Skill UI

This skill orchestrates the complete lifecycle for integrating Power Pages with Dataverse via Web API. It handles code integration into the site's frontend, automates setting table permissions, and manages the deployment process for secure CRUD operations. Use this when you need to connect your Power Pages site to Dataverse data or implement complex data fetching on the frontend.

This tool lists all existing Power Platform data connections in the current environment using the Power Apps CLI. It is essential for retrieving specific Connection IDs needed when integrating data sources into code-based applications or workflows.

This tool utilizes the Microsoft Learn Command Line Interface (CLI) to retrieve the most current and official documentation, code samples, and best practices directly from Microsoft Learn. It is ideal for developers needing accurate details on Azure, .NET, Microsoft 365, SDKs, APIs, configuration limits, or troubleshooting Microsoft-specific errors, ensuring reliance on authoritative sources rather than internal training data.

This tool reviews and migrates deprecated wildcard (*) values found in Power Pages Web API field settings. It replaces them with explicit, least-privilege Dataverse column definitions. Use this when addressing Web API wildcard deprecation, reviewing data exposure, or fixing integration failures across traditional and SPA site architectures.

This mechanism facilitates the implementation of reversible and compatibility-safe transitions across critical system components. It is essential for managing changes in schemas, APIs, protocols, configurations, or data structures, ensuring that rollbacks are possible and the integrity of existing data is preserved throughout the migration process. Best practices include defining explicit forward and rollback paths, handling mixed-version operations, and ensuring idempotency for retries.

This assistant specializes in complex cross-border and comparative legal analysis. It helps research legal questions across multiple global jurisdictions and provides a structured framework for evaluating legal risks. It utilizes the Legal Data Hunter MCP to access 13M+ legal documents covering case law, legislation, and doctrine from over 50 countries. The output is flexible, requiring mandatory inline citations for all legal claims, and emphasizes aggressive data quality reporting to flag gaps.

Expert guide for Gemini Notebook CLI (nlm) and MCP server. Enables programmatic interaction with Gemini Notebook including creating/managing notebooks, adding sources (URLs, YouTube, text, Google Drive), generating content (podcasts, reports, quizzes, flashcards, mind maps, slides, infographics, videos, data tables), conducting research, chatting with sources, and automating workflows. Triggers on mentions of nlm, notebooklm, Gemini Notebook, podcast generation, audio overview, refactor document, critique draft, or any Gemini Notebook-related automation task.

A comprehensive guide to conducting authorized security assessments across API-driven applications. This skill covers REST, gRPC, and WebSocket protocols, addressing the full OWASP API Security Top 10 2023. Techniques include identifying Broken Object Level Authorization (BOLA/IDOR), broken authentication, excessive data exposure, and implementing fuzzing for various API endpoints. Designed for professional penetration testing engagements.

An advanced, automated pipeline designed for comprehensive, deep-dive Open Source Intelligence (OSINT) gathering and reconnaissance against authorized domains. It executes the full methodology—from passive data harvesting and subdomain discovery to multi-agent content fan-out, vulnerability identification (BOLA/IDOR), and automated findings generation. The output is a single, consolidated, multi-tab deliverable (XLSX), eliminating the need for manual follow-up or superficial reporting.

A read-only diagnostic tool used to estimate the total download size and projected sync frequency cost of an offline data profile before deploying it to end-users. It helps gauge the impact of data scope changes and prevent unexpected data usage costs.

A practical methodology for turning a known vulnerability into a stable working remote exploit. Covers stack overflow, heap exploitation, and Linux kernel pwn, addressing real-world gaps between local CTF success and reliable remote execution: libc version mismatches, heap spray timing, SMEP/SMAP/KASLR, stack alignment, and network buffering. Uses pwntools with GEF/pwndbg, ROPgadget/Ropper, one_gadget, libc-database, and qemu-system.

A comprehensive guide and workflow tool for converting high-fidelity visual designs from Stitch into production-grade, component-based dashboards. Targets the modern stack including React 18, Vite, TypeScript, and TanStack Query. It integrates design tokens from DESIGN.md for styling consistency, supports complex data visualization, and includes patterns for Web3 integration (ethers/viem) for reading on-chain data.