Skill UI

This skill analyzes ransomware cryptocurrency payment flows by utilizing major blockchain intelligence APIs (like Chainalysis and WalletExplorer). It identifies wallet clusters, tracks movements through obfuscation services (mixers, tumblers), and determines fund flows to exchanges, supporting forensic investigations and law enforcement attribution efforts.

This skill simulates advanced red-teaming techniques targeting Microsoft Entra ID's OAuth 2.0 device-code flow and illicit consent mechanisms. It demonstrates how attackers can steal access and refresh tokens, bypass Multi-Factor Authentication (MFA), and pivot across various Microsoft 365 services. It is designed for authorized security testing to validate token protection and conditional access policies.

This skill details how to forcefully coerce a target machine account (e.g., a Domain Controller) to authenticate to an attacker-controlled relay. It combines tools like Coercer and PetitPotam, leveraging various RPC protocols (MS-EFSR, MS-RPRN) to achieve NTLM relay. This technique ultimately enables domain compromise by forcing authentication into services like AD CS Web Enrollment (ESC8).

A powerful offensive security toolkit for red-teaming and penetration testing. It systematically enumerates and exploits various misconfigurations within Active Directory Certificate Services (AD CS) using Certipy. This allows attackers to forge privileged certificates, perform PKINIT authentication, and achieve domain compromise and privilege escalation, even without knowing user passwords. Ideal for validating security hardening.

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.

This skill provides comprehensive guidance on designing complex system integrations, including event-driven architectures (EDA), webhook flows, API chaining, and robust ETL pipelines. It covers advanced patterns like Saga, Outbox, and resilience mechanisms (Idempotency, Circuit Breaker), making it ideal for connecting multiple microservices and managing asynchronous data flows.

The Application Insights JavaScript SDK is designed to instrument client-side web applications for Real User Monitoring (RUM). It automatically collects crucial telemetry, including page views, user clicks, AJAX dependencies, unhandled exceptions, and custom events. This SDK supports correlating browser-side activity with backend services and includes specialized support for GenAI agent traces following OpenTelemetry standards.

This official Rust client library provides comprehensive functionality for interacting with Azure Queue Storage. It allows developers to reliably send, receive, manage, and peek messages within an Azure cloud environment. Use it in Rust applications that require asynchronous message queuing, ensuring robust communication and data synchronization between services. Supports full lifecycle management including deletion and peeking.

A comprehensive resource containing official, managed integration examples for popular third-party services (Stripe, OpenAI, Supabase, etc.). This library provides canonical patterns for connecting external APIs into an Expo application. Users can utilize it in two primary ways: adapting the pattern into an existing project (most common) or scaffolding a new greenfield application.

This skill provides comprehensive monitoring advisory services for data assets and AI agents. It helps users assess data coverage gaps, analyze use-case criticality, and automatically create data quality monitors (table, metric, validation). Furthermore, it enables monitoring of AI agent performance, latency, and observability, ensuring robust data governance across the entire ML lifecycle.

rclone is a powerful, feature-rich command-line utility designed to manage files across diverse cloud storage backends, including S3-compatible services. It provides robust, reliable equivalents to core Unix commands (sync, copy, move, mount). Use this skill for all terminal-based cloud operations, such as syncing, backing up, downloading, or managing remote data securely.

Performs comprehensive, multi-page Lighthouse audits across an entire website. This tool is a robust, quota-free alternative to services like PageSpeed Insights, making it ideal for large sites or CI/CD pipelines where API limits are a concern. It aggregates key metrics such as performance, accessibility, and SEO scores across all audited routes.