Skill UI

This specialized skill is designed for in-depth security and forensic analysis of Windows secrets protected by DPAPI. It maps the entire lifecycle of encrypted credentials, tracing the flow from the initial protected blob or masterkey through the context unwrapping (e.g., user logon, machine context, domain backup keys) to the specific service that finally accepts the plaintext secret. Use this to prove the decisive access edge in a complex compromise scenario.

This specialized skill is designed for advanced reverse engineering of firmware images in CTF environments. It guides users to map partition tables, trace complex boot chains (bootloader, kernel, init), analyze update packages, and recover embedded secrets or credentials. Use it when understanding the device's core architecture and execution path is necessary to find the decisive artifact.

This specialized skill is designed for advanced forensic analysis and penetration testing within Windows environments. It focuses on extracting and proving the replayability of credentials, tickets, and secrets stored in LSASS memory, Kerberos ticket caches, DPAPI, and SSP artifacts. Use it to establish the minimal, actionable chain (host artifact -> extracted material -> accepted privilege) that proves a decisive edge for privilege escalation.

This specialized skill is designed to analyze complex security flaws involving forced authentication (coercion) and identity relay chains. It guides users to trace and document the complete, minimal path from the initial coercion trigger (e.g., a specific service or protocol edge) through intermediate hops, to the final service that accepts the relayed credentials. Use this for deep security research, forensics, and documenting the decisive sequence leading to privilege escalation or code execution.

This guide outlines a structured, step-by-step onboarding process designed to establish trust and ensure user comfort. It systematically builds rapport, establishes administrative authority, and then guides the user to provide necessary credentials (like API keys and passwords) required to finalize the system setup. Ideal for initial user activation flows.

This document serves as a comprehensive reference for credential store terminology and access policies. It details how credentials are securely managed and accessed within the system, helping users understand the rules governing sensitive data storage.

This comprehensive wizard guides users through setting up various AI agent clients (e.g., Claude Code, Codex, CodeBuddy) to connect with a Memory Proxy. It handles configuration scanning, gathering necessary credentials (Proxy URL, User Key), selecting the specific agent, and validating connectivity via live API health checks for multiple protocols (Anthropic, OpenAI, etc.) before writing the final configuration.

This skill guides developers through configuring Microsoft Entra ID (Azure AD) as a federated identity provider for Webiny projects. It enables Single Sign-On (SSO) by allowing users to authenticate using their corporate Microsoft 365 accounts. The setup involves registering an application in the Entra ID portal and integrating the credentials into the Cognito Federation structure, allowing Cognito to remain the core user pool while utilizing Microsoft identities for login.

agy-auto is a security harness for Google Antigravity CLI enabling unattended execution with layered policy controls. It prevents dangerous permissions using hard-deny rules, fast-allow for safe operations, and an LLM classifier for ambiguous commands. It supports scoped token approvals for human judgment, ensuring secure pair-programming without exposing system files or credentials.

This skill validates API requests against a contract, checking method, URL, headers, body, query params, and authentication. It ensures syntactic consistency without executing requests or verifying live credentials. Ideal for debugging pasted curl commands or reviewing endpoint configurations before deployment.

Configure AWS MCP servers for documentation search and AWS API access with AI agents. Covers checking existing config, choosing between the full server with credentials or the no-auth docs-only server, and verifying tools.

Store, manage, and automatically rotate secrets such as database credentials, API keys, and tokens in AWS Secrets Manager using CLI and SDK examples.