Skill UI

An advanced application framework for Go, combining a reflection-based Dependency Injection (DI) container with robust lifecycle management. It provides features like `fx.Module` for modular composition, signal-aware run loops (handling SIGINT/SIGTERM), and structured hooks (OnStart/OnStop). Ideal for building long-running services, such as daemons, HTTP servers, or workers, ensuring graceful startup and shutdown.

Methodology for assessing Bluetooth Classic BR/EDR targets, including device discovery, SDP service enumeration, profile abuse, legacy pairing weaknesses like KNOB, and BlueBorne-style flaws in older embedded, automotive, and accessory devices.

An expert playbook detailing advanced techniques for pivoting across compromised Linux hosts. Techniques cover SSH agent hijacking, credential harvesting from common system files, key extraction, and abusing internal services via D-Bus and systemd exploitation, crucial for post-exploitation stages.

This skill guides developers on integrating CommunityToolkit.Mvvm ViewModels with Microsoft's Dependency Injection system. It covers setting up the composition root using the .NET Generic Host, managing service lifetimes (Singleton, Transient, Scoped), implementing constructor injection, and correctly registering messaging services (IMessenger) for robust, cross-platform XAML applications (WPF, MAUI, Uno, Avalonia).

This resource provides documentation and examples for common design patterns utilized within the Quarkus framework. It is designed to guide developers in implementing robust, cloud-native microservices architecture by adhering to established best practices of the Quarkus ecosystem.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

A comprehensive reference for the `uc` CLI, designed for managing decentralized, self-hosted clusters. Use this skill to deploy services via Docker Compose, configure advanced networking, and manage infrastructure components like machines, volumes, and ports. Supports Caddy ingress routing, WireGuard networking, and scaling across peer machines, making it ideal for robust, highly available self-hosting environments.

A comprehensive REST API for sending and receiving multi-channel messages, including iMessage (blue bubbles), SMS, and RCS. This skill allows developers to integrate messaging capabilities into server-side applications, supporting advanced features such as group messaging, reactions, typing indicators, and status callbacks. It also handles inbound messages via webhooks, making it ideal for building robust, real-time communication services that require programmatic control over messaging lifecycles.

The RunAPI CLI serves as the dedicated execution layer for interacting with RunAPI's suite of advanced AI models. It allows developers to programmatically generate multimodal content, including images, videos, and music/audio, directly from the terminal or CI/CD pipeline. Users can submit one-off jobs, manage asynchronous tasks, and pass complex JSON request bodies to various services like Suno, Claude, and Gemini, making it essential for robust AI automation workflows.

A comprehensive guide to creating a robust API versioning strategy document. It helps service teams define consistent rules for evolving their APIs over time, covering versioning schemes (URL path, headers), lifecycle policies (Stable, Deprecated, Sunset), and classifying breaking changes. Essential for maintaining backward compatibility and managing API deprecation.

This skill generates a comprehensive technical debt register for any team or service. It guides users to input critical data points (e.g., business impact, effort, tech stack) and produces a structured report that categorizes debt (Architecture, Security, Testing, etc.). The output includes a calculated priority score and a quarterly debt reduction roadmap, enabling deliberate, business-aware engineering decision-making.

This technique exploits the Active Directory attribute `msDS-KeyCredentialLink` by injecting attacker-controlled public keys (Shadow Credentials). Using tools like pyWhisker and Certipy, the attacker forces the target account to register a new key. Subsequently, by leveraging PKINIT (Public Key Cryptography for Initial Authentication in Kerberos), the attacker can obtain a service ticket and recover the target's NT hash, achieving a stealthy, password-less, complete account takeover.