Skill UI

Systematic Windows privilege escalation guide covering enumeration, credential harvesting, service abuse, token impersonation, kernel exploits and configuration flaws to elevate from standard user to Administrator/SYSTEM during pentests.

Integrates Windsurf's native deployment features and Cascade workflows to automate the entire build, test, and deployment cycle. Supports major platforms like Netlify, Vercel, AWS, and Google Cloud Run, enabling users to manage the full CI/CD pipeline, including preview deployments and rollbacks, directly within the IDE.

Assess web apps for client-side injection flaws, covering stored, reflected, and DOM XSS plus HTML injection, demonstrate session hijacking payloads, and guide validation and sanitization checks.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.

Draws four cryptographically random Tarot cards and reads their meanings to orient choices when prompts are ambiguous, indecisive, or explicitly ask for fate-based guidance, then narrates how the spread maps to next steps.

A specialized assistant designed to act as a senior software architect. It critiques code generated by AI tools or rapidly prototyped code, moving beyond simple syntax checks. The auditor identifies deep structural flaws, technical debt, architectural weaknesses, and production risks (e.g., security vulnerabilities, poor error handling, tight coupling) that make code fragile or unsuitable for deployment.

A comprehensive guide for managing secrets and environment variables throughout the entire development lifecycle, from local development to production. This skill covers secret leak auditing (detecting committed credentials), implementing robust rotation workflows, and integrating with industry-leading secret stores like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. Essential for hardening CI/CD pipelines and ensuring compliance.

A comprehensive expert for deploying and scaling AI agents using AWS Bedrock AgentCore. This guide covers the full lifecycle of agent management, including service selection (Gateway, Runtime, Memory, Identity, etc.), deployment patterns, credential management, and advanced integration workflows required for enterprise-scale AI solutions.

Comprehensive guide and expert assistance for building, refactoring, and validating AWS cloud infrastructure using the AWS Cloud Development Kit (CDK). Covers best practices for TypeScript and Python, including resource naming conventions, Lambda function development, and multi-layer pre-deployment validation using tools like cdk-nag.

Provides a concise reference for shared AWS concepts so teams can standardize commonly used cloud resources, practices, and patterns when building or maintaining infrastructure-heavy projects.

AWS Cost Operations describes a capability for overseeing cloud spending, tracking expense drivers, and aligning workloads with budgets so teams can optimize provisioning and finance decisions.

This comprehensive guide details how to set up and configure AWS Machine Capability Platform (MCP) servers for advanced AI agent use. It provides two options: a Full AWS MCP Server (for API calls and documentation search) and a basic AWS Documentation MCP (for documentation search only). Instructions cover prerequisites, configuration methods (via JSON settings), necessary IAM permissions, and troubleshooting tips for seamless integration of AWS services into AI workflows.