Skill UI

This comprehensive playbook details expert techniques for exploiting Server-Side Request Forgery (SSRF). It covers bypassing URL filters, accessing cloud metadata endpoints (AWS, GCP, Azure), utilizing advanced protocols like Gopher, and chaining vulnerabilities to achieve Remote Code Execution (RCE) in real-world scenarios. Ideal for penetration testers and security researchers.

This skill guides the design and optimization of production-grade multi-agent systems. It specializes in using LangGraph, LangChain, and DeepAgents to create structured, complex AI workflows. It covers state management, agent routing, memory integration, and tool calling, making it ideal for building robust, scalable agents like supervisors, planners, and coders.

This skill simulates a General Counsel's deep dive review across critical legal domains, including Intellectual Property, data privacy (GDPR/CCPA), liability, and regulatory compliance. It forces users to adopt a rigorous legal lens when evaluating term sheets, MSAs, or major business commitments, helping identify high-risk clauses and necessary negotiation points before signing.

This framework provides comprehensive detection capabilities for compromised cloud credentials across major platforms including AWS, Azure, and GCP. It analyzes critical threat indicators such as anomalous API activity, impossible travel patterns (impossible login locations), and unauthorized resource provisioning. Designed for incident response, security monitoring, and building robust detection rules to mitigate account takeover and credential abuse.

A comprehensive guide to deploying cloud-native deception across AWS, Azure, and GCP. This skill utilizes decoy resources—such as canary IAM keys, honey object storage buckets, and decoy secrets—whose sole purpose is to generate high-fidelity alerts the instant they are interacted with by an attacker. It detects cloud reconnaissance, credential theft, and lateral movement by wiring detection through native logging services (CloudTrail, Sentinel, Cloud Audit Logs), ensuring near-zero false positives for the SOC.

Provides a comprehensive guide to implementing Zero Trust Network Architecture on Google Cloud Platform (GCP) using Identity-Aware Proxy (IAP). It enforces rigorous, per-request identity verification and context-aware authorization for services like Compute Engine, App Engine, and Cloud Run. This ensures that only authenticated users who meet specific criteria (e.g., device posture, corporate location, time window) can access protected resources, eliminating reliance on public IPs or VPNs.

Stratus Red Team is an open-source tool designed for detection engineering and purple teaming. It programmatically detonates granular, documented offensive techniques across major cloud platforms (AWS, Azure, GCP, and Kubernetes). It validates existing security detections (like CloudTrail/GuardDuty) by simulating real attacker activity in a controlled, reversible environment. The tool ensures deterministic lifecycles, guaranteeing that all created resources are cleaned up after testing.

Riffkit analyzes the emotional structure, pacing, and successful 'formula' of a winning short video (like a viral TikTok). It then regenerates an entirely new, original video using this proven formula, customized with your product, character, and desired language (English or Spanish). This skill is ideal for creating high-quality, scalable User-Generated Content (UGC) ad creatives or marketing promos for platforms like TikTok and Meta.

This utility provides garbage collection for Claude Code configurations. It periodically scans various directories—including skills, memory files, hooks, permissions, and caches—to identify orphaned, stale, or redundant configuration items. Crucially, the process is designed to be non-destructive, always requiring explicit human confirmation for every deletion to ensure a safe, audited cleanup process.