Skill UI

A powerful web toolkit powered by Exa, specifically optimized for scholarly and technical research. This skill handles advanced web searching (semantic lookups, current events) and precise URL content extraction (fetching articles, PDFs, and web pages). It excels in academic contexts, allowing users to bias results toward peer-reviewed papers and specific scholarly domains for high-quality, reliable information gathering.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

A comprehensive guide for managing and operating the KubeSphere network extension. This skill provides detailed instructions on installing, upgrading, enabling, or disabling the network extension, managing Calico IPPool resources, configuring NetworkPolicies, and troubleshooting network isolation flows within a Kubernetes cluster environment. Essential for platform engineers and DevOps teams.

A comprehensive guide detailing attack methodologies for Z-Wave smart home networks. Techniques covered include sniffing during inclusion (S0/S2), exploiting key derivation flaws, performing replay attacks on unauthenticated nodes, and crucial hub compromise (pivoting) to gain full control over the entire mesh network. Essential reading for IoT penetration testing.

This router serves as the initial guide for comprehensive security assessments on new targets or unknown attack surfaces. It helps users map the scope, discover hidden assets, perform detailed technology fingerprinting, build endpoint inventories, and strategically plan the optimal testing path before diving into specific vulnerability checks (e.g., API, Auth, Injection).

This skill performs a post-generation, per-page review to refine the visual quality of academic talk decks (PPTX and Beamer). It systematically addresses layout drift, adjusts font scaling for projector readability, fixes common typographical errors (e.g., italic leaks, overflow), and aligns the overall visual weight of the presentation to a specified reference PDF or style preset. It is ideal for the final polish of content-rich, visually complex academic presentations.

This expert playbook details advanced techniques for establishing secure network tunnels and pivoting through compromised hosts. It covers various methods like SSH (Local, Remote, Dynamic, Jump), Chisel, Ligolo-ng, socat, and ProxyChains. Use this guide to bypass network restrictions, establish persistent access, and perform multi-layered lateral movement within restricted environments.

The Form Model system provides a comprehensive, declarative way to build complex user forms. It supports defining various field types (Text, Number, DateTime, File, Object, etc.) using a fluent builder API. Developers can control layout, apply advanced validation (Zod), implement conditional visibility/disability rules, and handle complex data structures like nested objects and dynamic zones, making it ideal for building advanced admin interfaces.

A powerful skill for developers extending website builders by adding custom tabs or modifying existing settings groups within the page settings drawer. It utilizes `PageSettingsGroup.Interface` and `PageSettingsGroupModifier.Interface` to inject complex form fields, manage layout, and persist custom data safely within `doc.extensions`. Essential for building sophisticated CMS features.

WizTelemetry Notification is the core notification component of the KubeSphere observability platform. It ingests alerts, cloud events, and audit logs in a multi-tenant Kubernetes environment. It intelligently routes and distributes notifications to various channels (Email, Slack, DingTalk, etc.) based on sophisticated label matching and predefined routing rules, ensuring reliable and targeted communication in complex cloud deployments.