Skill UI

This skill generates comprehensive Entity Relationship Diagrams (ERDs) and database schemas as D2 source code from an existing Entity Framework Core codebase. It analyzes DbContexts, DbSet declarations, Fluent API mappings, and migrations to accurately visualize tables, columns, primary/foreign keys, relationships (including many-to-many joins), owned types, and constraints. The output is a structured .d2 file, suitable for rendering into SVG or PNG, helping developers document the persistence model.

A robust API-backed skill for fetching YouTube transcripts, searching video content, browsing channels, and extracting playlists. It functions reliably from any cloud server environment, bypassing limitations found in local tools like yt-dlp or reliance on Google API keys. Ideal for building research corpora, competitive intelligence monitoring, and systematic content analysis.

This tool assists researchers in structuring complex academic papers by systematically mapping specific claims within designated sections (Introduction, Method, Results, Discussion) to available BibTeX citation keys. By planning citations beforehand, users can ensure proper citation density, maintain structural integrity, and guarantee that every critical claim is adequately supported according to the paper's required style and focus.

This tool generates a comprehensive, structured, five-section academic paper outline (Abstract, Introduction, Method, Results, Discussion) based on a provided research topic, preference brief, and source references. It ensures the outline contains sufficient substance and integrates multiple citation keys, serving as a robust foundation for a full-length research paper.

A powerful utility for programmatically controlling and monitoring interactive terminal sessions running within tmux. It allows users to send keystrokes, scrape full pane output history, navigate between panes/windows, and manage the lifecycle of long-running CLIs (like AI coding sessions). Essential for advanced scripting and reliable remote workflow automation, especially when dealing with stateful, interactive applications.

An open-source, advanced tool for professional post-production of screen recordings. It automatically speeds up idle segments, applies auto-zoom on click clusters, overlays keystroke chips, and renders smooth synthetic cursors. It specializes in generating high-quality, vertical (9:16) videos optimized for social media and public demos.

A comprehensive guide to deploying cloud-native deception across AWS, Azure, and GCP. This skill utilizes decoy resources—such as canary IAM keys, honey object storage buckets, and decoy secrets—whose sole purpose is to generate high-fidelity alerts the instant they are interacted with by an attacker. It detects cloud reconnaissance, credential theft, and lateral movement by wiring detection through native logging services (CloudTrail, Sentinel, Cloud Audit Logs), ensuring near-zero false positives for the SOC.

Automated system designed to monitor paste sites (e.g., Pastebin, GitHub Gists) for leaked credentials, API keys, and sensitive data dumps. It uses advanced scraping, keyword matching, and regex patterns to provide early detection of data breaches and security incidents.

This comprehensive guide details how to use industry-leading tools like TruffleHog and git-secrets to scan source code repositories, full git history, and configuration files for hardcoded AWS credentials and secrets. It is essential for integrating secrets detection into CI/CD pipelines, performing proactive security audits, and ensuring compliance by preventing sensitive keys from reaching production environments.

This technique abuses the Active Directory's `msDS-KeyCredentialLink` attribute to inject attacker-controlled public keys (Shadow Credentials). After gaining write access (e.g., via BloodHound), the attacker uses tools like pyWhisker or Certipy to append their key. They then authenticate via PKINIT to recover the target's NT hash, achieving complete account takeover without the disruptive step of a password reset. Ideal for stealthy red-teaming engagements.

A guide to designing friction-free developer onboarding experiences. Learn best practices for implementing GitHub OAuth, generating immediate API keys, and utilizing progressive profiling to maximize signup conversion rates while respecting the developer's time. Focuses on moving users from zero to coding as fast as possible.

This utility detects and redacts sensitive personally identifiable information (PII) from screenshots and images. It can mask various data types, including IDs, credit card numbers, API keys, phone numbers, and emails. Crucially, all processing is conducted locally and offline, ensuring that sensitive data never leaves the user's machine. It is essential for secure debugging, data sharing, and analysis workflows.