Skill UI

A comprehensive guideline for establishing and documenting the reproducibility of complex sensor-systems artifacts. It covers necessary components such as firmware sources, detailed hardware Bills of Materials (BOMs) and board files, raw sensor traces, ground truth data, and calibrated measurements. Use this guide to ensure that scientific claims can be verified by a competent reader, detailing the exact dependencies on physical equipment and software toolchains.

This skill guides agents through comprehensive resource and filesystem operations within the OpenViking CLI. It covers the entire data lifecycle, including adding, importing, exporting, backing up, restoring resources, and performing standard filesystem actions (e.g., list, find, write, delete) under the `viking://resources/` namespace. Use this when the user needs to manage context, search data, or execute complex command sequences.

This skill generates fully valid Microsoft Threat Modeling Tool (.tm7) files. It translates complex system architectures, including components, data stores, data flows, and external actors, into the required WCF DataContractSerializer XML format. Use it for structured STRIDE threat modeling outputs compatible with Microsoft's official tool.

A specialized guide for assessing whether a storage systems or file system manuscript fits the USENIX FAST conference. It covers venue positioning, required evidence (realistic workloads, fault models), appropriate framing, and comparison methodologies necessary for top-tier systems conference submissions.

This specialized skill traces the complete lifecycle of an uploaded or imported file through complex backend systems. It maps the sequence from ingress to final consumer, tracking every derived artifact, archive extraction, format conversion, parser invocation, and deserialization step. It is crucial for security analysis, vulnerability research, and understanding how a file reaches a decisive backend effect after initial sandbox assumptions are made.

This specialized skill is designed for Digital Forensics and Incident Response (DFIR) scenarios. It correlates evidence from multiple disparate sources—including EVTX, PCAP, registry, memory, and filesystem artifacts—to build a comprehensive, ordered, and replayable forensic timeline. Use it when the goal is to map the full sequence of attacker actions, establishing initial access, lateral movement, and persistence chains based on cross-source evidence correlation.

Orchestrates a robust, multi-stage cyber defense pipeline using specialized AI agents to analyze raw log files (e.g., nginx, auth, syslog). The system ingests logs, detects anomalies, classifies overall risk, and generates a comprehensive, actionable incident report, making it ideal for security investigations and breach analysis.

This tool audits and validates all Claude Code hooks defined across your settings files. It checks for validity, performance safety, correct event scoping, and proper exit-code handling (blocking vs. non-blocking). Essential for initial setup, debugging hooks that fail to fire, or performing routine system hygiene passes to ensure your agent's tool flow is robust and reliable.

A comprehensive skill for AI agents to perform advanced filesystem operations. It provides features for intelligent file listing with deep filtering, powerful content and pattern searching, safe batch file copying, and detailed directory analysis (statistics, tree visualization). Ideal for code analysis, system auditing, and managing project assets.

This skill loads and parses a structured handoff document, enabling the user to resume work from a previous session. It systematically extracts the project's scope, files involved, completed tasks, key discoveries, and next steps. Crucially, it summarizes its understanding and mandates user confirmation before taking any action, ensuring accurate context and continuity.

This skill implements an advanced reference pattern for integrating with Monitoring Control Platform (MCP) servers. It ensures accurate data retrieval by first reading a domain-specific 'gotchas' reference file, mitigating query failures caused by complex server behaviors, pagination limits, or subtle API quirks. It analyzes issue data, groups errors by root cause, and generates a structured, actionable markdown report for improved system health visibility.

This command inspects the native code execution sandbox environment. It reports on platform compatibility (e.g., bubblewrap, Seatbelt), active security configurations (auto-allow status, filesystem policies, network allowlists), and details recent security violations. Use it to audit the execution environment before running autonomous workflows.