Skill UI

This skill provides a systematic framework for diagnosing and proposing structural repairs for organizational failures. It moves beyond personal blame by analyzing complex dynamics such as team structures, project bottlenecks, authority chains, and governance gaps. It generates actionable memos and low-risk pilot plans, ensuring solutions address systemic root causes rather than individual shortcomings. Best used when CrossFrame Suite routes explicit organizational tasks.

This skill generates a comprehensive capacity plan document for any service. It assists technical teams in proactively managing infrastructure by modeling traffic growth, forecasting resource utilization (CPU, memory, connections), projecting costs, and defining clear scaling strategies. Use this when assessing current resource headroom, planning for seasonal peaks, or defining a long-term infrastructure action roadmap.

This skill generates highly structured legal documents, including memos, case summaries, and argument outlines. It utilizes the standard IRAC format (Issue, Rule, Application, Conclusion) to provide comprehensive legal analysis. Ideal for drafting position papers, legal advice summaries, or preparatory documents for court submissions, ensuring all legal arguments are systematically presented and uncertainties are explicitly flagged.

This comprehensive guide walks new engineers through setting up a complete local development environment from scratch. It covers all necessary prerequisites, including installing required tools (Git, Docker, Go, etc.), cloning repositories, configuring environment variables, and running initial tests. The goal is to ensure a consistent, working environment and allow new team members to start contributing code quickly and confidently.

This skill transforms raw notes, bullet points, or unstructured memories into comprehensive, professional performance reviews. It structures the output for various review types (Self-assessment, Manager, Peer, 360 feedback), ensuring coverage of key achievements, core strengths, constructive areas for growth, and measurable development goals. Ideal for annual reviews, mid-year check-ins, and formal performance documentation.

Generates comprehensive, structured documentation for microservices or internal platforms. This skill covers service identity, architecture context, APIs, SLAs, data classification, and operational runbooks, making it ideal for developer portals, service READMEs, and internal service registries. It ensures new team members can quickly understand how to use and depend on a shared service.

This skill generates a clear, scannable, and comprehensive sprint brief for Agile teams. It structures critical information including the specific sprint goal, business rationale, grouped scope, critical path items, potential risks with mitigation plans, and the Definition of Done. It ensures all cross-functional team members (Engineers, Designers, PMs) are aligned on the sprint's focus and objectives.

A comprehensive guide for conducting memory forensics to extract cached credentials, password hashes, Kerberos tickets, and authentication tokens from Windows memory dumps (LSASS). This technique is crucial during incident response or breach assessment to identify compromised accounts or investigate lateral movement.

This skill provides advanced detection methods for credential dumping, covering LSASS memory access, SAM hive extraction, and NTDS.dit theft (e.g., using Mimikatz). It utilizes Sysmon Event ID 10 and Windows Security logs to enable threat hunting, assisting SOC analysts in triaging EDR alerts and building robust SIEM correlation rules.

CHIPSEC is an open-source framework designed to assess the low-level security configuration of x86 platform firmware and hardware. It verifies critical security controls such as SPI flash write protection, BIOS locks, SMM/SMRR configuration, and Secure Boot variable integrity. Users can run automated tests, dump SPI flash memories for forensics, and detect potential firmware implants that persist below the operating system layer.

This skill provides comprehensive methods and frameworks to detect sophisticated AI attacks, including model extraction, membership inference, and model inversion, which abuse inference APIs. It focuses on monitoring per-principal query volume, input distribution, and confidence exposure. Use it for securing public or partner inference APIs, or for conducting pre-deployment red-teaming to assess the model's extractability and overall security posture against MITRE ATLAS techniques.

Sliver is an open-source, cross-platform Command and Control (C2) framework used for adversary emulation in authorized red-team engagements. This skill guides users through deploying the C2 server, establishing multi-protocol listeners (mTLS, DNS, HTTPS), generating cross-platform implants, and executing advanced post-exploitation techniques, including pivoting and in-memory execution via the Armory.