Skill UI

This skill guides the process of converting complex, repetitive, and often private operational workflows originating in the Hermes environment into safe, reusable, and public skills for the ECC workflow layer. It focuses heavily on data sanitization, requiring users to strip out all sensitive information such as absolute paths, private credentials, personal identifiers, and proprietary data before publication. Use this when an internal 'operator' routine needs to become a standardized, shareable business asset.

This skill guides the end-to-end development, implementation, and validation of production-ready Python modules for Azure IoT Edge. It covers critical aspects including telemetry processing, protocol adaptation (Modbus, OPC-UA), local inference, and ensuring robust, secure edge-to-cloud messaging under variable network conditions.

Automatically generates a professional, single-file, horizontal-swipe HTML slide deck for weekly team updates. Ideal for routine status meetings, this skill structures key information into specific sections: what was shipped, what is in flight, blocked items, key metrics, and next week's asks. Streamlines team communication and reporting processes.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This skill analyzes the user's local screen history captured by the screenpipe daemon. It detects repeated research patterns and workflows, compares them against known skills, and drafts actionable proposals for new or combined skills (composition recipes). It is designed to help users systematize their ongoing work habits and formalize repeatable processes into reusable skills.

This skill provides a structured workflow for developing and modifying content management systems (CMS), applicable to platforms like WordPress, Shopify, and Drupal. It covers crucial architectural seams, including theme and template design, plugin/module development, content modeling, media asset pipelines, and static export processes, ensuring changes maintain structural integrity.

A deep-dive session designed to stress-test a technical plan against an existing domain model. This process forces the user to resolve ambiguities, sharpen terminology, and validate decisions by cross-referencing code and existing documentation (CONTEXT.md, ADRs). It ensures architectural rigor and completeness before implementation.

This skill simulates a hostile, two-step review process to stress-test a paper's core claims. First, an adversarial reviewer constructs the single strongest rejection memo. Second, a fresh reviewer defends the paper point-by-point, identifying critical, unresolved weaknesses that standard reviews often miss. Ideal for pre-submission validation or rebuttal preparation.

This skill automates the complex process of resubmitting an already polished academic paper to a different conference or journal. It is designed for scenarios where the core content, experiments, and bibliography must remain untouched, but the paper needs micro-edits to accommodate new venue constraints, page limits, or prior reviewer feedback. It ensures the new submission is generated as a separate, sibling directory to maintain the integrity of prior submissions.

A comprehensive playbook for defeating anti-debugging mechanisms in protected binaries. Covers advanced techniques across both Linux (ptrace, /proc/self/status, timing checks) and Windows (PEB flags, NtQueryInformationProcess). Provides detailed detection methods and corresponding bypass strategies (e.g., patching, hooking, kernel modules) essential for advanced binary reverse engineering.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

This router guides the testing of systemic flaws in business processes and state machines. It is essential when vulnerabilities stem from workflow abuse, race conditions, pricing flaws, or multi-step state attacks, rather than simple input sanitation issues. Use it to test complex business flows like payments, inventory management, and approval sequences.