Skill UI

This specialized skill is designed for in-depth security and forensic analysis of Windows secrets protected by DPAPI. It maps the entire lifecycle of encrypted credentials, tracing the flow from the initial protected blob or masterkey through the context unwrapping (e.g., user logon, machine context, domain backup keys) to the specific service that finally accepts the plaintext secret. Use this to prove the decisive access edge in a complex compromise scenario.

This guide outlines a structured, step-by-step onboarding process designed to establish trust and ensure user comfort. It systematically builds rapport, establishes administrative authority, and then guides the user to provide necessary credentials (like API keys and passwords) required to finalize the system setup. Ideal for initial user activation flows.

Guide the configuration, connection, validation, and repair of Claude Desktop and MCP servers using Desktop Commander. Inspect and fix mcp.json and configuration files, troubleshoot connection issues, verify model/API keys, and cover local AI gateways like OpenClaw and Hermes.

A robust utility for generating, summarizing, or rewriting Headless CMS entry content programmatically. Instead of calling an LLM directly, this skill delegates the process to the user's configured AI Power Ups, allowing the use of saved Writers/Readers Personas and Projects. Ideal for implementing bulk actions, lifecycle hooks, or custom mutations, ensuring secure content creation without needing to hardcode API keys or prompts.

Map the testable attack surface of a single authorized target application. Derive hosts, APIs, keys, and object graph from what the app exposes. Use for recon, JS inventory, and identifying business plane without brute force.

Cross-references C# Web API controllers, DTOs and routes against their TypeScript/JavaScript consumers to detect contract drift in both directions before merge, catching renamed or removed JSON keys, new required parameters, and unhandled status codes.

This skill provides an end-to-end pipeline for Android APK security assessments. It includes inventorying developer apps, acquiring APKs from sources like APKPure, decompiling DEX files using jadx, and searching for hardcoded secrets like API keys and internal IPs. Suitable for authorized bug bounty engagements and red team operations targeting mobile applications.

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

A skill for using the Azure Cosmos DB SDK for Rust (NoSQL API). It provides guidance on authentication, client hierarchy, and CRUD operations for items, including create, read, replace, patch, and delete. Covers best practices for partition keys, Entra ID auth, and client reuse.

Provides Rust SDK examples for Azure Key Vault Secrets to securely store, retrieve, update, list, and delete passwords, API keys, and other secrets using Azure Identity authentication.

This .NET SDK enables developers to manage Azure Application Insights resources for application performance monitoring and observability. It supports creating components, retrieving connection strings, generating API keys, and configuring availability tests via C# code. Ideal for DevOps and backend development workflows involving cloud monitoring.

This Java SDK enables secure storage and management of secrets such as passwords, API keys, and connection strings within Azure Key Vault. It supports operations like creating, retrieving, updating, listing, deleting, recovering, and purging secrets, as well as backup and restore functionalities for sensitive configuration data.