Skill UI

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.

This specialized skill reviews user interface animations, motion patterns, and interactive code (CSS, Framer Motion, etc.) against a strict, high-craft standard. It evaluates not only functionality but also performance, accessibility, physical correctness, and adherence to motion design principles. Use it when reviewing diffs related to transitions, keyframes, or gestures to ensure the motion feels right, not just that it runs.

This guide provides a structured approach to red-teaming Large Language Models (LLMs) to detect sensitive data leakage from system prompts. It simulates advanced attacks—including prompt injection, instruction override, and encoding tricks—to identify embedded secrets, API keys, and proprietary business logic. Essential for validating adherence to OWASP LLM07 and securing AI applications against data exfiltration.

A comprehensive red-teaming skill for assessing the security posture of Retrieval-Augmented Generation (RAG) pipelines. It systematically probes two critical injection surfaces: poisoned retrieved context (indirect prompt injection) and embedding manipulation. Use this skill to validate retrieval guardrails, ensure data leak prevention, and demonstrate vulnerabilities in LLM-powered knowledge assistants.

This comprehensive skill provides a holistic approach to building modern, accessible, and visually stunning user interfaces. It combines the highly accessible components of shadcn/ui (built on Radix UI), the utility-first power of Tailwind CSS, and sophisticated visual design principles (Canvas). Use this when developing complex React applications, implementing full design systems, ensuring responsive layouts across devices, and requiring professional-grade visual compositions, from dashboards to marketing posters. It guarantees consistency, accessibility, and rapid prototyping.

This skill guides the verification of software build provenance and signatures using industry standards like SLSA and Sigstore. It leverages tools like cosign and slsa-verifier to enforce keyless OIDC identity and confirm that artifacts were built by trusted sources without tampering. It is essential for hardening CI/CD pipelines and securing the entire software supply chain against advanced attacks.

Workthreads analyzes a team's coding history across multiple repositories to generate a structured weekly status report. It clusters raw logs into 'work threads' and automatically tags their lifecycle status (new, open loops, closed, reverted). This is essential for leads needing a high-level, actionable summary of project progress, outstanding tasks, and completed features without reading thousands of lines of raw activity.