Skill UI

This tool restores project context, crucial after a session clear. It comprehensively analyzes Git history, summarizing recent commits, tracking uncommitted changes, scanning for outstanding TODOs/FIXMEs, and verifying the current project structure. It helps developers quickly re-establish the full working context to resume work efficiently.

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.

This utility guides users in creating standardized and descriptive commit messages for staged changes using the Conventional Commits specification. It enforces structure, defining types (feat, fix, chore, etc.), scopes, and detailed body/footer requirements, ensuring a clear and maintainable project history.

A specialized downstream skill for advanced CTF and security sandbox environments. This tool is used when the challenge requires reconstructing the exact message sequence, state transitions, and field mutations necessary for a system to accept a session. It handles complex tasks like recovering custom framing, checksum validation, stateful replay, and identifying the minimal conversation path that proves a specific branch acceptance.

A specialized deep-dive skill for analyzing container-to-host escape vulnerabilities. This tool is used after a sandbox orchestrator establishes initial assumptions, focusing on mapping isolation boundaries (namespaces, cgroups, seccomp, capabilities). It helps prove boundary crossings, identify minimal exploit primitives, and determine if an exploit can break out of the container context to the host kernel.

This advanced skill specializes in analyzing complex mail-related abuse scenarios, including OAuth consent flows, forwarding rule exploitation, shared mailbox access, and transport rule manipulation. It is used in forensic investigations to trace message artifacts, identify persistence mechanisms, and prove privilege escalation or data exfiltration following a compromise.

A highly specialized, downstream skill for advanced threat analysis. This tool is used to recover hidden configurations, decode C2 (Command and Control) parameters, unpack staged payloads, and extract Indicators of Compromise (IOCs) from complex malware samples. It focuses on identifying the exact decode chains—including compression, encoding, and crypto steps—and linking recovered fields to observed behavioral outcomes within a sandbox environment.

This specialized skill analyzes the complete lifecycle of real-time web communications, including WebSocket and Server-Sent Events (SSE). It is designed to map the initial handshake, decode complex message streams (subscriptions, keepalives, pushes, reconnects), and trace how frame activity leads to persistent or rendered state changes. Use this to isolate the minimal, decisive sequence of events that prove a system's behavior.

This tool de-identifies sensitive free-text columns (e.g., names, dates, identifiers) in local structured datasets (CSV, JSONL, Parquet) using advanced OpenMed models. It ensures strict privacy by generating a completely redacted dataset and a separate PHI-free aggregate summary, allowing for secure data sharing and analysis without compromising source privacy or logging sensitive values.

Generates high-quality, structured technical documentation for READMEs, APIs, and architecture guides, adhering to progressive disclosure principles. It also specializes in creating formal, evidence-backed security reports for penetration testing, CTF writeups, and reverse engineering tasks, ensuring a professional, reusable format.

Use openmed.extract_pii to detect and retrieve specific types of Protected Health Information (PHI) or Personally Identifiable Information (PII) spans (names, dates, MRNs, etc.) from clinical text. Unlike deidentification, this function returns the original text and the detected spans, allowing users to audit, preview redactions, normalize labels, or route spans to a custom anonymizer without altering the source data. It is ideal for pre-processing and policy enforcement.

This extension provides comprehensive management for external access using the standard Kubernetes Gateway API and Traefik as the underlying proxy. It supports multi-tenant scoping across cluster, workspace, and namespace levels, enabling robust, modern API gateway configuration within the KubeSphere ecosystem.