Skill UI

A specialized tool for blockchain forensics, designed to trace the movement of ransomware payments across public blockchains (like Bitcoin). By leveraging APIs from services like Chainalysis and WalletExplorer, it identifies wallet clusters, tracks funds through mixers and tumblers, and maps fund flow from the victim to final exchange deposits. Essential for law enforcement attribution and threat intelligence gathering.

This guide details using the comprehensive AADInternals PowerShell toolkit for defensive validation of Microsoft Entra ID, Azure AD, and AD FS environments. It covers unauthenticated tenant reconnaissance, acquiring access tokens for multiple Microsoft APIs, and critically, testing for federation backdoors (Golden SAML) by simulating advanced attack techniques (MITRE T1606.002). It is designed for authorized red-team assessments to map external attack surfaces and validate identity infrastructure hardening.

Hayabusa is a specialized threat-hunting and fast-forensics tool designed to analyze Windows EVTX event logs. It applies a comprehensive library of Sigma detection rules to raw log data, generating a single, prioritized, chronological timeline. The output includes severity levels, MITRE ATT&CK mappings, and detailed metrics, enabling analysts to perform rapid, SIEM-free incident triage and export results for collaborative analysis.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

NVIDIA garak is an open-source LLM vulnerability scanner designed for comprehensive red-teaming and security assessment. It systematically probes large language models (via OpenAI-compatible APIs, Hugging Face, etc.) using thousands of adversarial prompts. It covers critical vulnerabilities such as prompt injection, jailbreaking, data leakage, and toxicity. Use this tool to establish a repeatable security baseline before or after deployment, validate the effectiveness of safety guardrails, or generate quantitative evidence for AI risk assessments.

KAPE (Kroll Artifact Parser and Extractor) is a specialized, rapid triage tool for incident response. It collects specific, volatile forensic artifacts (like registry hives, event logs, and browser data) from compromised Windows systems. It is designed for remote, at-scale artifact collection when full disk imaging is impractical, enabling analysts to quickly build a defensible, parseable dataset for initial investigation and containment.

Run open-source molecular design and structural biology tools on Tamarind Bio's managed cloud GPUs via REST API or MCP. Covers AlphaFold/Boltz/Chai structure prediction, RFdiffusion and ProteinMPNN design, antibody and nanobody engineering, DiffDock docking, binding affinity, MSA generation, and molecular dynamics — no local GPU setup needed.

This skill provides comprehensive guidance on designing complex system integrations, including event-driven architectures (EDA), webhook flows, API chaining, and robust ETL pipelines. It covers advanced patterns like Saga, Outbox, and resilience mechanisms (Idempotency, Circuit Breaker), making it ideal for connecting multiple microservices and managing asynchronous data flows.

A guide to designing friction-free developer onboarding experiences. Learn best practices for implementing GitHub OAuth, generating immediate API keys, and utilizing progressive profiling to maximize signup conversion rates while respecting the developer's time. Focuses on moving users from zero to coding as fast as possible.

This skill covers the principles of building Software Development Kits (SDKs) that provide an exceptional developer experience (DX). Learn how to design intuitive APIs, utilize progressive disclosure, establish sensible defaults, and implement actionable, guiding error messages. The focus is on driving product adoption by making the developer's workflow seamless and productive. Ideal for product managers, technical leads, and API designers.

A comprehensive guide to designing transparent, predictable, and developer-friendly usage-based pricing models. Learn which metrics (API calls, compute time, storage) developers accept, how to structure clear pricing pages, and how to avoid confusing or punitive billing practices to maximize adoption and revenue.

This skill enforces a rigorous, multi-phase coding workflow (Discuss -> Map -> Decompose -> Execute -> Verify) to ensure code is structurally grounded, complete, and free from invented APIs or assumptions. It is designed for high-stakes, complex, or multi-file engineering tasks, acting as a senior, disciplined coding partner that plans meticulously before writing code.