Skill UI

This skill generates a clear, scannable, and comprehensive sprint brief for Agile teams. It structures critical information including the specific sprint goal, business rationale, grouped scope, critical path items, potential risks with mitigation plans, and the Definition of Done. It ensures all cross-functional team members (Engineers, Designers, PMs) are aligned on the sprint's focus and objectives.

This skill guides users through transforming a raw product backlog into a highly structured and actionable sprint plan. It generates a clear Sprint Goal, calibrates the backlog scope based on team velocity and capacity, provides a detailed capacity plan, identifies potential risks, and outputs a comprehensive meeting agenda. It ensures the resulting sprint is achievable, outcome-focused, and adheres to best practices (e.g., 80% commitment rate).

Transforms a prioritized product roadmap into a compelling, non-technical narrative that explains the 'why' and 'how' of product evolution. Ideal for presenting strategy to executive leadership, boards, or all-hands meetings, ensuring every initiative is tied to measurable OKRs and anticipating stakeholder questions. Outputs a complete story arc, executive summary, and scope definition.

This skill generates a comprehensive and structured test strategy document. Given a feature specification, PRD, or system description, it systematically outlines the test scope, performs a detailed risk assessment, defines necessary test types (Unit, E2E, Performance, Security), and provides a prioritized, actionable test case outline to ensure robust quality assurance before release.

This skill outlines a systematic, multi-phase workflow for diagnosing hard bugs and performance regressions in complex codebases. It emphasizes the critical necessity of building a tight, deterministic feedback loop (Phase 1) before moving to hypothesis generation. The process guides users through reproducing the failure, minimizing the scope of the issue, and forming actionable, ranked hypotheses.

This guide details the forensic process of extracting sensitive credentials, including password hashes, Kerberos tickets, and authentication tokens, from memory dumps. Utilizing industry-standard tools like Volatility and Mimikatz, this technique is crucial for incident response, determining the scope of a breach, and identifying compromised accounts during digital forensics investigations.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

A comprehensive tool and methodology for identifying and preventing dependency confusion attacks across major package ecosystems (npm, PyPI, Maven). It detects instances where internal, private package names are leaked and subsequently published publicly by attackers. The skill provides both detection (enumerating claimable internal names) and prevention strategies (enforcing registry pinning and scope restrictions) to secure the software supply chain.

A comprehensive guide for threat hunting and detection engineering focused on identifying SSO and OAuth token abuse. It detects 'pass-the-cookie' and session replay attacks where attackers use stolen tokens (like cookies or refresh tokens) to move laterally across federated SaaS platforms (Entra ID, Okta) without needing credentials. Essential for post-incident scope analysis and validating T1550.001 coverage.

This skill guides the deployment and operation of the Havoc C2 framework, enabling advanced adversary emulation. It utilizes Yaotl profiles to generate highly evasive agents (Demon) that employ sophisticated techniques like indirect syscalls and sleep obfuscation. The scope covers the full red-teaming lifecycle, including C2 setup, payload generation, post-exploitation, and lateral movement, making it ideal for authorized security testing and validating EDR detection capabilities.

The Neon AI Gateway provides a single API endpoint and one credential to access a diverse catalog of frontier and open-source LLMs (including OpenAI, Anthropic, Google Gemini, Meta, Alibaba, and DeepSeek). This unified layer simplifies integration by eliminating the need for separate provider accounts and managing model-specific SDK complexities. It allows developers to switch between models seamlessly by changing only the model name, while also providing crucial branch-scoped isolation for development and CI environments.

Neon Functions provide long-running, stateful, serverless HTTP handlers deployed directly next to your Neon database branch. They are ideal for complex backend workloads that exceed traditional serverless limits, such as real-time WebSockets, Server-Sent Events (SSE) streaming, or sophisticated AI agents. Functions automatically inject the database connection URL and maintain state within the function scope, ensuring high performance and data proximity.