Skill UI

An expert-level playbook detailing advanced techniques for NTLM relay and authentication coercion. Covers cross-protocol attacks targeting SMB, LDAP, HTTP, and MSSQL. Includes methods like LLMNR poisoning, PetitPotam, and advanced domain privilege escalation to bypass standard authentication controls.

Diagnoses full-stack failure modes in agent and LLM applications, including wrapper regressions, memory contamination, tool discipline failures, hidden repair loops, and rendering corruption. Produces severity-ranked findings and code-first fixes for production agent systems.

This skill parses raw, verbose Simplicité log files from TXT format, filtering out noise and extracting only essential fields (e.g., timestamp, level, body). By converting logs into structured JSON, it significantly reduces the token size required for AI context optimization, making troubleshooting efficient and reliable.

This skill automatically processes MP4 videos by extracting key frames at configurable intervals. It then applies Tesseract OCR to recognize text on these frames, generating a comprehensive, structured Markdown report. The report includes full video metadata and timestamped, searchable transcripts, making it ideal for analyzing lectures, presentations, or screencasts programmatically.

This tool parses a structured, multi-shot video script (following the ai-video-script format) and automatically generates a time-coded SRT subtitle file. It calculates cumulative timestamps based on the duration of each shot, ensuring accurate subtitle cues that sync with the voiceover content across the entire sequence. Ideal for the post-production stage of short-form video creation.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

This workflow transforms long YouTube talks and lectures into a personal, structured, and local markdown library. Each video becomes a self-contained file containing slide snapshots, full timestamped transcripts, and editable study notes. It eliminates reliance on cloud services, giving users full ownership of their academic material.

This skill details how to forcefully coerce a target machine account (e.g., a Domain Controller) to authenticate to an attacker-controlled relay. It combines tools like Coercer and PetitPotam, leveraging various RPC protocols (MS-EFSR, MS-RPRN) to achieve NTLM relay. This technique ultimately enables domain compromise by forcing authentication into services like AD CS Web Enrollment (ESC8).

This skill guides the verification of software build provenance and signatures using industry standards like SLSA and Sigstore. It leverages tools like cosign and slsa-verifier to enforce keyless OIDC identity and confirm that artifacts were built by trusted sources without tampering. It is essential for hardening CI/CD pipelines and securing the entire software supply chain against advanced attacks.

Tamarind Bio is a comprehensive cloud platform providing access to state-of-the-art open-source tools for structural biology and molecular design. It supports complex tasks including protein structure prediction (AlphaFold, ESMFold), molecular design (RFdiffusion, ProteinMPNN), protein-ligand docking, and binding affinity prediction. Users submit sequences or structures and receive predicted results without requiring local GPU hardware.

This skill mints tamper-evident, post-quantum-signed receipts for consequential agent actions (e.g., deployment, payment, access grant). It records who, what, and under which policy the action occurred, ensuring the evidence cannot be altered later. By providing verifiable proof from the certificate alone, it is crucial for meeting regulatory compliance requirements, such as the EU AI Act, and building auditable, trustworthy systems.

A comprehensive 10-page pitch deck template designed for fundraising and presenting to venture capitalists (VCs). It covers all essential sections, including problem identification, solution overview, market size (TAM/SAM/SOM), traction data visualization, business model, go-to-market strategy, and the funding ask. Ideal for startups seeking seed or Series A funding.