Skill UI

This tool automates the deployment of deception-based honeytokens within Active Directory environments. It creates fake privileged accounts, decoy SPNs for Kerberoasting detection, and misleading GPOs with password traps. Designed for advanced security teams to detect reconnaissance, lateral movement, and credential theft with high fidelity.

This tool facilitates comprehensive purple team exercises by executing Atomic Red Team tests mapped to MITRE ATT&CK techniques. It is primarily used for gap analysis, validating detection coverage (blue team visibility) against specific threat vectors, and building continuous, automated adversarial emulation pipelines in CI/CD environments.

Guides Flutter/Dart teams on using Mockito for generating mocks, stubbing behavior, verifying interactions, capturing arguments, and managing fake versus real objects so tests stay predictable and maintainable.

A comprehensive guide on using the nacos-cli tool to discover, install, update, merge, and publish AI skills stored in a Nacos registry. It covers key commands for listing, getting, uploading, reviewing, and releasing skills, ensuring version-aware publishing workflows for personal and team use.

A systematic methodology for initiating projects, features, or major changes. It mandates creating a detailed, structured specification (spec) before writing any code, ensuring all assumptions are surfaced and vague requirements are translated into measurable success criteria. This process involves four validated phases: Specify, Plan, Tasks, and Implement, guaranteeing alignment between the human team and the development process.

Comprehensive reference for red teamers and penetration testers on executing Active Directory attacks, covering reconnaissance, credential harvesting, Kerberos abuses, lateral movement, and domain persistence techniques against Windows domains.

Provides step-by-step techniques for assessing AWS security, covering IAM enumeration, privilege escalation, SSRF metadata attacks, S3/Lambda exploitation, and red-team persistence workflows with recommended tools and commands.

Streamlines the process of providing code review feedback by enforcing a highly structured, ultra-compressed format. It guides users to cut through noise and deliver actionable, single-line comments (Location: Problem. Fix.) while maintaining critical context like severity and technical rationale. Ideal for team settings prioritizing efficiency and high code quality.

This skill provides comprehensive capabilities for managing the entire issue lifecycle on GitHub. Users can create structured bug reports, feature requests, and tasks, and also read, list, and update existing issues. It supports setting labels, assigning owners, managing milestones, and tracking complex dependencies. Ideal for engineering teams needing robust project backlog management.

This skill analyzes an entire .NET solution (containing multiple projects) to map out a systematic migration path from Oracle to PostgreSQL. It scans for common Oracle indicators (NuGet packages, connection strings, code usage) and classifies every project into categories like MIGRATE, SKIP, or ALREADY_MIGRATED. The output is a structured, actionable Master Migration Plan, helping development teams manage large-scale database transitions efficiently.

Guides teams through creating a complete GitHub Copilot configuration by outlining required instructions, reusable skills, and agent/workflow files tailored to the chosen tech stack and workflow preferences.

This guide adapts the Conventional Commits standard for Chinese development teams. It provides comprehensive rules for writing commit messages, including structured formats for subject, body, and footer. It also details the integration and configuration of automation tools like commitlint, conventional-changelog, and husky, ensuring a consistent, readable, and traceable version history.