Skill UI

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized container-security assessment. Use when executing an approved breakout test, demonstrating the real impact of a privileged or hostPath workload, or validating that escape mitigations actually hold. Keywords: container breakout, privileged, hostPath, docker.sock, runC CVE-2019-5736, CVE-2024-21626, release_agent, nsenter. Do not use for defensive detection of these techniques - use detecting-container-escape-attempts.

This skill proactively hunts for advanced firmware threats, including UEFI bootkits (e.g., BlackLotus, ESPecter), residing in the EFI System Partition (ESP). It establishes a cryptographic baseline, verifies bootloader signatures, scans for out-of-band changes, and uses YARA rules to detect persistence mechanisms related to pre-OS compromise (MITRE ATT&CK T1542.003). Ideal for forensic investigations and security hardening.

This guide details the process of parsing core Windows forensic artifacts, including MFT, Prefetch, Registry hives, ShellBags, and Amcache. Utilizing Eric Zimmerman's specialized EZ Tools, raw evidence is converted into standardized CSV/JSON formats. This process is crucial for Digital Forensics and Incident Response (DFIR) investigations, enabling analysts to reconstruct program execution, file access history, and persistence mechanisms, which can then be loaded into Timeline Explorer for unified analysis.

This skill enables users to upload local images, such as screenshots or before-and-after comparisons, directly to GitHub using the GitHub CLI. It bypasses the lack of a public image upload API by mimicking the web UI's internal attachment flow, generating canonical `user-attachments` URLs. These URLs can then be seamlessly embedded into Pull Requests, Issues, or comments from the terminal.

This advanced protocol forces the AI to conduct a thorough context audit before attempting any complex task. It mandates reading every relevant file, identifying architectural gaps, and providing a detailed orientation statement. It is essential for multi-file modifications, system design, and debugging to prevent acting on assumptions and maintain high code accuracy. The AI cannot proceed until all unknown variables are resolved.

This skill provides comprehensive best practices for designing modern and robust React user interfaces. It covers critical patterns for managing asynchronous data, including optimal loading state indicators (skeletons vs. spinners), structured error handling hierarchies, and designing contextual empty states. Essential for improving user experience during data fetching and operations.

Utilize this skill to assess the health, adoption, and performance metrics of published EAS Updates directly via the CLI. It reports critical data points including crash rates, unique user counts, install volumes, payload size, and the split between embedded and OTA users, making it essential for post-publish monitoring and regression detection.

This guide details best practices for implementing robust, type-safe GraphQL queries and mutations. It covers using separate .gql files, running code generation tools, and implementing mandatory error handling (onError) and loading states. Use this when building complex, reliable data fetching layers with Apollo Client.

The `hf-mem` skill estimates the necessary VRAM or system memory required to load Safetensors or GGUF model weights for inference directly from the Hugging Face Hub. It uses efficient HTTP Range requests, avoiding local downloads. Users can determine if a model fits on their GPU or instance, including optional estimations for the KV cache and setting limits like maximum sequence length.

Neon Functions provide long-running, stateful, serverless HTTP handlers deployed directly next to your Neon database branch. They are ideal for complex backend workloads that exceed traditional serverless limits, such as real-time WebSockets, Server-Sent Events (SSE) streaming, or sophisticated AI agents. Functions automatically inject the database connection URL and maintain state within the function scope, ensuring high performance and data proximity.

Neon Object Storage provides S3-compatible, branch-aware object storage directly integrated with your Neon Postgres project. It ensures that files (images, documents, user uploads) remain perfectly synchronized with the database schema across all development branches (dev, preview, staging, production). Use this skill when you need a single backend for both database rows and file assets, eliminating the need for separate cloud storage providers.

rclone is a powerful, feature-rich command-line utility designed to manage files across diverse cloud storage backends, including S3-compatible services. It provides robust, reliable equivalents to core Unix commands (sync, copy, move, mount). Use this skill for all terminal-based cloud operations, such as syncing, backing up, downloading, or managing remote data securely.