Skill UI

This skill transforms vague feature briefs, PRD sections, or general ideas into highly detailed, actionable user stories. It enforces industry best practices by including standard formats (As a... I want to...), behavioral acceptance criteria (Given/When/Then), edge cases, and a Definition of Done. Ideal for product managers and business analysts who need to create estimate-ready tickets for development teams.

Business Email Compromise (BEC) is a sophisticated social engineering fraud where attackers impersonate executives or vendors to trick employees into making unauthorized fund transfers or disclosing data. This skill provides comprehensive detection techniques by integrating email gateway rules, behavioral analytics, and mandatory financial process controls. It is essential for investigating suspected account compromises and building robust defenses against advanced phishing attacks.

This skill provides advanced threat hunting queries for Microsoft Sentinel/Log Analytics. It detects the behavioral and string fingerprints left by popular offensive Entra ID enumeration tools (like ROADtools, AADInternals, and AzureHound) within both MicrosoftGraphActivityLogs and AADGraphActivityLogs. Use this when investigating suspicious Graph API activity, identifying internal reconnaissance, or building detection rules to surface active intrusions.

A comprehensive skill for triaging npm packages and dependency lockfiles against supply-chain threats. It utilizes heuristic scanning (GuardDog), manual tarball inspection, and dynamic detonation in isolated environments to detect malicious behavior such as credential exfiltration, reverse shell execution, and self-propagation. Essential for secure code review and CI/CD pipeline gating.

An open-source automation framework for conducting multi-turn, adversarial red-teaming against conversational LLMs. PyRIT simulates real-world attacker behavior using advanced orchestrators (Crescendo, TAP) and scorer feedback loops. It is designed for comprehensive security assessments of AI agents and chatbots, going far beyond single-shot prompt testing to evaluate robustness under gradual or adaptive attacks.

This critical protocol is the ultimate measure for dealing with deeply corrupted, unmaintainable, or structurally rotten code modules. Instead of risky patching, it mandates a controlled, multi-phase process to completely delete the target and rebuild it from scratch. It ensures precise identification of all public interfaces, implicit contracts, and working behaviors (the Preservation List) before any removal occurs, guaranteeing the new implementation matches the original functionality while resolving deep architectural debt.

A systematic, non-mutating investigation designed for complex software failures, including bugs, regressions, crashes, and flaky behavior. This skill launches four specialized, read-only sub-agents in parallel to perform deep root-cause analysis, trace code paths, pinpoint the smallest failing seam, and predict the quickest path to confirming or fixing the issue. It is designed purely for diagnosis and hypothesis generation.

Provides comprehensive guidelines and utilities for modern unit testing using Jest and React Native. Covers Test-Driven Development (TDD) workflows, Behavior-Driven Development (BDD) principles, advanced mocking strategies for modules and GraphQL hooks, and implementing reusable factory functions for props and data. Use this skill to write robust, maintainable, and highly structured unit tests.

This skill performs a deep comparison of two code versions to verify semantic equivalence, going beyond simple syntax diffing. It uses semi-formal tracing techniques to trace both versions against shared specifications and boundary conditions (e.g., null, zero, max/min). Ideal for confirming if a refactor, rewrite, or migration has unintentionally altered the code's behavior, answering the question: "Did I break anything?"

This skill generates a detailed, step-by-step, interprocedural execution trace for a given piece of code and specific input scenario. It resolves name ambiguities, tracks type transitions, and highlights non-obvious behaviors (like implicit coercions or side effects). Use it when a user is confused about how code behaves, allowing for a deep dive into the actual execution path to clarify assumptions versus reality.

This skill provides a comprehensive framework for identifying, nurturing, and converting highly engaged users into active developer advocates, champions, and community contributors. It covers behavioral signals, mapping users onto the engagement spectrum, and designing effective ambassador or champion programs that offer genuine value, ensuring sustainable community growth and product evangelism.

A constraint-based protocol designed to professionalize existing code by normalizing comments and performing safe, non-semantic cleanup. This skill converts informal, outdated, or missing documentation into clear, concise, and professional standards without altering the core logic or behavior. Ideal for preparing code for code review, open-sourcing, or formal documentation.