Skill UI

The Desktop Commander MCP grants agents deep reach across the user's entire operating environment, extending far beyond the typical IDE sandbox. Key capabilities include maintaining persistent shell sessions, managing long-running background processes, accessing arbitrary filesystems, and natively handling structured data formats (Excel, PDF, DOCX). It also enables remote operations via SSH and large-scale content search, making it ideal for complex, multi-turn development, DevOps, and data analysis workflows.

A comprehensive playbook detailing expert techniques to escape multiple types of restricted environments, including Python pyjail, Docker containers, seccomp filters, and browser rendering processes. It covers advanced exploitation vectors like namespace escapes, kernel exploits, and built-in function bypasses for achieving code execution.

This expert playbook details advanced techniques for establishing secure network tunnels and pivoting through compromised hosts. It covers various methods like SSH (Local, Remote, Dynamic, Jump), Chisel, Ligolo-ng, socat, and ProxyChains. Use this guide to bypass network restrictions, establish persistent access, and perform multi-layered lateral movement within restricted environments.

WizTelemetry Notification is the core notification component of the KubeSphere observability platform. It ingests alerts, cloud events, and audit logs in a multi-tenant Kubernetes environment. It intelligently routes and distributes notifications to various channels (Email, Slack, DingTalk, etc.) based on sophisticated label matching and predefined routing rules, ensuring reliable and targeted communication in complex cloud deployments.

Flox is a declarative, Nix-based environment manager designed to create perfectly reproducible development environments. It handles system-level dependencies (like compilers, databases, and native libraries) and ensures that complex toolchains across multiple languages (Python, Node.js, Go, etc.) function identically across macOS and Linux. Ideal for solving 'works on my machine' issues and onboarding new team members instantly.

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

A comprehensive guide covering advanced scripting for Rhinoceros 3D. This skill addresses multiple surfaces, including RhinoPython, VBScript (RhinoScript), and direct RhinoCommon (.NET). Use it to write production-quality scripts, automate complex modeling tasks, manipulate geometry (layers, blocks), build custom command macros, and interact with the Rhino environment efficiently.

A comprehensive guide for securing container images and runtime environments. Covers best practices from Dockerfile authoring (minimal base images, multi-stage builds, non-root users) through advanced runtime enforcement (seccomp, AppArmor) and Kubernetes security controls. Essential for production hardening and maintaining supply chain integrity.

A powerful meta-skill that enforces rigorous security compliance by running three independent gates on a proposed operation: policy/governance review, secret/credential scanning, and audit log emission. It uses a strict arbitration rule (DENY > WARN > ALLOW) to provide a comprehensive safety verdict for code changes or environment manipulations. Ideal for enforcing high-security coding standards.

Unship is a dedicated local workflow for front-end developers to compare multiple AI-generated UI alternatives (such as layouts, copy, or flows) directly within a running application environment. Instead of committing to one generated version, it adds temporary source-level variants, allowing for visual comparison. After the user selects the final version, the skill automatically cleans up all unused temporary code and attributes, ensuring a clean, production-ready codebase. Note: This tool is for local iteration only, not for production A/B testing or analytics.

This skill transforms the current workspace into a comprehensive, stateful teaching environment. It guides the user through deep, multi-session learning by structuring content into core components: a defined mission, reference materials, curated resources, structured lessons, and continuous learning records. It employs educational best practices (spaced repetition, retrieval practice) to ensure long-term knowledge retention.

This guide teaches security teams how to proactively detect and respond to unauthorized cryptocurrency mining operations across major cloud platforms (AWS, Azure). It utilizes a multi-layered approach by analyzing compute cost anomalies, monitoring GuardDuty findings, inspecting network traffic to known mining pools, and analyzing runtime process execution in EC2, ECS, and EKS environments.