Skill UI

This utility provides comprehensive capabilities for viewing, creating, uploading, editing, and comparing Markdown files stored in the cloud drive. It is designed for scenarios requiring local content manipulation, such as creating new files, fetching existing content, performing localized text patching (regex replacement), comparing version differences, or overwriting content. Note that it specifically handles structured Markdown files, not docx conversions, and defers cloud space management operations (like searching, moving, or permissions) to other dedicated skills.

Create a single-file HTML presentation deck in an editorial magazine and e-ink style, with swipe navigation, WebGL fluid backgrounds, serif headlines, sans-serif body text, and modular layouts for talks, launches, and shareable presentations.

Generates a complete, single-page SaaS landing page structure. This tool produces a fully contained HTML file, integrating required sections such as Hero, Features, Social Proof, Pricing, and Call-to-Action (CTA). It strictly adheres to an existing design system for colors, typography, and layout, making it ideal for product launches and marketing campaigns.

A robust Go configuration library based on spf13/viper. It resolves configuration values from multiple sources—including flags, environment variables, config files, and defaults—using a fixed, layered precedence pipeline. This ensures reliable and consistent application behavior, allowing developers to bind all sources through a single API, which is essential for building complex CLIs and daemons.

A powerful utility that converts Markdown (`.md`) files into richly formatted Word (`.docx`) documents. Built using pure JavaScript, it requires no external dependencies like Pandoc or LibreOffice. Features include automatic generation of title pages (from YAML front-matter), dynamic table of contents, and accurate embedding of PNG images, making it ideal for technical documentation and reports.

This skill generates comprehensive, tailored instruction files for AI coding assistants like GitHub Copilot and Claude. It supports multiple strategies (flat or nested) and is specifically designed for managing complex monorepos by creating area-scoped instructions using `applyTo` globs. Use it to standardize AI tooling usage across large codebases.

Methodology for assessing Bluetooth Classic BR/EDR targets, including device discovery, SDP service enumeration, profile abuse, legacy pairing weaknesses like KNOB, and BlueBorne-style flaws in older embedded, automotive, and accessory devices.

This expert playbook details advanced techniques for converting an arbitrary memory write primitive into full Remote Code Execution (RCE). It covers targeting multiple system structures across different glibc versions, including GOT entries, __malloc_hook, __free_hook, _IO_FILE vtables, and function arrays. Essential for exploiting modern, hardened binaries and mastering advanced binary exploitation.

This toolset provides a comprehensive development workflow for iterating on MicroPython applications (such as Claude Buddy, Hello, and Snake) on the Cardputer-Adv device. It allows developers to add new apps, push single updated .py files without full re-flashing, monitor device serial logs, or execute one-shot REPL commands directly from the host machine. Essential for rapid prototyping and debugging embedded systems.

The Desktop Commander MCP grants agents deep reach across the user's entire operating environment, extending far beyond the typical IDE sandbox. Key capabilities include maintaining persistent shell sessions, managing long-running background processes, accessing arbitrary filesystems, and natively handling structured data formats (Excel, PDF, DOCX). It also enables remote operations via SSH and large-scale content search, making it ideal for complex, multi-turn development, DevOps, and data analysis workflows.

This router entry point is designed for comprehensive testing of file access, download endpoints, and file upload workflows. Use this guide when validating file paths, detecting Local File Inclusion (LFI), or analyzing vulnerabilities in preview, storage, or extraction processes. It helps categorize whether the security issue relates to path traversal or insecure data processing chains.

An expert playbook detailing advanced techniques for pivoting across compromised Linux hosts. Techniques cover SSH agent hijacking, credential harvesting from common system files, key extraction, and abusing internal services via D-Bus and systemd exploitation, crucial for post-exploitation stages.