Skill UI

This comprehensive guide details security best practices for hardening Docker containers and their underlying infrastructure (daemon, runtime, images). It aligns with standards like the CIS Docker Benchmark v1.8.0, enforcing least privilege through non-root users, capability dropping, read-only filesystems, and advanced security profiles (seccomp/AppArmor). Essential for building highly secure, compliant, and production-ready container environments.

This guide details how to harden the Docker daemon configuration using daemon.json. It implements critical security measures such as user namespace remapping, disabling inter-container communication (ICC), enforcing no-new-privileges, and setting up TLS client authentication. Use this when aiming to prevent container breakout, privilege escalation, or meeting CIS benchmark compliance requirements.

This tool runs the open-source Docker Bench for Security, auditing container host configurations, Docker daemon settings, and runtime security controls against the CIS Benchmark. It generates a detailed pass/fail/warn report, helping security teams validate compliance, harden environments, and perform regular security audits.

This guide provides a comprehensive observability stack for Apple Notes on macOS. Since Notes lacks a built-in metrics API, this solution demonstrates how to monitor key health indicators—such as note/folder counts, system latency, and iCloud sync daemon status—by polling via JXA and Bash scripts. It includes scripts for scheduled health checks, trend visualization, and robust error handling for production monitoring environments.

An advanced application framework for Go, combining a reflection-based Dependency Injection (DI) container with robust lifecycle management. It provides features like `fx.Module` for modular composition, signal-aware run loops (handling SIGINT/SIGTERM), and structured hooks (OnStart/OnStop). Ideal for building long-running services, such as daemons, HTTP servers, or workers, ensuring graceful startup and shutdown.

This skill analyzes the user's historical workflow data, passively captured via a local screenpipe daemon. It detects recurring activity patterns (e.g., research steps) and clusters them. It then compares these patterns against existing skills, automatically drafting proposals for new skills or optimized composition recipes that chain existing tools together. It is designed for privacy, running all detection and processing locally, and only sending redacted summaries to the LLM.

TextMe is a local daemon that transforms your smartphone into a powerful remote control for Claude Code sessions. By bridging inbound iMessages (from whitelisted numbers) through services like Sendblue, users can interact with their AI session on their laptop, executing code, navigating filesystems, sending voice notes, and receiving real-time updates. Ideal for supervising headless workstations or coding while away from your desk.

This skill is designed for complex, multi-step tasks requiring coordination among multiple AI agents. It implements a robust workflow engine that first generates a detailed plan (task graph, topology) and then orchestrates parallel execution with adversarial verification. Use this when the task spans many files, requires multiple specialized roles, or involves an overall 'workflow' concept, ensuring structured, reliable, and auditable results.

This utility diagnoses and automatically repairs common issues within the Ruflo installation environment. It performs comprehensive health checks on core dependencies like Node.js, npm, and git, while also validating configurations, daemon status, memory databases, and API keys. It provides targeted commands to resolve issues related to memory initialization, daemon startup, and configuration resets, ensuring a stable operational environment.