Skill UI

This skill guides the hardening of managed Kubernetes clusters (EKS, AKS, GKE) by implementing critical cloud security best practices. It covers enforcing Pod Security Standards, deploying Network Policies for least privilege communication, and configuring Workload Identity to eliminate static cloud credentials. Ideal for production deployments or remediation after a security audit.

This guide details the design and configuration of secure, compliant remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers implementing jump server architectures, Multi-Factor Authentication (MFA), Privileged Access Management (PAM), session recording, and adhering to standards like IEC 62443 and NERC CIP-005. Ideal for network architects, security engineers, and operations teams needing to manage third-party vendor access securely.

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.

A persistent file planning system for multi-step AI agent work. It saves task plans, findings, and progress to disk, acting as disk-based working memory. Includes lifecycle hooks for context injection and session recovery. Suitable for research or tasks requiring 5+ tool calls. No network upload path.

This skill provides guidance on implementing common architectural patterns and best practices within the PyTorch framework. It is designed for developers building sophisticated deep learning models, helping to improve structure, efficiency, and code maintainability when working with neural networks.

Launches an interactive web dashboard designed to visualize the knowledge graph derived from a target codebase. This tool helps developers gain a high-level, structural understanding of complex projects by mapping out relationships, module dependencies, and the overall knowledge network of the code, making maintenance and onboarding significantly easier.

This skill enables AI agents to maintain persistent project planning using Markdown files on disk. It manages task_plan.md, findings.md, and progress.md to extend context window limits. Lifecycle hooks automatically inject planning content and prevent command execution in Markdown. Ideal for complex research tasks requiring over 5 tool calls, ensuring state persistence across sessions without network uploads.

A comprehensive architectural guide for building and maintaining macOS menubar utilities using SwiftUI and Tuist. It enforces strict separation of concerns by guiding developers to keep networking, state management, and UI presentation in distinct, testable layers, ensuring robust and scalable application development.

This skill performs in-depth literature reviews across complex communications domains, including 5G/6G, Wi-Fi, satellite networking, and advanced protocols. It systematically searches user-defined knowledge bases (Zotero, Obsidian, local files) and major academic databases (IEEE, ACM, ScienceDirect) to provide comprehensive survey summaries, related work analyses, and technical landscape overviews.

A comprehensive knowledge-base-first skill designed for deep literature reviews in advanced communication domains. Use it for topics like 4G/5G/6G, wireless networking, satellite communications, Wi-Fi, routing protocols, and cross-layer optimization. It systematically searches structured academic databases (IEEE, ACM, Zotero, etc.) to provide related work, survey papers, and landscape summaries.

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

This skill provides comprehensive detection strategies for adversaries abusing DCOM objects (e.g., MMC20.Application) to perform stealthy lateral movement (MITRE ATT&CK T1021.003). It details how to correlate Sysmon Event IDs (Process Creation, Network Connection), analyze WMI activity, and monitor RPC traffic on port 135 to identify unauthorized remote command execution chains. Ideal for advanced threat hunting, red teaming, and purple team exercises.