and only then translating them into clean, structured, and highly implementable frontend code. It is designed to avoid generic AI clichés, ensuring results that are aesthetically superior, structurally sound, and ready for professional deployment.

This skill establishes a robust two-way synchronization bridge between a local working directory (for ARIS audits and local processing) and an Overleaf project. It allows users to maintain complex, local auditing pipelines while enabling real-time, collaborative editing in the Overleaf web UI. Features include controlled 'pull' (detecting remote changes and applying audited merges) and 'push' (syncing local fixes back to the collaborators).

This guide details how to scaffold complete, structured exercise directory setups, including mandatory sections for problems, reference solutions, and conceptual explainers. It outlines precise naming conventions, required files (like readme.md and main.ts), and a robust workflow that ensures the setup passes linting checks. It is ideal for creating new course modules, generating exercise stubs, or structuring large-scale educational curricula.

Methodology for red team testing of on-prem Active Directory, hybrid AD/Entra ID, and ADCS. Covers reconnaissance, credential abuse, privilege escalation, lateral movement, persistence, trust abuse, and Defender for Identity evasion.

This skill orchestrates the constrained resubmission of a highly polished academic paper from one conference or workshop venue to another. It is designed for scenarios where the paper is finalized, and the goal is to absorb specific reviewer critiques (e.g., clarifying statements or minor edits) without introducing new experiments, changing the core bibliography, or restructuring the framework. It ensures the new submission is isolated in a sibling directory, preserving the integrity of prior submissions.

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

This utility serves as a command-line alias for invoking the Claude Code `/pua:kpi` function. It loads necessary configurations (pua-pro) to generate comprehensive Key Performance Indicator (KPI) or performance report cards. It manages configuration files by updating `~/.pua/config.json` while preserving unknown fields and ensuring the directory structure exists.

This tool indexes local files or directories into a persistent FTS5 knowledge base. This allows subsequent search operations to efficiently retrieve highly relevant, focused snippets from the project source without needing to re-read the raw files every time. It is crucial for managing and searching large, complex codebases or detailed project documentation.

This technique exploits the Active Directory attribute `msDS-KeyCredentialLink` by injecting attacker-controlled public keys (Shadow Credentials). Using tools like pyWhisker and Certipy, the attacker forces the target account to register a new key. Subsequently, by leveraging PKINIT (Public Key Cryptography for Initial Authentication in Kerberos), the attacker can obtain a service ticket and recover the target's NT hash, achieving a stealthy, password-less, complete account takeover.

ROADtools is a comprehensive offensive toolkit for Microsoft Entra ID (Azure AD). It consists of ROADrecon for offline directory enumeration (users, groups, roles, policies) and roadtx for advanced token acquisition and exchange. It is designed for authorized red-teaming and penetration testing to discover attack paths and pivot tokens across various Microsoft resources.

This skill enables comprehensive security graph mapping by ingesting both on-premises Active Directory data (via SharpHound) and cloud Entra ID data (via AzureHound) into BloodHound CE. It analyzes complex, hybrid attack paths, allowing security teams to identify critical privilege escalation chains from low-privileged accounts to Tier-0 assets, mapping findings to MITRE ATT&CK.