Skill UI

Used for building, debugging, and extending MCP servers and clients. This skill implements robust connections between AI systems and external tools/data sources using structured protocols like JSON-RPC 2.0. Expertise includes defining tool schemas (Zod/Pydantic), configuring transport layers (HTTP/SSE/stdio), and scaffolding full-stack projects in TypeScript or Python.

A comprehensive guide to managing and reducing costs associated with Obsidian's paid services (Sync, Publish) and external API calls from community plugins. Learn how to audit vault size, implement secure exclusion patterns for sync, and utilize coding techniques like caching and rate limiting to control usage fees from external services (e.g., AI).

This skill manages the integration of Model Context Protocol (MCP) servers with Windsurf, significantly extending its operational capabilities. It enables Windsurf to interact with external resources, including databases, file systems, APIs, and custom tools through a standardized protocol. Use this when configuring or utilizing advanced, external tool integrations within the Windsurf environment.

This skill provides a comprehensive framework for ingesting, normalizing, and enriching threat intelligence (CTI) from multiple structured and unstructured sources. It guides users through scoring feeds, converting heterogeneous IOC formats (like OpenIOC, YARA) into the standardized STIX 2.1 format, and enriching indicators using external services (e.g., VirusTotal, PassiveTotal). Ideal for building robust, automated threat detection pipelines for SIEM and EDR systems.

A comprehensive guide to building an automated Indicator of Compromise (IOC) enrichment pipeline using OpenCTI. This skill teaches how to leverage OpenCTI's native STIX 2.1 model and internal connectors to pull deep context from major external threat intelligence sources like VirusTotal, Shodan, AbuseIPDB, and GreyNoise. The pipeline automatically enriches newly ingested indicators, correlates them with known threat actors and campaigns, and generates confidence scores for rapid analyst prioritization.

This skill provides a comprehensive methodology for discovering and exploiting broken link hijacking vulnerabilities. By spidering a target site and extracting all external scripts, domains, and references, the skill checks the DNS and domain registration status. It is crucial for conducting subdomain takeover testing, supply-chain security reviews of third-party resources, and advanced bug bounty hunting.

This skill allows agents to ingest external resources (local files, URLs, repositories) using `ov add-resource`, and to create long-lasting searchable memories from conversations using `ov add-memory`. It is essential for building a comprehensive, persistent knowledge base for the OpenViking context database, ensuring that learned insights and external data remain available across sessions and interactions. Use when external knowledge injection or context persistence is required.

A command-line interface (CLI) for accessing and interacting with Model Context Protocol (MCP) servers. It acts as a unified gateway, allowing users to discover, inspect, and execute tools and APIs from external sources like filesystems, databases, APIs, and specialized services. Essential for programmatic workflow automation and system integration.

A comprehensive guide for configuring and troubleshooting Jenkins when embedded within KubeSphere DevOps. Learn how to manage Jenkins via Configuration as Code (CasC), integrate advanced authentication methods like LDAP and OIDC, customize agent images, and connect to external sources such as GitLab. Covers everything from initial access to backup and recovery.

This skill provides a comprehensive workflow for integrating external data sources into the Glean enterprise search platform. It covers setting up custom datasources, performing high-volume bulk document indexing using the Indexing API, and granularly managing document permissions (read/write access) to ensure accurate and secure search results for large organizations. Ideal for data engineers and developers building internal knowledge bases.

This skill provides programmatic access to manage Hex workspace resources and configure scheduled project runs via the Hex Admin API. It allows users to automate repetitive tasks, monitor project execution status, and manage users, groups, and data connections using external cron triggers or API calls, ensuring robust workflow automation.

Detects goal hijacking vulnerabilities where malicious instructions are hidden within external content sources processed by the agent, such as retrieved documents (RAG), uploaded files, or web page content. This skill simulates these attack vectors to ensure the agent only uses the provided context for the stated task and does not execute embedded hidden commands.