Skill UI

Generates and implements backup strategies for databases and applications, producing configuration files and automation scripts that ensure secure, scalable protection and disaster recovery readiness across platforms.

Keeps task_plan.md, findings.md and progress.md on disk as durable working memory for multi-step AI-agent work, with hooks injecting context and safe state recovery. Use for research or tasks needing 5+ tool calls.

This skill details advanced digital forensics techniques for recovering metadata and content of deleted files by analyzing the NTFS Master File Table ($MFT). It covers examining key system artifacts like $LogFile and $UsnJrnl, and analyzing MFT slack space. Use this when reconstructing file system timelines, investigating data loss, or detecting anti-forensic techniques like timestomping during a Windows forensic examination.

This skill analyzes the cryptographic algorithms, key management systems, and file encryption routines employed by various ransomware families. It covers hybrid schemes like AES-RSA and modern ciphers such as ChaCha20. Use this when assessing data recovery feasibility, reverse engineering ransomware binaries, identifying implementation weaknesses (e.g., IV reuse, key derivation flaws), or developing custom decryptor tools.

A comprehensive method for deep forensic analysis of NTFS disk images. It examines critical artifacts such as the Master File Table (MFT), USN Change Journal, Alternate Data Streams (ADS), and unallocated slack space. This is essential for recovering deleted file metadata, detecting hidden data, and reconstructing file system activities when standard recovery tools are insufficient.

A comprehensive guide and workflow for digital forensic investigators to analyze ransomware artifacts. This process involves preserving volatile evidence (memory dumps), identifying the ransomware variant from file extensions and ransom notes, establishing the attack timeline using Prefetch and Event Logs, and extracting critical Indicators of Compromise (IoCs) such as Bitcoin addresses and Tor sites. Essential for incident response and recovery planning.

A comprehensive guide and workflow for recovering deleted files (documents, images, videos, etc.) from damaged storage media, forensic disk images, or corrupted file systems. It utilizes PhotoRec's file signature-based carving engine, allowing data recovery regardless of file system damage. The process includes advanced steps for file validation, hashing, and organizing evidence for forensic analysis.

Implements Manus-style file-based planning to organize complex tasks, enforcing persistent markdown plan/findings/progress files, enforcing read-before-decide and write-after-action rules, and enabling session recovery after /clear.

This skill enables AI agents to maintain persistent planning context using Markdown files (task_plan.md, findings.md, progress.md). It supports lifecycle hooks for context injection and session recovery, ensuring continuity in multi-step workflows. Ideal for complex research or tasks requiring more than 5 tool calls without network uploads.

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

This advanced skill manages complex, large-scale development tasks by coordinating multiple, specialized subagents in parallel. It systematically decomposes the goal into isolated missions, manages resource quotas (token usage), and handles error recovery across multiple files and components. Ideal for large feature builds, system refactoring, or complex applications requiring multiple, concurrent roles (Planner, Builder, Tester).

This guide provides a deep dive into the cryptographic techniques used by ransomware, including AES, RSA, ChaCha20, and hybrid schemes. It covers identifying algorithms, analyzing key management patterns (strong, weak, flawed), and reverse engineering file encryption routines to assess decryption feasibility and support recovery efforts.