Skill UI

This skill provides a direct shell call to capture the current Git diff (staged, working-tree, or specific file list) as raw text. It is designed for workflows requiring repository diffs without the overhead of an LLM agent loop, offering significant performance improvements over traditional sub-agent calls.

This CLI tool automates the entire issue triage lifecycle for Linear and Jira. Users can pull backlogs, cluster duplicates, apply labels, reassign owners, and post detailed summaries—all directly from the shell. It is ideal for weekly backlog cleanup, post-release bug sweeps, and synchronizing data between multiple tools (e.g., Sentry to Linear).

Provides expert guidance for connecting to Power BI Desktop's local tabular model using the Tabular Object Model (TOM) and ADOMD.NET via PowerShell. This skill covers model enumeration, executing DAX queries, metadata modification (tables, measures, relationships), query tracing, and model refreshing. It is specifically designed for managing the underlying data model structure when external tools like Tabular Editor CLI are unavailable.

A comprehensive reference guide detailing best practices for writing robust and efficient Bash shell scripts. It covers critical topics such as proper quoting (`"$var"`), safe conditional testing (`[[ ]]`), reliable loops, advanced piping techniques, and essential error handling using `set -euo pipefail`. Use this guide to elevate your scripting skills and write highly portable, production-ready shell code.

This guide details using the comprehensive AADInternals PowerShell toolkit for defensive validation of Microsoft Entra ID, Azure AD, and AD FS environments. It covers unauthenticated tenant reconnaissance, acquiring access tokens for multiple Microsoft APIs, and critically, testing for federation backdoors (Golden SAML) by simulating advanced attack techniques (MITRE T1606.002). It is designed for authorized red-team assessments to map external attack surfaces and validate identity infrastructure hardening.

A comprehensive skill for triaging npm packages and dependency lockfiles against supply-chain threats. It utilizes heuristic scanning (GuardDog), manual tarball inspection, and dynamic detonation in isolated environments to detect malicious behavior such as credential exfiltration, reverse shell execution, and self-propagation. Essential for secure code review and CI/CD pipeline gating.

This guide details the process of parsing core Windows forensic artifacts, including MFT, Prefetch, Registry hives, ShellBags, and Amcache. Utilizing Eric Zimmerman's specialized EZ Tools, raw evidence is converted into standardized CSV/JSON formats. This process is crucial for Digital Forensics and Incident Response (DFIR) investigations, enabling analysts to reconstruct program execution, file access history, and persistence mechanisms, which can then be loaded into Timeline Explorer for unified analysis.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

This skill automates the process of running Postman API collections using Newman CLI. It generates comprehensive scripts, including basic CLI commands, robust shell scripts, and multi-stage Jenkins pipelines. Ideal for integrating API tests into CI/CD workflows, executing data-driven tests, and ensuring reliable automation in any environment.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

A comprehensive guide and tool to upgrade legacy PowerShell Pester test suites across major versions (v3→v4, v4→v5, v5→v6). It covers structural changes, syntax updates, and breaking changes related to the Discovery/Run model, mock handling, and configuration updates. Use this when modernizing or fixing broken tests after Pester version bumps.

This skill serves as a deterministic internal downloader for image URLs extracted from comprehensive web search results. It receives normalized media slots and search output via stdin, utilizing Python HTTP APIs to download direct image links. The process includes validating MIME types and saving files accurately into the configured local project directory, ensuring reliable asset retrieval without relying on sandboxed shell tools.