Skill UI

This specialized skill is designed for in-depth security and forensic analysis of Windows secrets protected by DPAPI. It maps the entire lifecycle of encrypted credentials, tracing the flow from the initial protected blob or masterkey through the context unwrapping (e.g., user logon, machine context, domain backup keys) to the specific service that finally accepts the plaintext secret. Use this to prove the decisive access edge in a complex compromise scenario.

A specialized deep-dive skill for analyzing container-to-host escape vulnerabilities. This tool is used after a sandbox orchestrator establishes initial assumptions, focusing on mapping isolation boundaries (namespaces, cgroups, seccomp, capabilities). It helps prove boundary crossings, identify minimal exploit primitives, and determine if an exploit can break out of the container context to the host kernel.

This skill is designed for deep forensic analysis of asynchronous processing chains, specifically focusing on 'drift'—behavioral or configuration differences between a synchronous request path and subsequent worker-executed tasks. Use it to trace payloads, inspect worker-only state, follow retry mechanisms, handle dead-letter queues, or connect enqueued items to eventual side effects (e.g., file writes, cache updates, emails). It is a specialized downstream tool, requiring prior orchestration context.

This skill provides a structured, multi-step guide for automating interactions with desktop applications. It emphasizes obtaining a reliable context via observation, preferring UI Automation (using element IDs for buttons, menus, or editable fields) over raw coordinates. It covers best practices for keyboard input and ensuring state consistency across major operating systems (Windows/macOS), making it suitable for complex, reliable process automation.

This skill deploys the OpenMed Model Context Protocol (MCP) server, exposing critical clinical NLP tools such as NER, PII extraction, and de-identification. It enables AI coding agents and chat clients to interact with OpenMed's capabilities via simple tool calls, running locally on-device to ensure user data privacy and security. Supports both stdio and Streamable HTTP deployment modes.

A comprehensive methodology for advanced red teaming and adversary emulation. This skill details how to bypass modern Endpoint Detection and Response (EDR) solutions (e.g., Defender, CrowdStrike, SentinelOne). Techniques include unhooking ntdll, utilizing indirect syscalls (Hell's Gate), patching ETW providers, and AMSI context blinding. Essential for authorized penetration testing and self-developed implant development, aligning with MITRE ATT&CK T1562.

A comprehensive guide for designing and building large-scale, resilient platforms using the evolutionary modular monolith approach. It enforces strong logical boundaries using DDD principles (bounded contexts, flat-by-aggregate) and implements necessary patterns like Anti-Corruption Layers and transactional outboxes. Use this when defining a system's structure, choosing between monolith and microservices, or ensuring robust decoupling from external vendors (e.g., ERP, AI).

A comprehensive guide for installing, configuring, and validating the local long-term memory plugin (`memory-tencentdb`) within the OpenClaw environment. This guide covers everything from environment pre-checks to advanced configuration for data capture, information extraction, context recall, and vector embedding, ensuring robust, self-contained memory capabilities for RAG applications.

This skill enhances raw clinical entity recognition by assigning three critical axes: Negation, Temporality, and Uncertainty (ConText). It determines the clinical status of a mention (e.g., affirmed, negated, historical, or uncertain), ensuring that basic NER results are transformed into clinically faithful assertions before grounding to standards like FHIR. Essential for accurate problem list generation and differential diagnosis support.

This technique segments unstructured clinical documents (such as HPI, PMH, and A&P sections) into contextually rich, canonical chunks. This is crucial for improving the precision of downstream NLP tasks like Named Entity Recognition (NER) and de-identification. By identifying and normalizing headers and mapping them to LOINC codes, the system ensures that the source context (e.g., historical vs. active) is maintained, leading to significantly more accurate results.

This skill processes verbose, stream-of-consciousness voice dictations (from tools like macOS Dictation or Wispr Flow) and transforms them into highly structured, token-efficient prompts. It removes filler words, repetitions, and tangents, organizing the core intent into standard sections (Context, Objective, Constraints) suitable for advanced LLMs like Claude Code.