Skill UI

`jq` is the standard and powerful CLI tool for querying, filtering, and reshaping JSON data. This skill provides expert-level practical patterns for working with deeply nested structures, handling complex transformations (like flattening, renaming, and grouping), and integrating JSON logic into shell pipelines. Essential for parsing API outputs (AWS, GitHub), log files, and building robust Bash scripts.

Tmux is a powerful terminal multiplexer that enables users to manage multiple sessions, windows, and panes within a single terminal connection. It is essential for maintaining persistent connections on remote servers (surviving SSH disconnects), running long-term background jobs, and automating complex, multi-pane workflows directly from shell scripts, significantly enhancing remote development efficiency.

A comprehensive guide for developing robust, Unix-native Command Line Interfaces (CLIs) using Go. It details best practices for command structure, flag handling, configuration layering (Viper), and argument validation using Cobra. Learn how to build, extend, and review professional-grade Go tools that behave predictably in shell environments.

Provides shared GWS CLI behaviors for authentication, global flags, formatting, pagination, and safety patterns, plus zsh tips and community guidance for safely scripting workspace workloads.

This guide details the process of creating and managing 'Agent Users' within Microsoft Entra ID. Agent Users are specialized identities that allow AI agents to function as digital workers, giving them user-level capabilities (e.g., accessing Exchange mailboxes or Teams) while maintaining robust security boundaries. It covers using the Microsoft Graph API and PowerShell to provision and configure these agents.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This skill scaffolds the complete boilerplate structure for a new mobile screen or page. It ensures that the resulting component adheres to established design system patterns, including Top Bars, Bottom Navigation, and standard content shells. Use it when starting a new dedicated mobile view and needing immediate adherence to design tokens and layout rules.

This utility collects comprehensive diagnostic evidence for Algolia support tickets or internal troubleshooting. It gathers index statistics, API key access control lists (ACLs), recent query logs, and network diagnostic information using API endpoints and shell scripting. Use it when diagnosing search performance or unexpected service behavior.

A comprehensive diagnostic utility designed to collect all necessary evidence when troubleshooting Attio API connectivity issues or preparing a support ticket. It checks API authentication, object schema definitions, rate limit status, and general endpoint health using shell scripting and cURL.

A comprehensive runbook for systematically handling Intercom API outages and integration failures. It guides technical teams through rapid triage (checking status codes, rate limits, and service status), implementing mitigation strategies like graceful degradation, and documenting post-incident reports (postmortem). Essential for maintaining service reliability during Intercom service interruptions.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.

This comprehensive guide serves as a reference for offensive security professionals developing custom x86/x64 shellcode. It details advanced concepts including Position-Independent Code (PIC), PEB traversal for API resolution, safe memory allocation (avoiding RWX), and sophisticated process injection methods (e.g., APC injection, threadless techniques). Learn how to bypass modern AV/EDR detection using advanced evasion techniques like API hashing, encryption, direct syscalls, and abusing PE structures.