Skill UI

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized container-security assessment. Use when executing an approved breakout test, demonstrating the real impact of a privileged or hostPath workload, or validating that escape mitigations actually hold. Keywords: container breakout, privileged, hostPath, docker.sock, runC CVE-2019-5736, CVE-2024-21626, release_agent, nsenter. Do not use for defensive detection of these techniques - use detecting-container-escape-attempts.

Velociraptor is a powerful open-source platform for endpoint visibility and digital forensics. It allows users to deploy agents across thousands of endpoints and execute sophisticated VQL (Velociraptor Query Language) queries. This enables large-scale, on-demand forensic artifact collection, TTP hunting, and continuous monitoring during incident response, even on air-gapped or unmanaged systems.

An open-source automation framework for conducting multi-turn, adversarial red-teaming against conversational LLMs. PyRIT simulates real-world attacker behavior using advanced orchestrators (Crescendo, TAP) and scorer feedback loops. It is designed for comprehensive security assessments of AI agents and chatbots, going far beyond single-shot prompt testing to evaluate robustness under gradual or adaptive attacks.

Implements a comprehensive defense-in-depth framework for autonomous AI agents that interact with external tools. It mitigates risks like prompt injection or tool misuse by enforcing strict tool allowlisting, binding tools to least-privilege identities, requiring human-in-the-loop approval for high-impact actions, and utilizing policy enforcement (like NeMo Guardrails) to bound the blast radius and ensure compliance.

This skill structures a highly controlled, bounded development life cycle for AI agents. It mandates a structured three-phase workflow: Planning (Spec), Implementation (Build), and Verification (Review). It is essential for building complex features from scratch, especially when dealing with ambiguous requirements, high risk, or needing explicit human approval gates to ensure the resulting code meets all defined specifications.

This comprehensive skill provides an index of official blueprints and implementation guides for building full-stack, AI-powered applications using Weaviate. It covers advanced patterns such as Retrieval-Augmented Generation (RAG), agentic workflows, data exploration, and multimodal document search, guiding users through best practices for setup, clients, and frontends.

This skill mints tamper-evident, post-quantum-signed receipts for consequential agent actions (e.g., deployment, payment, access grant). It records who, what, and under which policy the action occurred, ensuring the evidence cannot be altered later. By providing verifiable proof from the certificate alone, it is crucial for meeting regulatory compliance requirements, such as the EU AI Act, and building auditable, trustworthy systems.

This skill provides a hybrid, persistent, and searchable knowledge memory system specifically designed for enhancing AI agents' capabilities. It allows developers to record, retrieve, and search key knowledge, architectural decisions, and operational memories automatically. Use it to build agents with long-term context and reliable knowledge management, ensuring findings are synced back into project documentation.

The Application Insights JavaScript SDK is designed to instrument client-side web applications for Real User Monitoring (RUM). It automatically collects crucial telemetry, including page views, user clicks, AJAX dependencies, unhandled exceptions, and custom events. This SDK supports correlating browser-side activity with backend services and includes specialized support for GenAI agent traces following OpenTelemetry standards.

This comprehensive skill acts as a virtual Chief of Staff, guiding founders through a rigorous 12-phase interview process. It systematically gathers and structures every facet of a business—from foundation and strategy to legal and governance—into a compliant Open Knowledge Format (OKF) bundle. Ideal for creating comprehensive, machine-readable company documentation, internal wikis, or knowledge bases for AI agents.

This skill acts as a comprehensive maintenance orchestrator for the brooks-lint plugin repository. It executes a rigorous, sequential subagent pipeline—including authoring, evaluation, QA, trigger auditing, and release management. Use this when adding, editing, or updating skills to ensure all related components (manifests, README, CHANGELOG) are synchronized and adhere to strict quality gates throughout the development lifecycle.

A systematic, non-mutating investigation designed for complex software failures, including bugs, regressions, crashes, and flaky behavior. This skill launches four specialized, read-only sub-agents in parallel to perform deep root-cause analysis, trace code paths, pinpoint the smallest failing seam, and predict the quickest path to confirming or fixing the issue. It is designed purely for diagnosis and hypothesis generation.