Skill UI

Guidance for designing, building, refreshing, and reviewing Power BI / Analysis Services tabular models from the terminal. Covers star schema, relationships, measures, calculation groups, roles, storage modes, incremental refresh, and model optimization. Routes every operation to the narrowest capable tool: te CLI first, then TOM or MCP, then TMDL. Ensures model quality, performance, and readiness for Copilot/AI.

Expert guidance for the cross-platform Tabular Editor CLI (`te`) to scaffold, inspect, edit, validate, query, deploy, refresh, and test Power BI / Analysis Services semantic models from the terminal, including TMDL/BIM conversion, BPA, DAX testing, and CI/CD pipelines.

A comprehensive guide detailing detection and defense strategies against OAuth token theft, session hijacking, and token replay in Microsoft Entra ID (Azure AD). It covers advanced attacks like Primary Refresh Token (PRT) abuse and Adversary-in-the-Middle (AitM) phishing, and provides actionable steps for configuring Conditional Access and Token Protection policies.

A powerful offensive suite for authorized red-teaming of Microsoft Entra ID (Azure AD). ROADtools combines ROADrecon for comprehensive directory enumeration (users, groups, policies, apps) and an offline GUI, with roadtx for advanced token acquisition, exchange, and Primary Refresh Token (PRT) abuse. It covers the full scope of cloud identity discovery and token-based attacks against highly regulated tenants.

A sophisticated red-teaming tool for authorized security testing, simulating OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID. It demonstrates how attackers can bypass MFA and steal access and refresh tokens by tricking victims into authorizing access via the genuine Microsoft login page. Essential for validating Conditional Access and token protection controls.

A comprehensive guide for threat hunters focusing on detecting stolen session cookies and OAuth/PRT token replay (T1550.001). This skill teaches correlation techniques across Microsoft Entra ID SigninLogs and Okta System Logs, enabling the detection of impossible travel, refresh-token reuse, and anomalous lateral movement within federated SaaS environments. Essential for post-phishing or post-compromise investigations.

This skill systematically scans Apple's comprehensive developer documentation, specifically targeting SwiftUI. It identifies deprecated APIs, finds their modern replacements, and updates the expert skill's reference guide. Use this when required to refresh deprecated features, check for new API deprecations after an iOS/Xcode update, or maintain the most current best practices for SwiftUI development.

A comprehensive guide to implementing Test-Driven Development (TDD) in Laravel. This resource covers best practices for Unit, Feature, and Integration testing, guiding developers on using PHPUnit and Pest. It details strategies for managing database states (e.g., RefreshDatabase) and effectively mocking external dependencies for robust application development.

Performs a deep, comprehensive audit of a brand's current digital marketing presence across all active channels, including paid search, social, email, SEO, and compliance. It inventories what is currently live, identifies performance gaps, flags budget leaks, and provides a clean, actionable baseline document required before any major marketing planning or strategy refresh. Ideal for agency onboarding or post-acquisition audits.

This tool assesses creative fatigue across all active advertising channels. It scores creatives based on multiple decline signals (CTR, CPM, engagement, frequency) to predict when performance will drop. It generates actionable refresh briefs, recommends specific changes, and creates structured A/B test plans to maximize ad spend and maintain campaign performance throughout the entire creative lifecycle.

This tool scans your entire content library to detect decay signals—such as declining traffic, falling rankings, outdated stats, and lost AI citations. It then prioritizes content refreshes by calculating the potential revenue impact, ensuring you focus on updating the pieces that will recover the most revenue first.

This skill guides in-house legal teams through the full lifecycle management of external counsel panels. It produces comprehensive reports covering panel health assessment, identifying coverage gaps (practice area, jurisdiction, tier), managing firm exits with formal documentation, and scoping renewal processes (Panel Refresh Brief) for RFPs, ensuring optimal legal resource allocation and governance.