Skill UI

A comprehensive framework for optimizing inventory levels and planning replenishment in multi-location retail environments. It covers advanced demand forecasting techniques (e.g., Holt-Winters, ML models), calculating safety stock based on variability, estimating promotional uplift, and generating actionable purchase orders while minimizing stockouts and excess inventory. Ideal for professionals managing complex SKU portfolios across various supply chain systems.

A comprehensive guide for collecting volatile forensic evidence from a compromised host while adhering to the order of volatility. This process captures critical data—including memory dumps, network connections, running processes, and system state—before the host is isolated or powered down. Essential for root cause analysis, fileless malware investigation, and maintaining a defensible chain of custody for legal proceedings.

A comprehensive guide for advanced threat hunting, focusing on detecting DLL side-loading and search-order hijacking (MITRE T1574). It instructs users to analyze Sysmon Event ID 7 logs, validate file signatures and hashes, and identify path anomalies to uncover APT persistence mechanisms. Essential for incident response and proactive threat detection in enterprise environments.

This skill transforms a refined research proposal or method idea into a detailed, structured, and claim-driven experiment roadmap. It helps users determine exactly which experiments to run, in what order, and what evidence is needed to support the core claims of a research paper, ensuring focus on novelty, simplicity, and genuine contribution.

This skill covers the implementation of technical and organizational measures required by the GDPR (EU 2016/679). It guides users through establishing security controls, performing Data Protection Impact Assessments (DPIAs), managing data subject rights (e.g., erasure, access), handling breach notifications, and ensuring compliance for cross-border data transfers.

This skill details how to implement robust network segmentation and zero-trust security within Kubernetes clusters using Calico's NetworkPolicy and GlobalNetworkPolicy resources. It covers advanced concepts such as default-deny rules, policy ordering, and service-account-based selectors, making it essential for building and auditing secure east-west and north-south traffic controls.

A comprehensive guide detailing how to detect and exploit second-order SQL injection vulnerabilities. This technique targets scenarios where malicious input is stored in a database (e.g., user profiles, comments) and subsequently executed in an unsafe SQL query during a completely different application operation, bypassing initial sanitation checks.

This script automates the testing of API endpoints for mass assignment (over-posting) vulnerabilities, adhering to OWASP API3:2023 guidelines. It systematically injects undocumented, privileged fields (like 'role', 'isAdmin', 'balance', 'price') into request bodies of typical endpoints (e.g., profile updates, order creation). It checks if the server binds these unexpected fields to the data model without proper filtering, potentially allowing unauthorized privilege escalation or data manipulation.

A comprehensive guide for building or reviewing SwiftUI User Interfaces that utilize the modern Liquid Glass aesthetic. This skill focuses on correctly implementing native Apple APIs (like `glassEffect` and `GlassEffectContainer`) while ensuring proper fallback mechanisms, modifier ordering, and performance for iOS 26+ devices. Ideal for adopting cutting-edge iOS design patterns.

Structured red team engagement planning that blends MITRE ATT&CK kill-chain ordering, technique scoring, choke point and OPSEC analysis, and crown-jewel targeting into authorized offensive simulations with tooling like the engagement planner.

This skill analyzes accumulated usage logs from a complex research harness (ARIS) to propose structural optimizations. It identifies areas for improvement in SKILL scripts, default parameters, workflow ordering, and reviewer prompts. It is designed to automate the meta-level engineering process, ensuring that system efficiency is continuously improved based on real-world usage data.

This skill generates a comprehensive keyword strategy by identifying high-value SEO and AEO question queries for any given topic. It structures keywords into three difficulty tiers (T1, T2, T3), performs cannibalization checks to prevent content overlap, and builds a complete content map, guiding users on content type and production order for maximum search engine visibility.