Skill UI

This skill automatically gathers and structures comprehensive context for Apple product development. It analyzes existing project files (like README, Info.plist, and code) and prompts the user for details across product overview, target platforms, technology stack, design system, and accessibility requirements. The output is a structured context document used by other specialized skills to ensure consistent, informed design and development decisions.

This SDK provides Azure Functions extensions for handling Microsoft Entra ID custom authentication events within a .NET environment. Developers can intercept key stages of the authentication lifecycle, such as token issuance, attribute collection, and OTP sending. Use cases include enriching access tokens with custom claims, fetching external user data to populate profiles, and customizing the sign-up user experience.

Implements advanced Role-Based Access Control (RBAC) for collaborative Obsidian workspaces. This system allows administrators to define granular permissions (read, write, delete, manage) for different user roles (Admin, Editor, Viewer) across specific folders or paths within a shared vault. It is achieved via a custom plugin that intercepts file operations, ensuring data integrity and proper collaboration control in enterprise team environments. Ideal for managing large, secure knowledge bases.

This skill provides comprehensive capabilities for working with PowerPoint files (.pptx). It supports end-to-end workflows, including creating new presentations from scratch based on design principles, sophisticated content editing, and deep structural analysis. Users can extract plain text, access raw underlying XML (for notes, comments, and layouts), and apply expert design knowledge—such as selecting appropriate color palettes and establishing visual hierarchy—to ensure professional and effective presentations.

Comprehensive guide to managing data securely in Replit applications. This skill covers three core storage systems: PostgreSQL for structured data and complex queries; Replit KV Database for caching and session management; and Object Storage for file uploads and blobs. Learn best practices including parameterized queries, TTL implementation, and secure data access patterns.

Analyzes CORS configurations via the cors-policy-validator plugin to spot misconfigurations, validate headers or files, and report vulnerabilities so developers can secure web apps and APIs from unsafe cross-origin access.

This skill functions as a documentation architect, capable of generating highly structured wiki catalogues and comprehensive onboarding guides directly from a codebase. It scans the repository, detects architectural patterns, identifies technical layers (presentation, business logic, data access), and creates two distinct guides: a Principal-Level Guide for seniors and a Zero-to-Hero Path for newcomers, ensuring every detail is cited with specific file paths.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

This guide provides a structured methodology for proactively detecting and hunting various insider threat behaviors. It focuses on identifying indicators such as unusual data access, off-hours activity, mass file downloads, and privilege misuse. It is crucial for threat-hunting during incident response or investigating departed employees for potential data theft.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.