Skill UI

A governance skill designed to secure AI agent tool calls using advanced authorization policies. It implements Cedar policies to control which tools agents can access and under what conditions. Key features include running in 'Shadow mode' for safe observation, 'Enforce mode' for strict blocking, and generating cryptographically signed Ed25519 receipts to provide an immutable, tamper-evident audit trail for every policy decision.

A workflow for converting known binary vulnerabilities into working exploits. Covers stack/heap/kernel pwn techniques using pwntools, libc-database, and ROP. Suitable for porting CTF solutions to authorized remote targets or developing RCE payloads for Linux kernel drivers.

This skill enables authorized security research on RF and Software Defined Radio signals. It focuses on signal identification, protocol analysis, and replay attack feasibility studies within shielded laboratory environments. Users must obtain explicit written permission before probing or exploiting targets. It supports tools like RTL-SDR, HackRF, GNU Radio, and URH for analyzing wireless protocols outside regulated bands without causing interference.

A comprehensive guide to diagnosing and resolving performance bottlenecks in React applications. This skill teaches advanced techniques like state isolation, memoization (using `useMemo`, `useCallback`, and `React.memo`), and list virtualization. It guides users through profiling using React DevTools to identify render hotspots, ensuring components render efficiently and maintain high application responsiveness.

Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces.

This skill enables writing idiomatic Ruby code using metaprogramming and Rails patterns. It covers gem development, performance optimization, and testing frameworks like RSpec. Ideal for building maintainable applications and ensuring code quality through static analysis tools.

This skill generates robust JSON-LD structured data markup for various web components, including blogs, FAQs, tools, and SaaS pages. By implementing standard Schema.org types (WebSite, Article, FAQPage, etc.), you can significantly improve your SEO, boost click-through rates (CTR), and provide clear context to both search engines and AI systems. Includes implementation guidance for modern frameworks like Next.js.

This skill enables encryption of secrets within configuration files using Mozilla SOPS. It supports GitOps workflows, Kubernetes secret management, and secure configuration storage. Users can encrypt files with KMS or PGP keys, decrypt them for editing, and integrate with tools like ArgoCD. It ensures sensitive data remains protected while maintaining file structure visibility for version control.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

This skill provides advanced guidelines for designing robust and effective tools specifically for autonomous AI agents. It shifts the focus from traditional developer APIs to contracts optimized for Language Models (LLMs). Key topics covered include treating tool descriptions as prompt engineering, implementing namespacing, applying the Consolidation Principle, and utilizing Architectural Reduction patterns (like file system access) to maximize agent reliability and workflow complexity.

Operate and evaluate a local Unified AI System through governed MCP tools without provider credentials. This skill enables secure inspection of AI gateways, including prompt enhancement and authorization boundaries, ensuring safety through content review and Docker image analysis before deployment.

Route n8n MCP workflow design, editing, validation, testing, deployment, credential, execution, and debugging tasks to specialist guidance. Use this router at the start of any n8n MCP task to load relevant skills, enforce non-negotiables like skill invocation before actions, validate and verify workflows, and keep secrets secure. Trust live tools and skills over training data.