Skill UI

Captures operational lessons from legal matters in three modes: in-flight (risks, scope changes), mid-matter phase review, and close retrospective. Use on risk materialization, scope change, phase completion, or matter closing. Converts experiences into reusable inputs for future matters.

Comprehensive skill for FedRAMP certification and compliance under CR26. Covers authorization paths, Certification Classes A-D, SSP/SAP/SAR/POA&M documentation, NIST SP 800-53 control mapping, FedRAMP 20x, OSCAL mandate, 3PAO assessments, continuous monitoring, and gap assessments. Ideal for cloud service providers and security teams navigating federal cloud authorization.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A comprehensive guide to tuning game physics parameters, including mass, gravity, drag, and continuous collision detection (CCD). It addresses common stability issues like jitter and tunneling by correctly separating the fixed-timestep simulation (physics updates) from the variable-rate rendering (visual updates) using interpolation. Essential for creating predictable and responsive game motion across various hardware.

This skill automates the setup of continuous integration and continuous deployment (CI/CD) pipelines specifically for Power Pages solutions within the Power Platform. It creates pipeline configurations natively in Dataverse, eliminating the need for external YAML files or separate CI/CD infrastructure. It guides users through the Application Lifecycle Management (ALM) process, ensuring structured, automated deployment from development stages to production.

This skill enables systematic improvement of existing AI agents through performance analysis, prompt engineering, and continuous iteration. It involves analyzing failure modes, collecting baseline metrics, and applying optimization techniques like chain-of-thought enhancement and role refinement to enhance reliability and task success rates.

Implement GitOps continuous delivery for Kubernetes with ArgoCD. Covers installation, Application manifests, Helm and Kustomize sources, AppProjects, ApplicationSets, and safe sync, prune and rollback policies.

This skill performs automated compliance validation against industry standards like CIS, PCI-DSS, HIPAA, and SOC 2 for AWS environments. It helps prepare for audits and maintain continuous compliance monitoring by checking benchmarks and generating reports.

This skill transforms completed debugging sessions or repeated corrections into evidence-backed procedures. It captures reusable lessons upon explicit request, ensuring privacy by not automatically saving memories. Users must provide session summaries or transcripts to identify failures and verify fixes. The output is a reviewed procedure suitable for documentation, excluding secrets and personal details. It helps maintain knowledge without modifying agent configuration automatically.

Build features guided by data insights, A/B testing, and continuous measurement using specialized agents for analysis, implementation, and experimentation. This skill provides a structured workflow from exploratory data analysis and hypothesis formation to feature implementation with integrated analytics, A/B testing infrastructure, and post-launch analysis.

Manages the deployment of local applications and websites to the Vercel platform. This skill intelligently detects the project's current state (e.g., if it is already linked or if git is available) and guides the user through the optimal deployment method. It prioritizes establishing a permanent git-push connection to facilitate a seamless Continuous Integration/Continuous Deployment (CI/CD) workflow. Use when the user explicitly requests deployment actions.