Skill UI

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.

A comprehensive guide covering advanced Linux privilege escalation techniques. It details a systematic methodology to move from a low-privilege shell to root, exploiting misconfigurations in SUID/SGID binaries, abusing Linux capabilities, targeting sudo flaws (NOPASSWD), and leveraging kernel or system service vulnerabilities. Essential for red team and penetration testing engagements.

A comprehensive guide for authorized red team and penetration testing engagements, detailing techniques that exploit human trust and psychological vulnerabilities. Coverage includes pretexting, vishing, smishing, physical access attacks (e.g., badge cloning, tailgating), USB payload delivery, and OSINT-driven targeting. This methodology maps to key MITRE ATT&CK T-numbers, simulating real-world, multi-vector adversaries to test organizational defenses at the human layer.

This is a synthetic, instructional fixture designed solely for verifying the delivery and access of community skills within the OpenSquilla live Skill Hub canary environment. It is crucial for testing platform capability (e.g., resource access validation) and should not be executed for actual functionality or command processing.

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.

Provides a comprehensive setup for Playwright End-to-End (E2E) testing. This skill automatically analyzes your project structure (framework detection, TypeScript/JavaScript) and generates all necessary files: the core playwright.config.ts, standardized folder structure, initial test examples, and full CI/CD workflows (GitHub Actions/GitLab). It ensures your testing environment is production-ready, supporting modern frameworks like Next.js, React, Vue, and Angular.

This skill guides the comprehensive drafting of formal legal requests submitted to the French Labor Court (Conseil de prud'hommes). It is designed for employees contesting a dismissal, especially when accused of gross misconduct, aiming to have the dismissal requalified as without real and serious cause. The process requires collecting extensive details on employment history, employer structure, and calculating mandated legal indemnities.

This robust fixture is designed to execute predefined tasks using a specified seed path and current working directory. It intelligently separates dispatch metadata within YAML frontmatter from the main content body, ensuring the router reliably loads execution parameters while ignoring potential interference from the body text. Ideal for structured testing and controlled execution workflows.

This guide details Phase 4: transitioning an interactive agent into a persistent, automated workflow. It covers creating scheduled deployments (cron jobs) or event-driven triggers (cURL). Users learn to validate cron schedules, build the necessary deployment payloads, and follow best practices, including manual testing and DST consideration, ensuring the agent runs reliably without human intervention.

Runs a comprehensive security scan on a live, deployed Power Pages site. It analyzes the site's public surface for vulnerabilities, fetching the latest report and providing a plain-language summary of findings, categorized by severity. Ideal for auditing, testing, or assessing the safety of a production environment.

This advanced skill stress-tests legal submissions, motions, or arguments by generating an adversarial critique that survives multiple layers of challenge. It goes beyond superficial attacks, ensuring every point is load-bearing and defensible against a single-sentence reply. Ideal for red-teaming, stress-testing, or refining arguments to withstand rigorous scrutiny.

This skill provides a comprehensive guide to advanced testing patterns in Go. It covers everything from basic unit tests (like table-driven testing) to complex state management in TUI applications (Bubbletea/teatest), and deterministic testing using golden files. Use this when writing, reviewing, or improving Go test coverage to ensure reliable and focused testing.