Skill UI

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

Automated guidance for Kubernetes service management in the DevOps Advanced domain, offering best-practice advice, code snippets, and config checks for services, Terraform, Helm, and monitoring workflows.

Provides comprehensive security best practices for integrating the Perplexity API. This guide covers secure API key management using environment variables, critical query sanitization (stripping PII like emails, phone numbers, and credit cards), and implementing domain filters for compliance. Essential for developers building production applications that handle sensitive user data.

A comprehensive domain orchestrator designed to manage the entire project delivery lifecycle. It can route specific project management inquiries (e.g., Jira permissions, sprint velocity) to specialized sub-skills, or execute complex, goal-oriented workflows through a gated agentic loop. This process pulls live data from Jira/Atlassian, runs deterministic analytics, and verifies every step to ensure auditability and successful closure.

This skill details advanced techniques for performing stealthy lateral movement across Windows domains using Windows Management Instrumentation (WMI). It covers the abuse of native tools like Impacket's wmiexec.py and CrackMapExec, enabling remote command execution, Pass-the-Hash attacks, and fileless techniques, crucial for authorized red team engagements and security auditing.

This skill provides comprehensive capability to discover and inventory all privileged accounts across an enterprise infrastructure. It covers domain admins, local admins, service accounts, database roles, and cloud IAM roles. It is essential for security assessments, incident response, and compliance auditing, helping to establish a complete baseline for Privileged Access Management (PAM).

Register ICANN domains via a REST API with crypto payments so AI agents can autonomously check availability, pay in USDC/USDT/ETH/BTC, and retrieve DNS management credentials.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

Provides a standardized and robust skeleton for developing full-stack extensions that integrate both a backend API service and a frontend Admin UI. This pattern enforces clear separation of concerns, utilizing shared domain layers for data consistency while ensuring that API and Admin code are correctly registered using specific entry points. Ideal for complex applications requiring unified management interfaces and robust backend logic.

This assistant guides users through managing Azure resources entirely via the command line using the Azure CLI (`az`). It identifies the correct commands, prompts for missing required parameters (like resource groups or locations), constructs the full command sequence, executes the action, and diagnoses any output errors to ensure successful deployment and configuration of services across Compute, Networking, and other Azure domains.

This tool simulates the rigorous interrogation of a SOC 2 Type II auditor. It forces readiness checks across six critical domains—including scope definition, control consistency, change management, exception tracking, and evidence timing—at key audit milestones (pre-observation, mid-period, pre-field-test). Essential for maintaining continuous compliance.

This utility manages all types of DNS records (A, CNAME, MX, TXT, etc.) for domains registered with Namecheap via their dedicated API. It guides users through the full setup process, including public IP detection and credential configuration. Users can list domains, view, add, update, or remove records, and manage nameservers and email forwarding rules.