Skill UI

A comprehensive utility for handling asset loading within Three.js environments. It supports various formats, including GLTF/GLB models, textures, HDR environments, and complex image assets. Features include robust asynchronous loading patterns, progress tracking via LoadingManager, and detailed configuration for PBR materials and environment mapping.

Use the iOS HIG Design Guide skill to sync Apple’s official Human Interface Guidelines, narrow in on relevant sections, and craft feature-specific UI/UX specs that cite sources, cover accessibility/localization, and make actionable product recommendations for iOS features.

This skill provides expertise in TanStack Query (React Query), a powerful tool for asynchronous state management in modern React and Next.js applications. It covers advanced patterns like data fetching, cache invalidation, optimistic updates, and handling SSR hydration, ensuring highly performant and reliable data layers.

Automates project-aware diary maintenance by recording status from conversations, refreshing context, extracting global and project progress, and syncing to Notion/Obsidian while enforcing strict workflow steps.

A comprehensive guide to mastering structured concurrency, reactive streams, and state management in Kotlin. Covers advanced topics like Flow operators (debounce, retryWhen), StateFlow for UI state, and implementing robust asynchronous logic for Android and Kotlin Multiplatform projects. Essential for modern Android development.

This skill details the advanced technique of DCSync, which exploits the Microsoft Directory Replication Service Remote Protocol (MS-DRSR) to impersonate a Domain Controller. It is primarily used in authorized red-teaming and penetration testing to dump sensitive credentials, extract the KRBTGT hash, and ultimately forge Golden Tickets, establishing deep domain persistence. Ideal for security auditors and offensive security professionals.

This skill details the exploitation of the critical Zerologon vulnerability (CVE-2020-1472) found in the Microsoft Netlogon Remote Protocol. It allows an unauthenticated attacker to compromise a domain controller by resetting its machine account password. The guide covers the complete attack chain, including initial exploitation, credential dumping via DCSync, and subsequent privilege escalation in Active Directory environments. Used exclusively for authorized red teaming and security testing.

This skill guide details how to build a robust, SCIM 2.0-compliant API endpoint to manage user identities automatically. It focuses on integrating this API with Okta as an Identity Provider (IdP), enabling automated provisioning, deprovisioning, and attribute synchronization for seamless user lifecycle management in enterprise environments.

Conducts a comprehensive Active Directory penetration test, covering domain enumeration, misconfiguration discovery, and attack path analysis using BloodHound. Techniques include exploiting Kerberos weaknesses (Kerberoasting, AS-REP Roasting) and escalating privileges via DCSync and constrained delegation, culminating in domain compromise demonstration.

This tool automates the entire ML experiment lifecycle, from environment detection (Local, Remote, Vast.ai, Modal) to code synchronization and execution. It handles dependency installation, logging setup (W&B), and optimized deployment to various GPU platforms, ensuring reproducibility and robust workflow management.

A comprehensive guide to writing robust and maintainable tests in Rust. It covers various advanced testing patterns, including Unit, Integration, Async, and Property-Based testing. Learn how to apply the TDD (Test-Driven Development) cycle (RED-GREEN-REFACTOR) to enhance code reliability and ensure high code coverage.

CCPM orchestrates software delivery from PRD through epics and GitHub issues into parallel agent execution, covering planning, decomposition, syncing, workstart, and status checks with mandated script-based reporting.