Skill UI

This skill loads and parses a structured handoff document, enabling the user to resume work from a previous session. It systematically extracts the project's scope, files involved, completed tasks, key discoveries, and next steps. Crucially, it summarizes its understanding and mandates user confirmation before taking any action, ensuring accurate context and continuity.

This skill implements an advanced reference pattern for integrating with Monitoring Control Platform (MCP) servers. It ensures accurate data retrieval by first reading a domain-specific 'gotchas' reference file, mitigating query failures caused by complex server behaviors, pagination limits, or subtle API quirks. It analyzes issue data, groups errors by root cause, and generates a structured, actionable markdown report for improved system health visibility.

This command inspects the native code execution sandbox environment. It reports on platform compatibility (e.g., bubblewrap, Seatbelt), active security configurations (auto-allow status, filesystem policies, network allowlists), and details recent security violations. Use it to audit the execution environment before running autonomous workflows.

Generates formal, structured EU AI Act compliance assessment reports for legal files, audit trails, and regulatory inquiries. Supports multiple report formats, adaptive intake of system details, consistency validation, and cross-checks against regulation (EU) 2024/1689. Suitable for documentation and governance use.

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

A comprehensive guide for creating and maintaining an atomic, index-driven knowledge base (KB) using Markdown. This method enables AI agents to bypass traditional vector search limitations by reading a central index file (INDEX.md) and opening only the most relevant, highly signaled notes, drastically improving context efficiency.

A comprehensive guide for red team operators detailing techniques to manipulate, clear, or destroy digital evidence on Windows and Linux systems. Covers clearing Windows Event Logs (wevtutil), manipulating Linux system logs, timestamp forgery, file system scrubbing, and memory artifact removal. Essential for understanding advanced evasion methods and achieving operational security during authorized engagements.

A deep-dive methodology for authorized penetration testing targeting dependency confusion and namespace resolution vulnerabilities across major package ecosystems (npm, PyPI, NuGet, Maven, etc.). This skill details advanced reconnaissance techniques, from analyzing lock files and source maps to exploiting error messages, alongside safe Proof-of-Concept (PoC) creation using DNS canaries for discovery during penetration engagements.

This systematic tool diagnoses and resolves complex issues within the OpenViking memory plugin ecosystem. It comprehensively checks the plugin's installation integrity, configuration file parsing (e.g., ovcli.conf), network connectivity, and API key validation. Use it whenever memory functions fail, keys are rejected, or the plugin status is unclear, guiding you to the root cause.

This skill systematically audits Playwright End-to-End (E2E) test files. It checks for common anti-patterns, adherence to best practices, and identifies coverage gaps across the entire test suite. It provides a detailed score (1-10) and generates actionable reports, including suggested code fixes, significantly improving test reliability and maintainability.

Provides comprehensive architectural guidance for implementing robust, crash-safe, and versioned save/load systems for games. Covers serialization best practices, atomic file writing, schema migration, and autosave implementation, ensuring player progress persists reliably across updates and crashes.

This skill automates the final deployment phase of an agent system. It converts a validated build sheet into four ordered JSON payloads (environment, agent, session, kickoff) and generates a resumable `launch.sh` script. Crucially, this process enforces API-key safety by requiring the user to run the script in their shell, pulling the Anthropic API key from the environment variable, thus ensuring the key never appears in logs or files. It provides a structured, multi-step launch sequence.