Skill UI

A comprehensive guide for writing, debugging, and maintaining Windows batch files (.bat/.cmd). This skill covers advanced CMD scripting techniques, including environment variable management, complex control flow (IF, FOR), argument parsing, delayed expansion, and command chaining. Ideal for automating system tasks, creating command-line utilities (CLI), managing deployments, or writing scheduled task scripts in Windows environments.

This skill guides the process of converting complex, repetitive, and often private operational workflows originating in the Hermes environment into safe, reusable, and public skills for the ECC workflow layer. It focuses heavily on data sanitization, requiring users to strip out all sensitive information such as absolute paths, private credentials, personal identifiers, and proprietary data before publication. Use this when an internal 'operator' routine needs to become a standardized, shareable business asset.

Generates a comprehensive, single-screen financial report in a self-contained HTML file. This skill is designed for analyzing key business metrics, including P&L summaries, MRR trends, KPI cards (Revenue, Gross Margin, Cash Runway), and top-accounts analysis. Ideal for quarterly or monthly financial reviews in SaaS or startup environments.

KubeStellar Console is an open-source, multi-cluster Kubernetes dashboard (CNCF project) that provides advanced operational capabilities powered by an MCP server and built-in AI agent skills. It helps manage complex deployments across edge and cloud environments, offering AI-assisted troubleshooting, performance testing, and deep integration with major CNCF projects like Argo and Istio.

A robust Go library for managing complex configuration values from multiple sources. Viper resolves configuration based on a fixed precedence pipeline (flags > environment variables > config files > defaults), ensuring reliable key resolution. It supports binding flags, reading various file types (YAML, JSON, TOML), and handling hot reloads. Essential for building professional, highly configurable Go applications.

Manage global n8n instances, runtime state, tunnels, API keys, credentials, projects, and workflow presentation links. Useful for setting up local Docker, connecting remote instances, and controlling n8n execution environments.

Techniques for attacking WPA/WPA2/WPA3-Enterprise 802.1X networks, including EAP method identification, evil-twin RADIUS credential capture, MSCHAPv2 cracking, and EAP-TLS certificate theft paths in corporate Wi-Fi environments.

A comprehensive guide covering advanced Kerberos attacks against Active Directory environments. Techniques include AS-REP roasting, Kerberoasting, forging golden, silver, diamond, and sapphire tickets, and exploiting delegation abuse. Designed for penetration testers and red teams to simulate sophisticated domain compromise scenarios.

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

This skill details advanced techniques for exploiting formula injection vulnerabilities within CSV, Excel, LibreOffice, and Google Sheets environments. It covers DDE, obfuscation methods, and high-risk functions like IMPORT* that can be triggered when user-controlled data is exported or imported into spreadsheet software. Use this for penetration testing of data pipelines and export features.

The Desktop Commander MCP grants agents deep reach across the user's entire operating environment, extending far beyond the typical IDE sandbox. Key capabilities include maintaining persistent shell sessions, managing long-running background processes, accessing arbitrary filesystems, and natively handling structured data formats (Excel, PDF, DOCX). It also enables remote operations via SSH and large-scale content search, making it ideal for complex, multi-turn development, DevOps, and data analysis workflows.

A comprehensive playbook detailing advanced techniques for exploiting glibc heap vulnerabilities using ptmalloc2. Covers various memory corruption primitives, including Use-After-Free, double free, and overflows. Provides version-specific guidance on bypassing modern protections like safe-linking (glibc >= 2.32) and RCE methods for post-2.34 environments.