Skill UI

This tool provides a comprehensive overview of the federation's operational status. It allows users to check overall health, list connected peers along with their trust levels and scores, and summarize crucial metrics like active sessions, message exchanges, PII redactions, and detected threats. Use it to inspect cross-installation agent connectivity and ensure the stability of the federated system.

A comprehensive security assessment skill for identifying vulnerabilities in federated identity systems, including SAML, OIDC, and OAuth 2.0 flows. It covers common misconfigurations, such as signature tampering, PKCE failures, redirect URI issues, and token confusion, ensuring robust SSO implementation.

This skill maps an organization's entire identity fabric, identifying its tenant boundaries (federation mapping) and various Identity Providers (IdPs like Entra, Okta, ADFS, Google). It performs pre-authentication user enumeration and synthesizes login candidates using harvested names and confirmed email patterns. It is strictly for reconnaissance and mapping, never for credential submission or authentication bypass.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

Implements federated sign-in using Amazon Cognito as the central user pool. This skill allows developers to integrate various external Identity Providers (IdPs) such as Google, Facebook, Apple, and Microsoft (OIDC/Entra ID) for Single Sign-On (SSO). It automates the setup of Cognito User Pool Domains, OAuth configurations, and handles the complex identity synchronization process, ensuring seamless user experience while maintaining centralized user management.

This skill guides developers through configuring Microsoft Entra ID (Azure AD) as a federated identity provider for Webiny projects. It enables Single Sign-On (SSO) by allowing users to authenticate using their corporate Microsoft 365 accounts. The setup involves registering an application in the Entra ID portal and integrating the credentials into the Cognito Federation structure, allowing Cognito to remain the core user pool while utilizing Microsoft identities for login.

Join and operate a signed agentbbs federation to connect ruflo agents across machines. Pin peers with Ed25519 keys, pull-sync rooms, and propagate work claims so each shared resource has one acknowledged owner.

This skill queries the NCATS Translator ARAX API for biomedical knowledge-graph relationships. It supports one-hop and two-hop lookups with Biolink constraints, entity normalization, and provider federation. Users can inspect provenance and edge bindings. It is designed for public research queries only, requiring Python 3.10+ and HTTPS access. Do not use for clinical guidance or sensitive data.