Skill UI

This guide details using the comprehensive AADInternals PowerShell toolkit for defensive validation of Microsoft Entra ID, Azure AD, and AD FS environments. It covers unauthenticated tenant reconnaissance, acquiring access tokens for multiple Microsoft APIs, and critically, testing for federation backdoors (Golden SAML) by simulating advanced attack techniques (MITRE T1606.002). It is designed for authorized red-team assessments to map external attack surfaces and validate identity infrastructure hardening.

A comprehensive security auditing tool designed to detect UEFI Secure Boot bypasses and advanced bootkits (like BlackLotus and Bootkitty). It verifies the Secure Boot state, checks the freshness of the dbx revocation list, and hashes EFI boot binaries against known-bad sets. Use this skill for auditing enterprise fleets after major bootkit advisories or for hunting pre-OS persistence on compromised endpoints.

A comprehensive red-teaming technique for Active Directory Certificate Services (AD CS). This skill utilizes the Certipy toolkit to enumerate and exploit various Certificate Service Configuration (ESC1-ESC16) misconfigurations over LDAP/RPC. It enables attackers to forge privileged certificates and perform PKINIT authentication, escalating a low-level domain foothold to Domain Admin or Domain Controller access during authorized penetration tests.

This skill proactively hunts for advanced firmware threats, including UEFI bootkits (e.g., BlackLotus, ESPecter), residing in the EFI System Partition (ESP). It establishes a cryptographic baseline, verifies bootloader signatures, scans for out-of-band changes, and uses YARA rules to detect persistence mechanisms related to pre-OS compromise (MITRE ATT&CK T1542.003). Ideal for forensic investigations and security hardening.

This skill helps diagnose, repair, and prevent complex Drizzle Kit database migration conflicts. It addresses issues arising from merging branches, rebasing, or PR updates involving generated SQL, snapshots, and journals. Use it to ensure stable schema evolution in multi-developer teams and harden CI/CD workflows.

A comprehensive guide and generator for writing robust, production-grade unit and integration tests using JUnit 5 in Java. It covers advanced features like parameterized tests, Mockito mocking, lifecycle management, and nested test structures. Use this skill when you need to write clean, reliable, and highly structured Java test suites.

Riffkit analyzes the emotional structure, pacing, and successful 'formula' of a winning short video (like a viral TikTok). It then regenerates an entirely new, original video using this proven formula, customized with your product, character, and desired language (English or Spanish). This skill is ideal for creating high-quality, scalable User-Generated Content (UGC) ad creatives or marketing promos for platforms like TikTok and Meta.

This skill covers the principles of building Software Development Kits (SDKs) that provide an exceptional developer experience (DX). Learn how to design intuitive APIs, utilize progressive disclosure, establish sensible defaults, and implement actionable, guiding error messages. The focus is on driving product adoption by making the developer's workflow seamless and productive. Ideal for product managers, technical leads, and API designers.

Context Kit is an external framework designed to organize and manage personal, durable context data (like identity details, memories, and domain knowledge) into secure Markdown artifacts. It helps users set up robust knowledge bases for coding agents (e.g., Claude Code), guiding them on best practices for data privacy, local storage, and safe integration, while preventing sensitive data leaks.

This skill utilizes the Taisly Agent Kit to manage the entire workflow for publishing approved short-form videos across major platforms, including TikTok, Instagram Reels, YouTube Shorts, X, and Facebook. It facilitates agent-assisted publishing by ensuring coordination of captions, metadata, and campaign details. A critical feature is the mandatory explicit confirmation gate, which prevents any state-changing publishing action without explicit user approval, prioritizing safety and compliance.

A comprehensive guide to Test-Driven Development (TDD) for Quarkus 3.x LTS, focusing on event-oriented architectures. This framework utilizes JUnit 5, Mockito, REST Assured, Apache Camel, and JaCoCo to ensure high code coverage (80%+). Use it when developing new features, fixing bugs, or refactoring event-driven services and API endpoints.

This comprehensive guide details the complete Test-Driven Development (TDD) workflow for Spring Boot applications. It covers best practices for writing unit tests (JUnit 5, Mockito), web layer tests (MockMvc), integration tests (SpringBootTest), and persistence tests (DataJpaTest). It also instructs how to use Testcontainers for realistic database simulations and achieve high code coverage with JaCoCo, ensuring robust and maintainable codebases.