Skill UI

This utility serves as a command-line alias for invoking the Claude Code `/pua:kpi` function. It loads necessary configurations (pua-pro) to generate comprehensive Key Performance Indicator (KPI) or performance report cards. It manages configuration files by updating `~/.pua/config.json` while preserving unknown fields and ensuring the directory structure exists.

This technique exploits the Active Directory attribute `msDS-KeyCredentialLink` by injecting attacker-controlled public keys (Shadow Credentials). Using tools like pyWhisker and Certipy, the attacker forces the target account to register a new key. Subsequently, by leveraging PKINIT (Public Key Cryptography for Initial Authentication in Kerberos), the attacker can obtain a service ticket and recover the target's NT hash, achieving a stealthy, password-less, complete account takeover.

ROADtools is a comprehensive offensive toolkit for Microsoft Entra ID (Azure AD). It consists of ROADrecon for offline directory enumeration (users, groups, roles, policies) and roadtx for advanced token acquisition and exchange. It is designed for authorized red-teaming and penetration testing to discover attack paths and pivot tokens across various Microsoft resources.

This skill enables comprehensive security graph mapping by ingesting both on-premises Active Directory data (via SharpHound) and cloud Entra ID data (via AzureHound) into BloodHound CE. It analyzes complex, hybrid attack paths, allowing security teams to identify critical privilege escalation chains from low-privileged accounts to Tier-0 assets, mapping findings to MITRE ATT&CK.

NetExec is a powerful, protocol-oriented tool for penetration testing, designed for assessing and exploiting Windows and Active Directory environments. It facilitates lateral movement by authenticating over protocols like SMB, WinRM, LDAP, and MSSQL. Key functions include password spraying, comprehensive network enumeration, command execution, and dumping critical credentials (SAM, LSA, NTDS) during post-exploitation phases.

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.

This skill helps developers create highly focused, folder-specific documentation (`CLAUDE.md` and `AGENTS.md`). It systematically analyzes all files in a target directory to extract project purpose, operational constraints, naming conventions, and critical decisions. This deep context ensures that future AI agents (like Claude or Codex) operate with localized knowledge, preventing them from relying on global, generalized instructions and improving their accuracy in that specific domain.

This tool scaffolds a new Claude Code plugin from scratch, generating a standardized directory structure that meets all architectural requirements. It automatically creates necessary components, including plugin.json, skills, commands, agents, ADR documentation, and smoke tests, ensuring a robust and compliant plugin development environment.

This tool automates the creation of a standard directory structure for a Domain-Driven Design (DDD) Bounded Context. It is essential when starting a new subdomain, separating a large monolithic application, or setting up a fresh, well-organized module structure, adhering to best practices for domain, application, and infrastructure layers.

A comprehensive security auditing tool designed for Claude Code environments. It scans the entire configuration directory for security vulnerabilities, misconfigurations, injection risks, hardcoded secrets, and overly permissive settings. Ideal for initial project setup, pre-commit checks, or routine security hygiene.

This skill provides comprehensive capabilities for executing, monitoring, and managing the lifecycle of workflows. It supports both structured MCP workflow management (execute, pause, resume, cancel) and invoking/resuming native JavaScript workflows defined in the `.claude/workflows/` directory. Use it to orchestrate complex, multi-step processes, including sequential, parallel, and conditional logic.