Skill UI

This tool generates comprehensive API documentation directly from source code. It supports various API types, including REST, GraphQL, and RPC, and extracts crucial details like endpoints, parameters, data models, and authentication methods. It outputs standard formats such as Markdown, OpenAPI 3.0 YAML, and API Blueprint, streamlining the process of creating accurate and complete interface specifications for development teams.

A comprehensive guide for integrating Microsoft Graph SDK into applications. It covers accessing Microsoft 365 data (users, mail, calendar, Teams, SharePoint) from various languages (.NET, Python, TypeScript). Key topics include robust authentication patterns (Managed Identity, OBO), advanced data retrieval techniques like pagination, delta queries, batch requests, and setting up change notifications via webhooks. Learn best practices for secure and efficient API interaction.

This skill generates comprehensive, academic-style survey papers as a single, self-contained HTML file. By reading an anchor resource and curating research data, it structures the content and utilizes advanced LLMs (like Kimi K2.6 via Fireworks) to generate all prose, figures, and bibliographies, suitable for rapid academic literature review.

This skill uses Python and boto3 to analyze AWS CloudTrail logs. It establishes statistical baselines of normal API activity and detects various anomalies, such as unusual event sources, first-time API usage, geographic IP deviations, and high-frequency calls. This is critical for identifying credential compromise, privilege escalation, and unauthorized resource access in a security incident.

This skill provides advanced threat hunting queries for Microsoft Sentinel/Log Analytics. It detects the behavioral and string fingerprints left by popular offensive Entra ID enumeration tools (like ROADtools, AADInternals, and AzureHound) within both MicrosoftGraphActivityLogs and AADGraphActivityLogs. Use this when investigating suspicious Graph API activity, identifying internal reconnaissance, or building detection rules to surface active intrusions.

This skill provides comprehensive, read-only access to the pkg.go.dev API using the `godig` tool. It allows users to query detailed information about Go packages and modules, including full documentation, API signatures, available versions, dependency graphs, and known security vulnerabilities. It is essential for researching the external Go ecosystem and comparing library metadata.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

Automates the creation of Architecture Decision Records (ADRs). This tool manages the entire lifecycle of an ADR: determining the next sequential ID, generating a standardized Markdown file, storing the record in the AgentDB graph, and automatically linking it to related decisions. Essential for documenting significant architectural choices, API designs, and data model changes to maintain system knowledge coherence.

Matplotlib is the foundational Python library for creating static, animated, and high-quality visualizations. This comprehensive skill guide covers everything from basic line plots and scatter graphs to advanced concepts like multi-subplot layouts, heatmaps, and 3D visualization. It details both the convenient pyplot interface and the powerful object-oriented API, ensuring you can generate publication-ready charts with professional customization.

A comprehensive, 10-phase methodology for authorized security assessment of modern APIs, including REST, GraphQL, WebSocket, and SOAP. This guide covers the entire testing lifecycle—from endpoint discovery and authentication bypass (JWT/OAuth 2.0) to sophisticated authorization flaws (BOLA/IDOR/BFLA), input validation, rate limiting, and CI/CD integration testing.

A specialized skill for detecting discrepancies (drift) between declared API contracts (such as GraphQL schemas, OpenAPI specs, and RPC manifests) and the actual behavior of live backend handlers. It is used to identify hidden operations, contract mismatches, or vulnerabilities resulting from schema evolution, versioning skew, or implementation gaps. Must be used after initial sandbox assumptions are established.

Integrate SharePoint Online sites, lists, and document libraries into Power Apps projects. Supports list discovery, creating new lists, and configuring the SharePoint connector using CLI and Microsoft Graph APIs.