Skill UI

This skill integrates Power Automate cloud flows into a Power Pages site. It lists available flows, suggests relevant ones based on user intent, determines necessary web roles, creates metadata files, and generates client-side code to call flows. It handles both new flow registration and wiring existing flows to various pages.

This skill analyzes a user's business problem within a Power Pages site and recommends the optimal backend integration approach. It evaluates options like Web API, AI Web API, Server Logic, and Cloud Flows, guiding the user on where to connect data, implement complex business logic, or add generative AI summaries.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A comprehensive guide covering advanced offensive methodologies for data exfiltration. Techniques include abusing DNS (dnscat2, iodine), tunneling over HTTPS/CDN, utilizing ICMP, and exploiting cloud storage services. This knowledge is critical for authorized red team engagements and post-exploitation simulations, mapping directly to MITRE ATT&CK tactics like T1048 and T1041.

A comprehensive guide covering the full attack lifecycle in Kubernetes. Techniques include service account token theft, RBAC misconfiguration exploitation, kubelet API abuse, pod escape, and cloud metadata compromise across major cloud platforms (AWS, GCP, Azure). Essential for security assessment and penetration testing of cloud-native environments.

EarDraft transforms reading-oriented prose into listening-optimized text for flat, neutral vocal delivery (TTS, podcasts, audiobooks, CLE audio). It handles legal materials by expanding citations, symbols, and footnotes, and supports multiple languages and output formats including plain text, ElevenLabs tags, and SSML for Amazon Polly, Google Cloud TTS, and Azure.

Query self-hosted or Matomo Cloud analytics as a privacy-first GA4 alternative. Pull organic traffic, landing pages, device, country, referrer and keyword reports via the Matomo Reporting API.