Skill UI

This skill guides the process of converting complex, repetitive, and often private operational workflows originating in the Hermes environment into safe, reusable, and public skills for the ECC workflow layer. It focuses heavily on data sanitization, requiring users to strip out all sensitive information such as absolute paths, private credentials, personal identifiers, and proprietary data before publication. Use this when an internal 'operator' routine needs to become a standardized, shareable business asset.

Generate a 90-day execution plan with weekly milestones, DRIs, and check-in cadence from an approved decision. Use when a logged decision needs to become an operating plan.

This skill guides the user to become an expert in authoring comprehensive, implementation-ready design system guidelines for an immersive, exhibit-style brand. It teaches how to structure rules covering design tokens, component anatomy, interaction states, accessibility requirements (WCAG 2.2 AA), and anti-patterns, ensuring consistency across all digital products.

This powerful skill pauses deep technical discussions to conduct a comprehensive, multi-dimensional reassessment. It analyzes conceptual drift, identifies unverified assumptions, and detects potential cognitive biases (e.g., confirmation bias, sunk cost fallacy). Use it when the conversation is becoming overly detailed, or when a strategic check-in is needed to ensure the focus remains on the core objective and the correct problem is being solved.

A comprehensive, multi-phase quality assurance tool designed for Next.js fullstack applications. It verifies production readiness by checking code integrity, build success, SEO metadata, API authentication, route stability, performance, and security vulnerabilities. Use it as a mandatory pre-deployment checklist before promoting an app to production.

This workflow transforms long YouTube talks and lectures into a personal, structured, and local markdown library. Each video becomes a self-contained file containing slide snapshots, full timestamped transcripts, and editable study notes. It eliminates reliance on cloud services, giving users full ownership of their academic material.

This guide details the process of deploying and configuring Proofpoint Email Protection, a cloud-native Secure Email Gateway (SEG). It establishes a critical security checkpoint for all mail traffic, protecting users from advanced threats including phishing, malware, Business Email Compromise (BEC), and spam. The implementation covers architectural planning, advanced threat defense (sandboxing, ML classifiers), and compliance with protocols like DMARC, SPF, and DKIM.

Business Email Compromise (BEC) is a sophisticated social engineering fraud where attackers impersonate executives or vendors to trick employees into making unauthorized fund transfers or disclosing data. This skill provides comprehensive detection techniques by integrating email gateway rules, behavioral analytics, and mandatory financial process controls. It is essential for investigating suspected account compromises and building robust defenses against advanced phishing attacks.

Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess, tracing which subjects can escalate toward cluster-admin. Use when reviewing who can escalate privileges in a cluster, hunting exploitable RoleBindings during an authorized review, or validating least privilege after an RBAC change.

Implements a robust caching strategy by using the SHA-256 hash of file content as the primary key, instead of the file path. This pattern is essential for high-cost file processing pipelines (like OCR, PDF parsing) because it ensures cache hits survive file renaming or moving, while still automatically invalidating entries when the content changes. It adheres to the Single Responsibility Principle (SRP) by isolating caching logic into a service layer wrapper.

This skill guides the process of converting complex, repetitive, and often private operational workflows originating in the Hermes environment into safe, reusable, and public skills for the ECC workflow layer. It focuses heavily on data sanitization, requiring users to strip out all sensitive information such as absolute paths, private credentials, personal identifiers, and proprietary data before publication. Use this when an internal 'operator' routine needs to become a standardized, shareable business asset.

This tool performs a comprehensive audit of the project's stored auto-memory. It analyzes learned knowledge to identify actionable patterns for promotion to core rules, flag stale or outdated entries, and suggest opportunities for consolidating redundant knowledge. Use it after major development phases or when the memory knowledge base becomes crowded to maintain system knowledge quality.