Skill UI

This skill simulates an autonomous, overnight development cycle by leveraging Git hooks to enforce Test-Driven Development (TDD). It ensures that all code changes, whether building new features, refactoring, or fixing bugs, are rigorously tested and meet high quality standards before commitment. Use this when high code reliability and comprehensive testing are critical requirements.

Utilizes structured critical reasoning to rigorously stress-test ideas, plans, and decisions. This skill allows you to play devil's advocate, conduct pre-mortems, execute red-teaming exercises, or audit underlying assumptions. It employs multiple advanced modes, including Socratic questioning, Hegelian dialectics, and Falsificationism, to identify blind spots, weaknesses, and unstated assumptions before commitment.

Codified expertise for sequencing work orders, balancing discrete and batch lines, reducing changeover time, and shielding bottlenecks using FCS, DBR, and SMED so manufacturing meets commitments despite disruptions.

This skill applies the pre-mortem technique to strategic plans, assuming failure in 12 months to identify critical assumptions, dependencies, and risks. It helps uncover weaknesses before execution, ensuring plans are robust enough to survive reality. Ideal for resource commitment, investor presentations, or when feedback is overly positive.

A comprehensive framework for applying the six core principles of ethical persuasion (Reciprocity, Commitment, Social Proof, Authority, Liking, Scarcity) to optimize product design, marketing copy, and sales flows. It helps users understand human behavioral heuristics to create genuinely compelling and ethical user experiences, increasing engagement and conversion rates.

This skill automates the extraction of actionable items, commitments, and follow-ups from meeting notes (e.g., Granola, Grain). It creates structured tasks in Todoist, updates task status, and drafts follow-up emails. Ideal for running daily or post-meeting cron jobs to ensure all commitments are tracked and executed.

This skill generates a comprehensive daily digest summarizing all critical pending items into a single summary. It aggregates stalled scheduling threads, unanswered emails, pending introductions/follow-ups, open Todoist tasks, and upcoming calendar events from multiple sources. It is essential for running a daily summary cron job or when the user requires a quick status check on their workload and commitments.

A comprehensive guide to simulating Man-in-the-Middle (MITM) attacks using industry-standard tools like Bettercap, Ettercap, and mitmproxy. This technique is strictly for authorized penetration testing environments to assess cryptographic controls, validate TLS certificate pinning, and test network defense mechanisms against ARP/DNS spoofing and sniffing.

This guide provides comprehensive techniques for detecting Layer 2 ARP poisoning and spoofing attacks. It covers monitoring gratuitous ARP floods, tracking IP-to-MAC mapping changes, and identifying rogue devices. Techniques include deploying ARPWatch, configuring Dynamic ARP Inspection (DAI) on managed switches, and using advanced Wireshark filters or custom Python scripts for robust security monitoring and incident response.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

This skill simulates Man-in-the-Middle (MitM) attacks and ARP cache poisoning using advanced tools like Ettercap and Scapy. It is designed exclusively for authorized, controlled lab environments or penetration tests. Use cases include validating the efficacy of Dynamic ARP Inspection (DAI), assessing port security mechanisms, and testing whether IDS/IPS or SIEM systems detect Layer 2 spoofing attempts.

Simulates man-in-the-middle (MITM) attacks by stripping SSL/TLS encryption, forcing HTTPS connections to downgrade to insecure HTTP. This skill is designed for authorized penetration testing to validate HSTS enforcement, assess certificate validation mechanisms, and train security teams on detecting cleartext data leakage during a downgrade attack.