Skill UI

This skill provides comprehensive security auditing for Model Context Protocol (MCP) servers and their associated tool metadata. It is designed to detect sophisticated supply chain attacks, including tool poisoning (indirect prompt injection), Server-Side Request Forgery (SSRF), tool shadowing, and unauthenticated exposure. It is essential for securing AI agent stacks before integrating new tools or during CI/CD processes.

This skill details how to forcefully coerce a target machine account (e.g., a Domain Controller) to authenticate to an attacker-controlled relay. It combines tools like Coercer and PetitPotam, leveraging various RPC protocols (MS-EFSR, MS-RPRN) to achieve NTLM relay. This technique ultimately enables domain compromise by forcing authentication into services like AD CS Web Enrollment (ESC8).

This skill guides the secure migration from classical cryptography (RSA, ECC) to quantum-resistant algorithms (PQC). It covers building a Cryptographic Bill of Materials (CBOM), identifying data at risk (HNDL), and deploying hybrid key exchange protocols like X25519MLKEM768 to ensure long-term data security against quantum threats.

NetExec is a powerful, protocol-oriented tool for penetration testing, designed for assessing and exploiting Windows and Active Directory environments. It facilitates lateral movement by authenticating over protocols like SMB, WinRM, LDAP, and MSSQL. Key functions include password spraying, comprehensive network enumeration, command execution, and dumping critical credentials (SAM, LSA, NTDS) during post-exploitation phases.

A comprehensive guide to setting up the open-source Sliver C2 framework. It covers deploying the server, generating cross-platform implants and beacons, establishing resilient multi-protocol listeners (mTLS, DNS, HTTPS), and executing advanced post-exploitation and pivoting techniques using the built-in armory for adversary emulation.

This advanced protocol forces the AI to conduct a thorough context audit before attempting any complex task. It mandates reading every relevant file, identifying architectural gaps, and providing a detailed orientation statement. It is essential for multi-file modifications, system design, and debugging to prevent acting on assumptions and maintain high code accuracy. The AI cannot proceed until all unknown variables are resolved.

This critical protocol is the ultimate measure for dealing with deeply corrupted, unmaintainable, or structurally rotten code modules. Instead of risky patching, it mandates a controlled, multi-phase process to completely delete the target and rebuild it from scratch. It ensures precise identification of all public interfaces, implicit contracts, and working behaviors (the Preservation List) before any removal occurs, guaranteeing the new implementation matches the original functionality while resolving deep architectural debt.

This powerful skill provides an interactive debugger interface, allowing developers to set breakpoints, step through source code line by line, inspect live variable states, and trace the entire call stack. It is essential for diagnosing complex bugs, understanding unexpected program flow, or determining the root cause when standard logging fails. It supports various languages via the DAP protocol.

This skill provides comprehensive access to structured corporate content for listed stocks via Longbridge. Users can retrieve the latest news articles, analyze regulatory filings (such as 10-K, 10-Q, 8-K), check community discussions, and perform detailed SEC EDGAR document analysis. It supports querying risk factors, management discussions (MD&A), and regulatory rules.

This skill provides deep, cross-border financial analysis and valuation metrics for stocks across multiple markets (e.g., US, HK). Users can access detailed income statements, balance sheets, cash flow data, analyze business segments, compare valuation multiples (PE, PB), run sophisticated DCF models, and perform value screening. It is an essential tool for fundamental research, investment modeling, and corporate analysis.

A robust protocol designed for multi-agent collaboration on long-running projects. It simulates a self-optimizing city where diverse AI agents (citizens) interact using decentralized markdown files (The Register, Contracts, Chronicle). This framework enables cross-vendor optimization, dynamic work routing, and constitutional evolution without requiring a centralized server or specific runtime environment.

This skill enhances SEO visibility specifically for non-Google engines like Bing, Yandex, Seznam, and Naver. It utilizes Bing Webmaster Tools and the IndexNow protocol to ensure fresh content and links are indexed quickly. It is crucial for maximizing citation eligibility in Microsoft Copilot and gaining access to unique link data beyond Google's reach.