Skill UI

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

Automated guidance for Kubernetes service management in the DevOps Advanced domain, offering best-practice advice, code snippets, and config checks for services, Terraform, Helm, and monitoring workflows.

Provides comprehensive security best practices for integrating the Perplexity API. This guide covers secure API key management using environment variables, critical query sanitization (stripping PII like emails, phone numbers, and credit cards), and implementing domain filters for compliance. Essential for developers building production applications that handle sensitive user data.

This skill details advanced techniques for performing stealthy lateral movement across Windows domains using Windows Management Instrumentation (WMI). It covers the abuse of native tools like Impacket's wmiexec.py and CrackMapExec, enabling remote command execution, Pass-the-Hash attacks, and fileless techniques, crucial for authorized red team engagements and security auditing.

Register ICANN domains via a REST API with crypto payments so AI agents can autonomously check availability, pay in USDC/USDT/ETH/BTC, and retrieve DNS management credentials.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

Provides a standardized and robust skeleton for developing full-stack extensions that integrate both a backend API service and a frontend Admin UI. This pattern enforces clear separation of concerns, utilizing shared domain layers for data consistency while ensuring that API and Admin code are correctly registered using specific entry points. Ideal for complex applications requiring unified management interfaces and robust backend logic.

This assistant guides users through managing Azure resources entirely via the command line using the Azure CLI (`az`). It identifies the correct commands, prompts for missing required parameters (like resource groups or locations), constructs the full command sequence, executes the action, and diagnoses any output errors to ensure successful deployment and configuration of services across Compute, Networking, and other Azure domains.

The Agent Harness provides a robust, verifiable loop structure for driving complex goals across specialized domains. It converts a high-level objective into a verifiable task plan, executes tasks sequentially using domain-specific tools, and rigorously verifies every step with machine-run checks. The system includes mechanisms for retries, budget management, and mandatory human escalation, ensuring no goal is closed until all progress is verifiably complete or explicitly waived.