Skill UI

This guide provides comprehensive instructions for setting up and managing Sentry's enterprise-grade Role-Based Access Control (RBAC). It covers establishing the Organization-Team-Project hierarchy, integrating Single Sign-On (SSO) via SAML2, and automating user provisioning with SCIM. Use this when setting up large-scale organizations, enforcing granular team permissions, centralizing identity management, or ensuring regulatory compliance and audit logging.

This tool facilitates a structured, in-depth founder interview covering seven critical dimensions, including company identity, market positioning, team culture, and strategic goals. It generates a persistent `company-context.md` file, which serves as the single source of truth for all subsequent C-suite advisory interactions. Use it for initial setup or mandatory quarterly context refresh.

IAM Permission Boundaries are an advanced AWS security feature used to set the maximum permissions an identity-based policy can grant to an IAM entity (user or role). This allows security teams to safely delegate role creation to developers while strictly enforcing least-privilege principles, preventing unintended privilege escalation.

This comprehensive, guided 4-phase workflow helps teams establish clear identity, boundaries, and strategic positioning. It guides users through absorbing existing context, auditing current capabilities versus claimed responsibilities, articulating a defined mission, and finally achieving stakeholder alignment. Use this framework when starting a new role, inheriting ambiguity, or needing to define clear operational boundaries.

Methodology for red team testing of on-prem Active Directory, hybrid AD/Entra ID, and ADCS. Covers reconnaissance, credential abuse, privilege escalation, lateral movement, persistence, trust abuse, and Defender for Identity evasion.

A comprehensive guide for integrating Microsoft Graph SDK into applications. It covers accessing Microsoft 365 data (users, mail, calendar, Teams, SharePoint) from various languages (.NET, Python, TypeScript). Key topics include robust authentication patterns (Managed Identity, OBO), advanced data retrieval techniques like pagination, delta queries, batch requests, and setting up change notifications via webhooks. Learn best practices for secure and efficient API interaction.

This skill manages and maintains your personal context portfolio, a structured set of markdown files detailing your identity, professional roles, team information, and system configurations. It guides users through first-time setup interviews, detects missing or incomplete information (e.g., TODO placeholders), and facilitates targeted updates when your professional context changes.

Generates comprehensive, structured documentation for microservices or internal platforms. This skill covers service identity, architecture context, APIs, SLAs, data classification, and operational runbooks, making it ideal for developer portals, service READMEs, and internal service registries. It ensures new team members can quickly understand how to use and depend on a shared service.

This toolkit provides comprehensive offensive and administrative capabilities for Microsoft Entra ID, Azure AD, and AD FS. It allows authorized penetration testers to perform unauthenticated reconnaissance, acquire various access tokens, and critically, test for federation backdoors (Golden SAML). It is essential for validating identity-attack resilience and producing detailed hardening recommendations during red-team engagements.

This comprehensive tool manages all aspects of a brand's identity, including voice, visual standards, messaging frameworks, and asset management. It helps teams maintain brand integrity by synchronizing guidelines (e.g., markdown) into actionable digital tokens (JSON/CSS) and validating assets, ensuring all content and designs adhere to established rules and standards.