Skill UI

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

Validate Claude Code plugin directories against Anthropic and Intent Solutions standards, combining structural checks (plugin.json, permissions) with SKILL.md content grading for marketplace readiness.

This skill orchestrates end-to-end autonomous AI research projects using a sophisticated two-loop architecture. It manages the entire research lifecycle, from initial literature review and hypothesis formation to running constrained experiments and synthesizing findings into publishable papers. It acts as a project manager, autonomously driving the process while structuring the workspace and presenting progress to human users.

Helm Chart Builder skill scaffolds production-grade charts, audits security, manages dependencies, and validates values/templates via slash commands for creation, review, and hardening workflows in Kubernetes deployments.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

This AI-powered skill lets coding assistants execute Playwright-based end-to-end scenarios defined in YAML, using OpenCV/OCR visual matching, platform auto-detection, and failure diagnosis with a learning database to improve tests.

Internal Feishu/Lark notification utility that other skills call to push event cards or run interactive dialogs via webhook or bridge, ensuring safe fire-and-forget delivery whenever checkpoints, experiments, reviews, or pipelines change state.

Step-by-step skill to hunt DNS-based persistence by auditing zone baselines, querying SecurityTrails passive DNS, analyzing provider audit logs, and correlating anomalies to malicious infrastructure for actionable reports.

Automated skill that scans Python and configuration files to review cryptographic primitives, insecure modes, embedded secrets, and TLS settings, flagging weaknesses and producing structured remediation reports during app security assessments.

GoPhish is an open-source framework designed for security teams to conduct authorized phishing awareness campaigns. This skill guides users through the entire process: deploying GoPhish, setting up realistic phishing scenarios (templates, landing pages), executing the campaign, and analyzing results to measure and improve organizational resilience against social engineering attacks. It is crucial for proactive security testing and incident response validation.

This skill provides a comprehensive methodology for simulating privilege escalation attacks on compromised Linux and Windows environments. It guides the user through identifying vectors—including SUID abuse, misconfigured services, kernel vulnerabilities, cron job exploitation, and credential harvesting—to elevate initial low-privilege access to root or SYSTEM control. It is crucial for deep-dive penetration testing and assessing system security hardening.

This skill automates the execution of red team phishing campaigns using the Python gophish library. It enables users to create sophisticated email templates with tracking pixels, configure SMTP profiles, import target lists from CSV, and launch full-scale simulations. The system tracks key metrics, including open rates, click rates, and submitted credentials, providing essential data for security awareness training and vulnerability assessments.