Skill UI

This skill performs in-depth literature reviews across complex communications domains, including 5G/6G, Wi-Fi, satellite networking, and advanced protocols. It systematically searches user-defined knowledge bases (Zotero, Obsidian, local files) and major academic databases (IEEE, ACM, ScienceDirect) to provide comprehensive survey summaries, related work analyses, and technical landscape overviews.

This skill outlines the architecture and methodology for deploying canary files (honeytokens) across critical file systems. By placing decoy documents with known content in high-value locations, this system monitors for unauthorized modifications, deletions, or encryption attempts. It detects ransomware by triggering high-fidelity alerts via File Integrity Monitoring (FIM) systems, serving as a crucial deception layer that complements existing EDR/AV solutions.

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

A comprehensive guide to hardening Windows Active Directory environments using Group Policy Objects (GPO). This skill configures multiple layers of defense, including AppLocker, Controlled Folder Access, and Attack Surface Reduction (ASR) rules, to prevent ransomware execution paths, block unauthorized file modifications, and restrict lateral movement across the domain.

A comprehensive guide detailing the workflow for firmware reverse engineering. It uses tools like binwalk to identify embedded filesystems (e.g., SquashFS, CramFS), perform entropy analysis to locate hidden data, and extract components. The process covers deep inspection, credential discovery, and reporting for IoT and embedded security assessments.

This guide provides comprehensive best practices for creating optimized, secure, and efficient multi-stage Dockerfiles. Learn how to separate build environments (builder stage) from minimal runtime environments, significantly reducing image size and attack surface. Topics covered include layer caching optimization, security hardening (non-root users), and using minimal base images for reproducible builds.

A comprehensive guide to implementing Role-Based Access Control (RBAC) in ClickHouse. Learn how to manage user authentication, define hierarchical roles, enforce row-level security (RLS) for tenant isolation, restrict data access via column-level grants, and manage resource consumption using quotas and settings profiles. Essential for multi-tenant SaaS and secure data analytics platforms.

The skill generates professional diagrams (flowcharts, architecture, UML, ERD) using the native draw.io desktop CLI. It creates editable .drawio XML files and exports them to common formats like PNG, SVG, PDF, and JPG. Ideal for visualizing complex systems, data flows, or component relationships.

This skill guides the secure configuration of Figma API access across development, staging, and production environments. It details best practices for managing separate API tokens (PATs), file keys, and cache settings. The focus is on implementing robust environment guards and utilizing secret management solutions to prevent cross-environment data leakage and accidental operations.

Provides a comprehensive, production-ready deployment solution for OneNote integrations in containerized environments. This skill addresses critical issues like MSAL token persistence (supporting both file and Redis caches), implementing deep health/readiness checks that validate actual Graph API connectivity, and managing graceful shutdowns. Ideal for containerizing OneNote services for robust, scalable production use with Docker and Kubernetes.

Automates the deployment of static web files (HTML, CSS, JS, images) to a specified domain using Cloudflare Pages via the Wrangler CLI. This skill is ideal for hosting Single-Page Applications (React, Vue), landing pages, portfolios, or documentation sites. It stages the site files and injects necessary cache revalidation headers to ensure content freshness after redeployment.

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.