Skill UI

A comprehensive tool for aggregating and displaying system metrics (counters, gauges, histograms) from the observability namespace. It computes baselines and flags anomalies by detecting deviations exceeding standard deviations, providing a clear snapshot of system health, error rates, and performance degradation trends.

This plugin provides advanced vector search capabilities using two distinct paths. The large-scale path supports millions of vectors via HNSW, ideal for general corpus search. The hot-path router handles small, critical pattern routing (≤11 patterns) with sub-ms latency. Key features include RaBitQ 1-bit quantization for memory efficiency (32× reduction), hyperbolic space search for hierarchical data, and unified cross-namespace search.

This utility is designed to reconcile the ADR (Architecture Decision Record) index when source files have been deleted or modified, preventing the accumulation of stale or dangling reference rows. Unlike simple upserts, this tool performs a hard purge of the entire index namespace (adr-patterns and adr-edges) and then fully rebuilds the index from the files currently present on disk. It is crucial for maintaining data integrity after deletions.

A specialized deep-dive skill for analyzing container-to-host escape vulnerabilities. This tool is used after a sandbox orchestrator establishes initial assumptions, focusing on mapping isolation boundaries (namespaces, cgroups, seccomp, capabilities). It helps prove boundary crossings, identify minimal exploit primitives, and determine if an exploit can break out of the container context to the host kernel.

This extension provides comprehensive management for external access using the standard Kubernetes Gateway API and Traefik as the underlying proxy. It supports multi-tenant scoping across cluster, workspace, and namespace levels, enabling robust, modern API gateway configuration within the KubeSphere ecosystem.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

A deep-dive methodology for authorized penetration testing targeting dependency confusion and namespace resolution vulnerabilities across major package ecosystems (npm, PyPI, NuGet, Maven, etc.). This skill details advanced reconnaissance techniques, from analyzing lock files and source maps to exploiting error messages, alongside safe Proof-of-Concept (PoC) creation using DNS canaries for discovery during penetration engagements.

This skill guides developers to migrate .NET projects from checked-in .designer.cs files to using the Microsoft.CodeAnalysis.ResxSourceGenerator. It covers adding NuGet packages, removing generated designer files, updating MSBuild configurations, and handling special metadata like CustomToolNamespace.

A .NET client library for publishing and consuming events with Azure Event Grid. Supports event-driven architectures, pub/sub messaging, CloudEvents, EventGridEvents, topics, domains, and namespaces.

Publishes CloudEvents and Event Grid events with the Azure Event Grid SDK for Python, supporting sync/async clients, authentication, batching, and namespace topics for event-driven applications.

Configure a Rails project to run inside Conductor workspaces for parallel coding agents: creates conductor.json, bin/conductor-setup, and script/server scaffolding, links shared dev secrets, and updates Redis config to use REDIS_URL with isolated ports and namespaces.

Troubleshooting guide for Kubernetes pods in crs namespace experiencing CrashLoopBackOff, OOMKilled, cascade failures, or Redis issues. Includes commands for pod status, events, logs, resource pressure analysis, and Redis debugging to diagnose and resolve critical infrastructure failures.