Skill UI

Execute end-to-end automated testing for mobile applications across both iOS and Android platforms. This skill simulates real user interactions, covering UI flows, gestures (swipe, pinch), form validation, and platform-specific behaviors (e.g., Safe Area handling, Android back button logic). It supports industry-standard frameworks like Appium, Detox, and Maestro, making it essential for ensuring cross-platform quality assurance and robust CI/CD pipelines.

A comprehensive guide to managing training data and model artifacts securely on cloud GPU instances (e.g., Vast.ai). It covers best practices for data transfer (SCP, compressed, cloud staging), implementing AES-256 encryption, managing checkpoints to S3, and performing secure cleanup before instance destruction, ensuring compliance and data integrity.

Provides Wycheproof test vectors for validating cryptographic implementations against known attacks and edge cases, making it ideal for CI regression sweeps and third-party crypto audits.

This agent simulates the profound cognitive structure, aesthetic intuition, and strategic mindset of Steve Jobs. It is designed for users who need to approach product development, design, or business strategy with a visionary, minimalist, and highly curated perspective. Use it to strip away complexity, define core user experiences, and articulate powerful, simple narratives.

Vizcom is an advanced AI platform designed to accelerate the product ideation and visualization process. It transforms rough inputs, such as hand-drawn sketches, basic line art, or simple text descriptions, into high-fidelity, photorealistic 3D renders. It is ideal for concept generation in physical products like furniture, electronics, and consumer goods, allowing designers to explore aesthetic variations and generate stunning marketing visuals.

A comprehensive, systematic framework for auditing and improving web UI designs and frontend code. It teaches core principles like grayscale-first design, constrained scaling (for spacing, type, and color), and establishing clear visual hierarchy. Use this guide when needing to refine an existing UI that 'looks off,' or requires professional structural and aesthetic improvements.

This skill analyzes the cryptographic algorithms, key management systems, and file encryption routines employed by various ransomware families. It covers hybrid schemes like AES-RSA and modern ciphers such as ChaCha20. Use this when assessing data recovery feasibility, reverse engineering ransomware binaries, identifying implementation weaknesses (e.g., IV reuse, key derivation flaws), or developing custom decryptor tools.

A detailed guide and set of queries for detecting Golden Ticket attacks in Active Directory environments. This methodology analyzes Kerberos TGT anomalies, including mismatched encryption types (e.g., RC4 in AES-only domains), impossible ticket lifetimes, and TGS requests lacking prior TGTs. Use this during threat hunting or post-breach assessment when the KRBTGT account hash may be compromised.

Kerberoasting is a credential access attack (T1558.003) targeting Active Directory service accounts with Service Principal Names (SPNs). This skill demonstrates using Impacket to request Kerberos TGS tickets for these accounts. The resulting RC4 or AES-encrypted tickets are then cracked offline using tools like Hashcat or John the Ripper, allowing attackers to recover service account credentials for lateral movement during authorized penetration testing or red-team engagements.

This skill guides the secure implementation of AES-256 in GCM mode (FIPS 197) for protecting files and data stores at rest. It covers best practices for key derivation from passwords (using PBKDF2/Argon2), proper management of initialization vectors (IVs)/nonces, and applying authenticated encryption (AEAD) to detect tampering. Use this when establishing robust security controls or performing security assessments.

This skill implements a simplified version of the Signal Protocol, focusing on robust end-to-end encryption (E2EE) for messaging applications. It covers critical cryptographic components including X3DH key agreement, the Double Ratchet algorithm for continuous key management, and AES-256-GCM for message encryption. The implementation ensures forward secrecy, meaning that compromising a current key does not reveal past messages. Use this when designing, building, or evaluating the security architecture of a messaging service to guarantee that only communicating parties can read the messages.

A comprehensive guide for implementing SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration, including SP-initiated and IdP-initiated flows, secure attribute mapping, advanced certificate management (SHA-256, AES-256), and security hardening practices required for enterprise-grade identity access management (IAM) deployments. Learn to establish robust and compliant authentication architecture.