Skill UI

This technique abuses the Active Directory's `msDS-KeyCredentialLink` attribute to inject attacker-controlled public keys (Shadow Credentials). After gaining write access (e.g., via BloodHound), the attacker uses tools like pyWhisker or Certipy to append their key. They then authenticate via PKINIT to recover the target's NT hash, achieving complete account takeover without the disruptive step of a password reset. Ideal for stealthy red-teaming engagements.

A powerful offensive suite for authorized red-teaming of Microsoft Entra ID (Azure AD). ROADtools combines ROADrecon for comprehensive directory enumeration (users, groups, policies, apps) and an offline GUI, with roadtx for advanced token acquisition, exchange, and Primary Refresh Token (PRT) abuse. It covers the full scope of cloud identity discovery and token-based attacks against highly regulated tenants.

Scaffold a new Claude Code plugin from scratch: generates the canonical directory structure, plugin.json manifest, SKILL.md files, commands, agents, ADR, smoke tests and README so your plugin wires up MCP tools correctly.

This skill serves as a deterministic internal downloader for image URLs extracted from comprehensive web search results. It receives normalized media slots and search output via stdin, utilizing Python HTTP APIs to download direct image links. The process includes validating MIME types and saving files accurately into the configured local project directory, ensuring reliable asset retrieval without relying on sandboxed shell tools.

A comprehensive guide to advanced Command and Control (C2) frameworks used in professional red teaming. This skill covers deployment, configuration, and operational tradecraft for tools like Cobalt Strike, Sliver, and Mythic. Topics include creating malleable profiles to mimic legitimate traffic, utilizing DNS/SMB beacons for stealth, implementing BOF for in-memory execution, and building resilient infrastructure via domain fronting and redirectors.

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.

This skill enables users to discover, compare, and research autonomous AI agents using the AgentFolio directory. It helps map the landscape of agent frameworks and tools, identify market gaps, and gather benchmarks before building new agents. Ideal for evaluating existing solutions, understanding integration surfaces, and tracking emerging trends in agent architectures and deployments.

Global Chat Agent Discovery enables developers to locate and compare MCP servers and AI agents via a cross-protocol directory. It supports MCP, A2A, and agents.txt protocols, offering programmatic access through an MCP server. Users can search for tools like database access or file conversion, validate agents.txt files, and discover endpoints for agent-to-agent communication across multiple registries.