Skill UI

Guides penetration testers through systematic host header injection checks, covering password reset poisoning, cache poisoning, SSRF, virtual host routing, and connection-state attacks for web applications.

Guides on using SwanLab for open-source ML experiment tracking, offering local or self-hosted dashboards, rich media logging, and integrations with PyTorch, Transformers, Lightning, or Fastai for comparing runs and monitoring metrics.

This guide details how to build an MCP app, which is an MCP server enhanced to serve interactive UI resources. It allows developers to render complex widgets—such as forms, pickers, dashboards, and confirmation dialogs—directly inline within a chat conversation. Learn about the architecture, host specifics, and when to use a widget versus standard text output.

Detect NTLM relay attacks by correlating Windows Security Event 4624 LogonType 3 entries against IP-to-hostname inventories, auditing SMB/LDAP signing enforcement, spotting Responder/LLMNR poisoning traffic, and tagging NTLM downgrade attempts for SIEM alerting.

This skill is designed for performing local, on-premise evaluations and benchmarking of models hosted on the Hugging Face Hub. It facilitates running specialized evaluation frameworks like `inspect-ai` and `lighteval` against local hardware. Users can select optimal inference backends, including `vllm` for high throughput, or fall back to Hugging Face Transformers or `accelerate`, ensuring comprehensive smoke testing and task selection for LLMs. It focuses purely on the local execution process, separate from remote jobs or publishing workflows.

Deploys Cilium Tetragon-based eBPF tracing to watch processes, network, file access, and enforce runtime policies while streaming JSON events to SIEM pipelines for Linux hosts or Kubernetes clusters.

Adversarial Code Reviewer enforces three hostile personas to expose blind spots before merging, deduplicating findings, promoting shared issues, and issuing BLOCK/CONCERNS/CLEAN judgments after diff or file inspection.

AgentPhone is an API-first platform designed for developers building AI agents with advanced telephony capabilities. It allows agents to manage phone numbers, make/receive voice calls, and handle SMS messages. Developers can utilize hosted mode for simple AI interactions or webhook mode for custom, complex logic, making it ideal for building sophisticated customer support bots or virtual assistants.

Handles Feishu calendar operations like creating and updating events, inviting attendees, querying availability, and managing repeat instances with timezone-aware ISO 8601 inputs, ensuring hosts stay in sync with RSVPs.

Generates Morph-animated PowerPoint decks via officecli, guiding through planning brief creation, scene actor naming, ghosting rules, and safe CLI usage so presenters get smooth transitions and repeatable builds.

Transforms user articles, reports, or documentation into natural two-host conversational podcasts by building structured JSON scripts and running the bundled TTS pipeline to emit MP3 audio plus transcripts.

Guides configuring HTTP/HTTPS, SNMP, and SMB services plus verification and log review for penetration testing labs using Windows or Linux hosts.