Skill UI

Execute arbitrary PySpark or pure Python code directly on Fabric Spark compute using the Livy API. This method creates ephemeral sessions without generating persistent notebook artifacts. It provides full read/write access to lakehouse Delta tables, making it ideal for agent-driven ETL pipelines, quick data transformations, or analyses where session cleanup is critical. Users must manage the session lifecycle (create, run, and delete).

This skill acts as a central router, helping users determine the correct specialized skill or workflow to tackle development challenges. It guides the entire software development lifecycle, from initial idea refinement (Idea -> Ship) and prototype testing, to managing complex multi-session builds and handling incoming bugs via triage. It is essential for navigating the vast ecosystem of AI coding agents.

This skill transforms the current workspace into a comprehensive, stateful teaching environment. It guides the user through deep, multi-session learning by structuring content into core components: a defined mission, reference materials, curated resources, structured lessons, and continuous learning records. It employs educational best practices (spaced repetition, retrieval practice) to ensure long-term knowledge retention.

This guide details how to establish SAML 2.0 identity federation between on-premises Active Directory (using AD FS or third-party IdP) and Microsoft Entra ID. It covers hybrid identity architectures, configuring federation models (AD FS, PHS, PTA), and implementing the full SAML authentication flow. Essential for extending on-premises authentication authority to cloud resources and maintaining security compliance.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

A comprehensive guide detailing detection and defense strategies against OAuth token theft, session hijacking, and token replay in Microsoft Entra ID (Azure AD). It covers advanced attacks like Primary Refresh Token (PRT) abuse and Adversary-in-the-Middle (AitM) phishing, and provides actionable steps for configuring Conditional Access and Token Protection policies.

This guide details how to implement Identity-Aware Proxy (IAP) using gcloud. It enforces per-request identity verification and context-aware access policies (e.g., device posture, location) across major GCP backends, including Compute Engine, App Engine, Cloud Run, and GKE. It is essential for migrating from traditional VPN access to a robust, zero-trust, identity-based security architecture for cloud applications.

This skill reconstructs the detailed workflow behind a specific coding artifact (like a feature or PR). By analyzing local `ax` agent traces, it connects commits, sessions, skills, and tool calls into a concise, evidence-grounded narrative. It is used when needing to understand the step-by-step process and key decisions that led to a result.

A comprehensive framework for authorized AWS penetration testing and red-teaming. This skill automates end-to-end cloud exploitation using Pacu, covering session management, deep IAM enumeration, automated privilege escalation scanning, and establishing persistence backdoors. It is designed to assess the full blast radius of compromised cloud credentials.

A comprehensive guide for threat hunters focusing on detecting stolen session cookies and OAuth/PRT token replay (T1550.001). This skill teaches correlation techniques across Microsoft Entra ID SigninLogs and Okta System Logs, enabling the detection of impossible travel, refresh-token reuse, and anomalous lateral movement within federated SaaS environments. Essential for post-phishing or post-compromise investigations.

This skill guides developers on building real-time, bidirectional, and multimodal streaming applications using the Gemini Live API. It covers low-latency voice, video, and text streaming over WebSockets, incorporating advanced features like Voice Activity Detection (VAD), function calling, and secure session management. Ideal for conversational AI, interactive video conferencing, and complex real-time user experiences.

A meta-skill designed to capture hard-won, non-obvious knowledge—such as complex debugging steps, multi-step operational workflows (e.g., deployment, migrations), or project-specific facts—and convert them into reusable Agent Skills. It ensures that future sessions, regardless of the user or team member, start with proven procedures, preventing the need to rediscover solutions from scratch.