Skill UI

Deploy deception-based Active Directory honeytokens—fake privileged accounts, SPNs, decoy GPOs and BloodHound paths—to detect Kerberoasting, lateral movement, credential theft and other reconnaissance activity via monitored Windows Security events.

Guides hardening Windows Active Directory via Group Policy to block ransomware execution, enforce AppLocker/WDAC rules, enable Controlled Folder Access, configure ASR, and lock down lateral movement paths.

Safety Guard prevents destructive operations on production systems or during autonomous agent runs by intercepting risky commands, restricting write access to specified directories, and combining both protections when needed.

Use the gws people CLI to manage Google People contacts, contact groups, other contacts, and domain directory data through batch operations, searches, and updates—ideal for automating contact administration and sync workflows.

CLI helper that uploads local Apps Script assets (.gs, .js, .html, appsscript.json) to a project via `gws script +push`, replacing every file while skipping hidden folders and node_modules; specify the target script ID and optional directory.

OpenViking Code Repository Search exposes `ov` terminal commands for scoped semantic, keyword, and glob searches across viking:// resources, lets you read directory summaries/files, and manage indexed repositories (add/remove) with documented error handling.

This skill allows agents to persistently add external knowledge and conversational context to the OpenViking context database. It supports ingesting various resources (local files, URLs, repositories, directories) using 'add-resource', and storing rich, multi-turn conversation history as long-term memory using 'add-memory'. Use this when building a knowledge base, documenting projects, or ensuring conversation insights persist across sessions.

Use the OpenViking CLI to search memories, skills, and resources with semantic and literal queries across directories, surfacing context-aware results whenever agents need stored knowledge or documentation.

Exports a Google Contacts directory into a Google Sheets spreadsheet by listing domain people via the gws-people tool and appending the retrieved name, email, and phone data row by row.

Comprehensive reference for red teamers and penetration testers on executing Active Directory attacks, covering reconnaissance, credential harvesting, Kerberos abuses, lateral movement, and domain persistence techniques against Windows domains.

A general-purpose skill for writing and executing end-to-end (E2E) browser automation tests using Playwright. It handles complex scenarios such as login flows, form submission, responsive viewport testing, and checking for broken links. The skill automatically detects local development servers and executes custom scripts in a safe, temporary directory, providing real-time debugging and results visualization.

Automates BambooHR human-resources workflows through the Composio BambooHR toolkit on Rube MCP, covering employee directories, time-off, benefits, dependents, and updates after ensuring active connections and schema lookups.