Skill UI

Expert assistance for building, modifying, and debugging Minecraft server plugins for the Paper, Spigot, and Bukkit ecosystems. This includes implementing complex gameplay mechanics such as minigames, advanced combat systems, persistent player progression (perks, economy, quests), custom command handling, and robust state management. We handle configuration, listener registration, and adherence to best practices for Java-based server API usage.

This tool reads your local GitHub Copilot CLI conversation history using the specialized `vardoger` CLI. It analyzes your behavioral patterns, coding conventions, and usage style to generate a personalized instructions block. This block is written directly to your local Copilot configuration file, allowing the assistant to adapt its guidance and suggestions specifically to your unique habits and preferences. The process runs entirely offline, ensuring maximum privacy.

This skill analyzes your entire codebase to ensure it is optimized for AI contributions and developer tooling. It automatically generates essential configuration files such as `AGENTS.md`, Copilot instructions, CI workflows, and customizable issue templates. It learns from your existing PR review patterns to tailor the setup precisely to your project's stack. Use it when you need to prepare a repository for advanced AI-assisted development.

This skill integrates BuyWhere's product catalog surface, allowing AI agents to perform structured product searches, compare prices across various merchants, and discover deals. It is designed for developers building advanced e-commerce shopping agents, guiding them through the necessary API key setup and MCP configuration.

A robust Go library for managing complex configuration values from multiple sources. Viper resolves configuration based on a fixed precedence pipeline (flags > environment variables > config files > defaults), ensuring reliable key resolution. It supports binding flags, reading various file types (YAML, JSON, TOML), and handling hot reloads. Essential for building professional, highly configurable Go applications.

This assistant guides users through managing Azure resources entirely via the command line using the Azure CLI (`az`). It identifies the correct commands, prompts for missing required parameters (like resource groups or locations), constructs the full command sequence, executes the action, and diagnoses any output errors to ensure successful deployment and configuration of services across Compute, Networking, and other Azure domains.

Performs a comprehensive external audit of a deployed repository's state, going beyond simple code review. It checks for critical production gaps, including RLS misconfigurations, webhook idempotency issues, secret exposure, deployment health, and prompt injection vulnerabilities. Ideal for pre-launch gates and ensuring code stability before going live.

A comprehensive playbook detailing advanced attack techniques against Active Directory Certificate Services (AD CS). It covers exploiting misconfigured templates (ESC1-ESC13), performing NTLM relay attacks, and achieving privilege escalation via CA officer abuse. This guide is essential for offensive security practitioners conducting penetration testing simulations.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.