Skill UI

This specialized skill is used to trace complex network requests through multi-layered infrastructure, such as reverse proxies, container boundaries, and various header manipulations. It is essential for determining which specific node, proxy rule, or derived header ultimately serves a live request within a sandboxed environment. Use it when analyzing VHost routing, path rewrites, or X-Forwarded headers to pinpoint the decisive backend.

A comprehensive guide to advanced Command and Control (C2) frameworks used in professional red teaming. This skill covers deployment, configuration, and operational tradecraft for tools like Cobalt Strike, Sliver, and Mythic. Topics include creating malleable profiles to mimic legitimate traffic, utilizing DNS/SMB beacons for stealth, implementing BOF for in-memory execution, and building resilient infrastructure via domain fronting and redirectors.

A comprehensive guide detailing offensive methodologies for exploiting Layer 2 (ARP spoofing, VLAN hopping) and Layer 3 (DNS poisoning, DHCP attacks) network infrastructure. Covers credential capture, traffic interception, and privilege escalation using tools like Bettercap, Responder, and ntlmrelayx. Essential for authorized internal penetration testing and red teaming.

A comprehensive guide for authorized red team engagements, covering the end-to-end lifecycle of advanced phishing campaigns. Learn techniques for infrastructure setup (domain aging, SPF/DKIM/DMARC), payload delivery (macro weapons, HTML smuggling), and bypassing email security gateways (MFA bypass, domain spoofing). Essential knowledge for penetration testers and security professionals.

Tinte is an agent-native infrastructure designed for generating, compiling, and managing consistent design systems from a single source of truth. It maintains a graph of 13 semantic OKLCH color tokens, compiling them into multiple formats including shadcn/ui presets, VS Code themes, and terminal configurations. Use it to ensure brand consistency, extract themes from images (via AI), and generate code previews with professional styling.

This expert skill advises critical infrastructure owners and operators (pipelines, railroads, public transit) on complying with complex TSA cybersecurity directives. It provides deep knowledge of CRMP, CIP, CAP, IT/OT segmentation, and incident reporting protocols. Use it for gap assessments, policy drafting, and security architecture reviews related to transportation critical systems.

Apply Robert C. Martin-inspired rules to separate business policy from frameworks, databases, UI, and infrastructure. This skill helps define architectural boundaries, dependency direction, use cases, and interface adapters. Use it for software design decisions involving framework isolation or technology churn to ensure maintainability and clarity.

This skill helps maintainers verify reported bugs in the mcp-toolbox project. It involves analyzing issue reports, checking versions and configurations, and attempting local reproduction to determine if the bug is real, fixed, or misconfigured. The process requires citing specific evidence like file paths and commit SHAs to support verdicts such as confirmed, already-fixed, or client-side issues. It ensures efficient bug triage without unnecessary infrastructure setup.