Skill UI

This skill simulates high-impact container breakout techniques, demonstrating how to achieve root compromise on the underlying host operating system. It covers exploiting misconfigurations (e.g., privileged pods, hostPath mounts, exposed Docker sockets) and leveraging known vulnerabilities in runC/containerd, making it essential for authorized penetration testing and assessing the blast radius of a compromised microservice.

This skill guides the secure migration from classical cryptography (RSA, ECC) to quantum-resistant algorithms (PQC). It covers building a Cryptographic Bill of Materials (CBOM), identifying data at risk (HNDL), and deploying hybrid key exchange protocols like X25519MLKEM768 to ensure long-term data security against quantum threats.

This skill guides the deployment and operation of the Havoc C2 framework, enabling advanced adversary emulation. It utilizes Yaotl profiles to generate highly evasive agents (Demon) that employ sophisticated techniques like indirect syscalls and sleep obfuscation. The scope covers the full red-teaming lifecycle, including C2 setup, payload generation, post-exploitation, and lateral movement, making it ideal for authorized security testing and validating EDR detection capabilities.

Trivy is an open-source, comprehensive scanner used to find vulnerabilities (CVEs), misconfigurations, secrets, and license issues across multiple targets. It is essential for implementing 'shift-left' security gates in CI/CD pipelines, scanning container images, Infrastructure-as-Code (IaC) like Terraform/Kubernetes, and generating/re-scanning SBOMs for supply chain transparency.

KubeEye is a comprehensive cluster inspection tool designed for Kubernetes environments, particularly within KubeSphere. It systematically detects issues across workloads, nodes, and configurations by integrating multiple policy engines, including OPA/Rego, PromQL, file integrity checks, kernel parameter validation, and systemd health checks. Users can define custom inspection rules (InspectRule), schedule checks (InspectPlan), and retrieve detailed reports (InspectResult) to ensure cluster compliance and stability.

This skill consumes federation_spend events to aggregate per-peer spending across rolling time windows (1h, 24h, 7d). It implements a crucial circuit breaker mechanism by monitoring if any peer's spending exceeds a predefined threshold, ensuring the stability and resource management of the federation. Used to establish spending baselines and verify budget constraints.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This tool facilitates querying structured federation audit logs, providing deep visibility into system access and changes. It supports advanced filtering based on major compliance frameworks (HIPAA, SOC2, GDPR) and event severity levels. By summarizing total events, PII detections, and trust changes, it is an essential resource for performing security audits, ensuring data privacy, and maintaining regulatory compliance.

A comprehensive guide to designing and structuring a scalable home or small-lab network. This skill covers best practices for IP addressing, network segmentation (VLANs), selecting reliable gateways (like pfSense/OPNsense), and planning for future growth, ensuring stability and avoiding common pitfalls like Double NAT. Ideal for advanced users building robust IoT, server, and guest networks.

A comprehensive guide for optimizing systems requiring ultra-low latency and high freshness, such as real-time dashboards, market data feeds, streaming agents, and HFT infrastructure. It details how to measure critical metrics (p95 latency, throughput, freshness age) across the entire 'hot path,' providing structured steps for optimization, caching, and rigorous verification to ensure performance reliability.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.