Skill UI

Protect AI systems from prompt injection attacks by implementing input sanitization, tool permissioning, and output validation. Essential for securing LLM applications, RAG pipelines, and agentic workflows against indirect and direct attacks.

Orchestrate bounded coding tasks by delegating them to the Qoder CLI implementer, then review and land the resulting changes. This skill provides a structured loop for writing briefs, dispatching via a relay script, reviewing diffs, and committing verified work, with strict permission and authorization controls.

This skill enables authorized security research on RF and Software Defined Radio signals. It focuses on signal identification, protocol analysis, and replay attack feasibility studies within shielded laboratory environments. Users must obtain explicit written permission before probing or exploiting targets. It supports tools like RTL-SDR, HackRF, GNU Radio, and URH for analyzing wireless protocols outside regulated bands without causing interference.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks. Provides static analysis and manual review workflow.

Audit an Agent Skill, MCP server, connector, or desktop extension before installation by tracing code, dependencies, permissions, credentials, data flow, and irreversible actions.

This skill enables comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws and validate input sanitization. It supports detection of in-band, blind, and out-of-band attack vectors. Users can demonstrate exploitation techniques and extract data for authorized security testing purposes only. Requires explicit written permission before execution.

Comprehensive guide for managing users, groups, permissions, sudo access, and LDAP integration on Linux systems. Includes practical scripts for bulk user operations and access auditing. Ideal for system administrators and DevOps engineers.

Delegate bounded coding tasks to the Mistral Vibe CLI, then review and land the changes as orchestrator. Includes brief writing, dispatch, review, and commit workflow with cost controls and permission modes.

This skill guides the secure management and operation of Virtual Private Servers (VPS) and deployed server-side agents. Use it when SSH access, system restarts, log inspection, or complex workflow automation (like n8n or custom agents) is required on authorized remote hosts. It emphasizes following strict operational protocols and obtaining explicit user permission for sensitive actions.

Scan systems and dependencies for CVEs and security vulnerabilities using industry-standard tools like Nessus, OpenVAS, and Nuclei. Supports Docker deployment, API integration, and template-based scanning for infrastructure and application security assessments. Requires authorized scope and explicit permission before execution.

Enables authorized offensive security assessments on Windows Active Directory environments. Covers Kerberos abuse, AD CS escalation, BloodHound path analysis, NTLM relay, and domain privilege escalation techniques. Requires explicit written permission and strict authorization gates before execution. Designed for educational purposes or authorized security assessments only.