Skill UI

This skill provides a comprehensive audit framework for evaluating AI agents used in legal, compliance, or business operations. It assesses the risks associated with delegated authority—such as sending messages, filing documents, or making payments—by checking for adequate controls, logging, revocation mechanisms, and clear accountability chains. It is essential for firms connecting agents to sensitive systems like CRM, court portals, or financial accounts to ensure safe and compliant deployment.

A comprehensive guide to advanced Command and Control (C2) frameworks used in professional red teaming. This skill covers deployment, configuration, and operational tradecraft for tools like Cobalt Strike, Sliver, and Mythic. Topics include creating malleable profiles to mimic legitimate traffic, utilizing DNS/SMB beacons for stealth, implementing BOF for in-memory execution, and building resilient infrastructure via domain fronting and redirectors.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

This planner skill creates a comprehensive Application Lifecycle Management (ALM) plan for deploying sites across multiple environments. It systematically gathers promotion strategies, target environments, and approval requirements, generating a visual HTML document for user review and approval. Crucially, this tool only *plans* deployments and does not execute any steps itself; subsequent individual ALM skills must be run to complete the process.

Generates self-contained HTML preview files that render mobile app screens in phone-frame mockups (375×812) with tab navigation and dark/light toggle. Converts Tamagui TSX components to equivalent HTML/CSS without programmatic parsing. Useful for visual verification after screen generation, sharing mockups with stakeholders, and layout validation before deployment.

This skill automates the deployment of the dispatcher PCF for third-party components to Power Platform environments. It rigorously verifies all necessary prerequisites (Node.js, .NET SDK, `pac` CLI) and executes `pac pcf push`. It guides the user through defining the publisher prefix, managing version bumps, and ensures the component is correctly packaged and deployed to the target environment.

This guide details Phase 4: transitioning an interactive agent into a persistent, automated workflow. It covers creating scheduled deployments (cron jobs) or event-driven triggers (cURL). Users learn to validate cron schedules, build the necessary deployment payloads, and follow best practices, including manual testing and DST consideration, ensuring the agent runs reliably without human intervention.

This skill automates the setup of continuous integration and continuous deployment (CI/CD) pipelines specifically for Power Pages solutions within the Power Platform. It creates pipeline configurations natively in Dataverse, eliminating the need for external YAML files or separate CI/CD infrastructure. It guides users through the Application Lifecycle Management (ALM) process, ensuring structured, automated deployment from development stages to production.

This skill automates the creation of a Dataverse publisher and solution, and systematically adds necessary Power Pages site components. It is crucial for managing the Application Lifecycle Management (ALM) and structured deployment of Power Pages sites, ensuring components are correctly packaged for export and import.

This skill audits the security and integrity of legal AI components, including skills, prompts, workflows, and tools. It proactively detects prompt injection, malicious code, data exfiltration paths, and supply-chain risks before deployment or trust. Essential for maintaining confidentiality, privilege, and adhering to legal standards in AI environments.

This skill automates the final deployment phase of an agent system. It converts a validated build sheet into four ordered JSON payloads (environment, agent, session, kickoff) and generates a resumable `launch.sh` script. Crucially, this process enforces API-key safety by requiring the user to run the script in their shell, pulling the Anthropic API key from the environment variable, thus ensuring the key never appears in logs or files. It provides a structured, multi-step launch sequence.

Configure and automate Unity 6.3 LTS player builds, including scene selection, platform targets, scripting backends (Mono/IL2CPP), code stripping, and CI headless execution. Use for scripting build pipelines, optimizing build size, and verifying build reports before deployment.