Skill UI

Provides programmatic access to DrugBank drug and target data, covering downloads, queries, interaction networks, targets/pathways, and chemical similarity analyses for pharmacology research and safety reviews.

Provides GraphQL queries to the Open Targets Platform for target-disease associations, tractability, safety, drugs, and multi-omics evidence to guide therapeutic target identification, safety assessment, and repurposing research workflows.

This skill provides expert guidance on Makepad's cross-platform development lifecycle. It helps users understand platform-specific APIs, manage conditional compilation (e.g., macOS, Windows, WebGL2), and handle OS-specific behaviors across desktop, mobile, and web environments. Use it when targeting diverse deployment targets or integrating platform-level features.

A rigorous, blameless framework for conducting post-mortems after major failures, such as missed quarterly targets, failed launches, or poor hires. It guides users through defining the event, applying the 5 Whys to find root causes, distinguishing between contributing factors and core causes, identifying ignored warning signs, and creating actionable, owned change registers to ensure systemic improvement and prevent recurrence.

A comprehensive, canonical workflow for defining, writing, and improving complex AI skills. It guides users through a structured, multi-step process, including resolving targets, synthesizing information, enforcing depth gates, authoring artifacts, optimizing descriptions, and conducting thorough evaluation and validation.

Master the complete animation pipeline within Three.js. This resource covers everything from creating custom keyframe tracks (position, quaternion, color) to managing complex animations using AnimationMixer and AnimationAction. Learn about procedural motion, animation blending (crossfading), morph targets, and loading skeletal animations from GLTF files for realistic 3D experiences.

This tool parses Kubernetes API server audit logs (JSON lines) to detect critical security events. It specifically targets unauthorized access, secret enumeration, RBAC escalation, privileged pod creation, and shell access (exec/attach). Use it for incident response, threat hunting, or building SIEM detection rules.

Utilize BloodHound Community Edition to conduct deep internal Active Directory reconnaissance using graph theory. This skill maps complex relationships, including ACLs, group memberships, and trust links, to visualize potential attack paths. It is crucial in red-teaming engagements to identify the shortest path from a low-privileged foothold to high-value targets like Domain Admins, or to validate security hardening efforts.

This skill provides comprehensive detection methods for credential dumping techniques, a critical post-exploitation phase in cyber attacks. It targets the extraction of sensitive credentials from LSASS memory, SAM registry hives, and NTDS.dit using advanced security visibility. Detection relies on analyzing Sysmon Event ID 10 (ProcessAccess), Windows Security logs, and complex SIEM correlation rules, making it essential for SOC analysts and threat hunters investigating advanced persistent threats (APTs).

A comprehensive guide for detecting Kerberoasting attacks by monitoring for anomalous Kerberos TGS requests (Event ID 4769). This technique targets service accounts with Service Principal Names (SPNs), which are requested offline by attackers to crack service account passwords. Use this during threat hunting or incident response to scope MITRE T1558 credential access activities in Active Directory environments.

BloodHound is a powerful, graph-based reconnaissance tool specifically designed for Active Directory environments. It utilizes graph theory to map deep, hidden relationships and potential attack paths—such as privilege escalation chains—from compromised low-value accounts to high-value targets like Domain Admins. This tool is essential for authorized red team exercises and penetration testing engagements.

A detailed guide for conducting authorized penetration tests to detect and exploit HTTP request smuggling flaws. This technique targets discrepancies in Content-Length and Transfer-Encoding parsing between front-end proxies (like CDNs or load balancers) and back-end servers, allowing attackers to bypass security controls and hijack subsequent requests.