Skill UI

A comprehensive guide for red team operators detailing techniques to manipulate, clear, or destroy digital evidence on Windows and Linux systems. Covers clearing Windows Event Logs (wevtutil), manipulating Linux system logs, timestamp forgery, file system scrubbing, and memory artifact removal. Essential for understanding advanced evasion methods and achieving operational security during authorized engagements.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

A comprehensive guide covering advanced Linux privilege escalation techniques. It details a systematic methodology to move from a low-privilege shell to root, exploiting misconfigurations in SUID/SGID binaries, abusing Linux capabilities, targeting sudo flaws (NOPASSWD), and leveraging kernel or system service vulnerabilities. Essential for red team and penetration testing engagements.

Details comprehensive methods to maintain unauthorized access (persistence) on both Windows and Linux operating systems. Covers registry manipulation, scheduled tasks (schtasks), WMI event subscriptions, cron jobs, systemd timers, and advanced Active Directory abuses. Essential for authorized red team engagements and simulating advanced threat activity.

This skill generates and opens the Power Apps Wrap URL for a specific application within a given environment. It requires the app ID and environment ID as arguments. The tool supports both Production and Test environments and automatically attempts to open the URL in the default browser on macOS, Linux, or Windows. If automatic opening fails, the URL is provided for manual access.

A practical methodology for turning a known vulnerability into a stable working remote exploit. Covers stack overflow, heap exploitation, and Linux kernel pwn, addressing real-world gaps between local CTF success and reliable remote execution: libc version mismatches, heap spray timing, SMEP/SMAP/KASLR, stack alignment, and network buffering. Uses pwntools with GEF/pwndbg, ROPgadget/Ropper, one_gadget, libc-database, and qemu-system.

A safe, cross-platform copilot for all command-line interface (CLI) needs. It detects the user's environment (OS, shell, installed tools) before suggesting or running commands. It excels at handling complex, long-running sessions (REPLs, SSH, databases) and debugging common errors like 'command not found' or 'permission denied' across Windows, macOS, and Linux.

A skill that encapsulates Eileen Chang's fiction writing mindset, including her aesthetics of desolation, contrastive juxtaposition, and urban settings in Shanghai and Hong Kong. Guides writers in crafting character-driven stories with psychological depth and material details.

This skill injects domain-specific intelligence, regulatory requirements, and industry-standard UX patterns into a project once its niche is identified. It generates a specialized dossier in Spanish covering industry stack, compliance norms, niche UX patterns, and hidden pain points. It distinguishes verified sources from hypotheses and ensures technical excellence within the specific sector context without replacing legal or expert review.

Autonomous DevSecOps & FinOps guardrails that review Linux kernel patches for memory safety, analyze Terraform cost drifts to prevent bill spikes, and translate natural language security intent into hardened Kubernetes policies. Integrates advanced AI reasoning into the SDLC for high-stakes audits and CI/CD quality gating.

Manage multiple local CLI agents via tmux sessions including starting, stopping, monitoring, and assigning tasks within an explicitly authorized workspace. This skill enables parallel execution, log tailing, and task assignment for automated workflows. Requires tmux and python3 installation. Use for orchestrating local agent infrastructure and verifying task completion without automatic scheduling.

Design and evaluate LLM product features, retrieval, validated outputs, latency, and cost controls. Covers LLM integration patterns, RAG architecture, scalable prompt engineering, trustworthy AI UX, and cost optimization strategies for sustainable AI implementation in production environments.