Skill UI

This skill guides users on creating highly optimized, high-volume content (like directory pages, templates, and comparisons) using data and patterns. It teaches core principles of programmatic SEO, ensuring each page provides unique value, matches search intent, and avoids Google's thin content penalties, enabling scalable growth.

A comprehensive skill to automatically detect, install, and initialize the Terraform CLI based on the operating system. It ensures the required environment is set up (including handling provider downloads and network mirrors) and prepares the working directory for infrastructure deployment. Ideal for initial setup or when receiving 'command not found' errors.

This skill provides comprehensive tools and methodologies for working with the Brain Imaging Data Structure (BIDS) standard. It is essential for organizing, validating, querying, and converting complex multi-modal neuroscience and biomedical datasets (including MRI, EEG, MEG, PET, etc.). Use this when setting up BIDS-compliant directory structures, ensuring data integrity before publication, or converting raw DICOM scans into standardized formats.

This skill provides comprehensive deal-desk support by performing quantitative scoring and risk assessment for commercial deals. It scores deals across margin, risk, and strategic value, routes discount requests to the correct human approver chain (e.g., Director, CFO, Legal), and flags contract landmines (e.g., uncapped indemnity, MFN) in redlined MSAs. It never auto-approves; every output is a score and a recommendation for a named human sign-off.

This tool indexes local files or directories into a persistent FTS5 knowledge base. This allows subsequent search operations to efficiently retrieve highly relevant, focused snippets from the project source without needing to re-read the raw files every time. It is crucial for managing and searching large, complex codebases or detailed project documentation.

This skill generates a comprehensive, slide-by-slide narrative structure for high-stakes board presentations. It guides users on framing the quarter's story, presenting key financial metrics (KPIs, P&L), strategic updates, and defining clear asks for investors and directors. Ideal for quarterly board meetings, funding rounds, or annual corporate reviews.

This skill guides the architecture and implementation of SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers establishing seamless Single Sign-On (SSO) capabilities, eliminating the need for separate credentials and ensuring secure, cross-domain authentication for cloud applications.

This skill guides the comprehensive hardening of LDAP directory services. It addresses common vulnerabilities such as LDAP injection, anonymous binding, and credential harvesting. Users can enforce strong security controls, including LDAPS, channel binding, and granular access control lists (ACLs). It is essential when establishing robust identity access management (IAM) architecture or meeting stringent compliance requirements like NIST standards.

This technique exploits the Active Directory attribute `msDS-KeyCredentialLink` by injecting attacker-controlled public keys (Shadow Credentials). Using tools like pyWhisker and Certipy, the attacker forces the target account to register a new key. Subsequently, by leveraging PKINIT (Public Key Cryptography for Initial Authentication in Kerberos), the attacker can obtain a service ticket and recover the target's NT hash, achieving a stealthy, password-less, complete account takeover.

ROADtools is a comprehensive offensive toolkit for Microsoft Entra ID (Azure AD). It consists of ROADrecon for offline directory enumeration (users, groups, roles, policies) and roadtx for advanced token acquisition and exchange. It is designed for authorized red-teaming and penetration testing to discover attack paths and pivot tokens across various Microsoft resources.

This guide details the architecture and deployment of resilient Command and Control (C2) redirectors. By using tools like Nginx and Apache, operators establish an intermediary layer that filters beacon traffic based on malleable C2 profiles. This setup protects the true team server from detection, takedown, and analysis (OPSEC), enabling advanced techniques like domain fronting and traffic shaping for low attribution.

A powerful offensive security toolkit for red-teaming and penetration testing. It systematically enumerates and exploits various misconfigurations within Active Directory Certificate Services (AD CS) using Certipy. This allows attackers to forge privileged certificates, perform PKINIT authentication, and achieve domain compromise and privilege escalation, even without knowing user passwords. Ideal for validating security hardening.