Skill UI

This skill provides a comprehensive workflow for verifying the integrity of a system's boot chain using TPM 2.0. It covers local validation by reading Platform Configuration Registers (PCRs) and replaying the event log, and remote attestation by generating and checking signed quotes. Use cases include enforcing Zero Trust device posture, detecting firmware tampering, or establishing secure secret baselines.

A comprehensive reference for managing Uncloud, a decentralized self-hosting platform. This guide details using the `uc` CLI to deploy services, configure Caddy ingress, manage ports (HTTP/HTTPS/TCP/UDP), scale workloads, and inspect logs across a WireGuard mesh cluster. Ideal for setting up resilient, self-owned microservices infrastructure.

A comprehensive guide for authors targeting ACM MobiCom. It assists in conference fit assessment, manuscript re-framing, and strengthening the evidence base for mobile networking and wireless systems papers. Learn how to position your work against specific venue requirements, distinguish contributions (e.g., networking vs. platform), and structure your paper for optimal review impact.

Provides rigorous guidelines for conducting robust, verifiable, and reproducible evaluations in networking research. It emphasizes moving beyond simple simulations by demanding the use of real target platforms, documenting full system provenance (traces and configs), establishing honestly tuned baselines, and reporting detailed measurement statistics and uncertainty. Essential for authors aiming for top-tier conference submissions.

This guide helps authors determine if their robotics research is suitable for IEEE Transactions on Robotics (T-RO). It focuses on establishing the necessary rigor, emphasizing that contributions must be complete and rigorously validated, preferably demonstrated on real robots or high-fidelity simulation platforms. It covers scope, experimental validation standards, and manuscript structure.

This guide addresses the stringent requirements for empirical evaluation in compiler and runtime systems, aligning with SIGPLAN's guidelines. It covers critical aspects such as proper warmup discipline, reporting variance and confidence intervals, selecting principled benchmarks, pinning toolchains, and ensuring cross-platform validity. It provides a protocol for generating verifiable measurement logs for academic publications.

This guide outlines the necessary steps to ensure that parallel computing performance papers are scientifically reproducible. Since parallel results depend heavily on machine architecture, topology, and runtime conditions, proper documentation must cover everything from CPU/GPU specifications and interconnects to thread pinning policies, random seeds, and compiler flags. The focus is on proving the scaling trend, not just the absolute numbers, allowing results to hold true across different hardware platforms.

A comprehensive guide for ensuring robust scientific reproducibility in robotics research (RSS). It structures evidence into distinct 'Replication Tiers' (e.g., Rerunnable, Auditable), distinguishing between the computational half (code, seeds) and the physical half (robot, environment, human protocol). It mandates the use of platform ledgers and raw trial logs to convert claims of trust into verifiable, auditable evidence.

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.