Skill UI

Comprehensive guide for configuring Bring Your Own Key (BYOK) for major AI providers, including OpenAI, Anthropic, Google Gemini, Azure, and custom endpoints. This allows users to bypass default quotas, manage costs directly with the source provider, and utilize a wide range of specialized models within the Cursor IDE. It covers setup steps, security best practices, and cost monitoring strategies.

This methodology converts verbose, natural language system instructions into an atomic, structured-label format (e.g., trigger:, action:). By structuring rules, it bypasses the limitations of natural language processing, ensuring LLMs allocate full attention to every constraint, thereby maximizing compliance, improving reliability, and reducing token usage.

This skill guides security analysts through advanced threat-hunting methodologies focused on detecting DNS-based persistence. It analyzes passive DNS history, zone file audits, and API data (like SecurityTrails) to identify unauthorized record modifications, subdomain takeovers, and DNS hijacking attempts that bypass traditional security controls. Ideal for SOC analysts and threat hunters.

This guide details comprehensive physical security penetration testing techniques, essential for red teaming engagements. It covers methods such as tailgating, badge cloning (RFID), lock bypassing, and deploying rogue network devices (e.g., Pineapple, LAN Turtle). It provides practical toolkits and MITRE ATT&CK mapping to evaluate an organization's physical and digital control weaknesses.

Lambda is a compact, machine-native communication protocol specifically designed for agent-to-agent (A2A) messaging. It functions as a shared, unambiguous vocabulary built from 'atoms' (2-character codes), completely bypassing the need for human natural language interpretation. It is ideal for orchestrators, task delegation, and logging structured coordination signals (like heartbeats or state changes) in multi-agent systems. Crucially, Lambda is intended only for machine communication, not for user-facing dialogue.

A comprehensive expert playbook detailing advanced Large Language Model (LLM) prompt injection techniques. Covers direct methods (instruction override, role play), indirect attacks (RAG poisoning, web data manipulation), and sophisticated tool/function calling abuse for data exfiltration and security bypass. Essential for rigorous AI application security testing.