Skill UI

A comprehensive guide to deploying decoy artifacts, such as fake credentials, URLs, and files, called honeytokens or canarytokens. These tokens have no legitimate operational use; therefore, any interaction with them provides a high-fidelity, low-false-positive signal of an intrusion, data theft, or insider threat. Use this technique to enhance detection in low-telemetry areas like file shares or credential stores.

Unified design skill covering brand identity, design tokens, UI styling, AI logo generation, corporate identity programs, HTML presentations, banners, icons, and social media photos. Automates logo design, CIP mockups, slide decks, and multi-platform social images.

A comprehensive guide for threat hunters focusing on detecting stolen session cookies and OAuth/PRT token replay (T1550.001). This skill teaches correlation techniques across Microsoft Entra ID SigninLogs and Okta System Logs, enabling the detection of impossible travel, refresh-token reuse, and anomalous lateral movement within federated SaaS environments. Essential for post-phishing or post-compromise investigations.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

A comprehensive tool for creating strategic, data-driven HTML presentations. It integrates advanced features like Chart.js for visualization, design tokens for consistency, responsive layouts, and copywriting formulas to ensure maximum impact. Ideal for marketing pitches, academic reports, or complex business proposals.

This skill provides a comprehensive set of core UI components (e.g., Box, Button, Input, Card) and implements a structured design system. It guides developers on using design tokens (like `$textPrimary` or `$4`) instead of hard-coded values, ensuring visual consistency and scalability across applications. Ideal for any project requiring standardized, maintainable UI development.

A fast, grep-based linter that checks for common design system violations in CSS and component code, such as hardcoded colors, raw pixel values, and deprecated syntax. It provides immediate automated feedback to ensure code adheres to established design tokens and best practices.

A comprehensive, implementation-ready guideline for creating a modern, editorial design system tailored for books, magazines, and reports. This skill defines foundational constraints, including typography scales, color tokens, spacing rhythm, and accessibility standards (WCAG 2.2 AA), ensuring visual consistency across all digital and print media.

This skill probes website authentication flows to identify security vulnerabilities like CSRF, redirect leaks, weak cookies, and OAuth misconfigurations. It automates login processes, analyzes trajectories, and generates structured findings reports. Suitable for pre-deployment audits, investigating token leaks, and regression testing. Sensitive data is quarantined and never exposed unredacted.

This tool audits the token consumption across all components (agents, skills, rules, MCP servers) within a Claude Code session. It analyzes token overhead, identifies bloat (e.g., overly long descriptions, redundant components), and generates a detailed context budget report. Use it to maintain optimal context window usage, improve performance, and prevent context saturation.

This skill wraps the `getCompactContext` functionality to efficiently retrieve a compacted ReasoningBank context, specifically optimized for cost-analysis queries. It generates a detailed report summarizing critical metrics such as tokens saved, memories retrieved, and agentic-flow availability. It is essential for monitoring and optimizing resource usage in complex AI workflows, providing deep visibility into the efficiency and cost of the context retrieval mechanism.

This Bash script compares two cost-summary JSON snapshots to detect PR-level cost regressions. It calculates deltas between baseline and current states, categorizing changes as added, removed, or changed. Users can set alerts for percentage increases, absolute USD thresholds, or specific token class growth. Designed for CI/CD workflows to gate PRs based on cost changes.