Skill UI

This skill provides a mechanism to execute TypeScript scripts using tsx, enabling fetching and streaming responses from external HTTP endpoints. It is designed for users who need a lightweight Node.js helper utility to manage simple network API calls, making it ideal for rapid integration and data fetching tasks.

This skill guides the creation of production-grade Model Context Protocol (MCP) servers and basic clients using C# and the .NET framework. It ensures adherence to the stable 2.x specification, addressing common pitfalls like stateful/stateless HTTP defaults, handling deprecations (roots, sampling), and utilizing appropriate transports (STDIO, Streamable HTTP). Essential for developers integrating structured AI APIs into enterprise applications.

This guide details the architectural and implementation patterns for building modular applications or microservices using the tinystruct Java framework. It covers core concepts like using the @Action annotation for dual routing (CLI/HTTP), managing request state with Context, and using native Builder for JSON serialization, ensuring a lightweight and structured development environment.

Pi-hole is a powerful, network-wide DNS ad blocker solution that runs on Linux hosts (like Raspberry Pi). It automatically blocks ads, trackers, and malware domains for every device on your network without requiring browser extensions. This guide details installation via Docker or bare-metal setup, configuring it as the primary DNS server for a home network, managing blocklists, and implementing advanced features like DNS-over-HTTPS (DoH) for enhanced privacy.

A lightweight utility designed for fetching content from a single URL via HTTP or HTTPS. It supports various methods (GET, POST, PUT, DELETE) and allows configuration of timeouts and maximum response body sizes. This tool is ideal for quick, simple data extraction steps within a workflow DAG, offering significant performance gains over complex LLM agent loops. Note that complex tasks like JS rendering or multi-page crawling require dedicated sub-agents.

This skill provides a robust method for uploading local digital assets, including images, mockups, and full HTML files, to a Stitch project. It bypasses the limitations of standard tool calls by streaming files directly over HTTP, ensuring that large visual assets or complex web pages can be processed accurately for your design and prototyping workflow. Ideal for integrating local design iterations into cloud-based prototypes.

Velociraptor is a powerful open-source platform for endpoint visibility and digital forensics. It allows users to deploy agents across thousands of endpoints and execute sophisticated VQL (Velociraptor Query Language) queries. This enables large-scale, on-demand forensic artifact collection, TTP hunting, and continuous monitoring during incident response, even on air-gapped or unmanaged systems.

Sliver is an open-source, cross-platform Command and Control (C2) framework used for adversary emulation in authorized red-team engagements. This skill guides users through deploying the C2 server, establishing multi-protocol listeners (mTLS, DNS, HTTPS), generating cross-platform implants, and executing advanced post-exploitation techniques, including pivoting and in-memory execution via the Armory.

This technique exploits vulnerable Active Directory Certificate Services (AD CS) HTTP web-enrollment endpoints (ESC8) that lack Extended Protection for Authentication (EPA). By coercing a Domain Controller (DC) to authenticate and relaying the captured NTLM credentials, an attacker can obtain a DC machine certificate. This certificate is then used via PKINIT to request a TGT, recover the DC's NT hash, and ultimately achieve full domain compromise via DCSync. Essential for advanced AD red-teaming simulations.

This skill validates the correctness and completeness of any API request. It rigorously checks the HTTP method, URL structure, required headers, body format, authentication details, and query parameters. Use it to debug cURL commands, verify endpoint calls, or ensure API structures adhere to best practices, providing immediate, actionable feedback on required fixes.

The `hf-mem` skill estimates the necessary VRAM or system memory required to load Safetensors or GGUF model weights for inference directly from the Hugging Face Hub. It uses efficient HTTP Range requests, avoiding local downloads. Users can determine if a model fits on their GPU or instance, including optional estimations for the KV cache and setting limits like maximum sequence length.

Neon Functions provide long-running, stateful, serverless HTTP handlers deployed directly next to your Neon database branch. They are ideal for complex backend workloads that exceed traditional serverless limits, such as real-time WebSockets, Server-Sent Events (SSE) streaming, or sophisticated AI agents. Functions automatically inject the database connection URL and maintain state within the function scope, ensuring high performance and data proximity.