Skill UI

This skill addresses the common problem of documentation decay in long-lived software projects. It establishes a canonical governance layer by assigning four non-overlapping roles—Constitution, Map, Status, and History—to existing documentation. By linking these roles to the active agent harness, it prevents documentation drift, ensuring that all project information remains accurate, authoritative, and contextually linked to the current codebase, making it ideal for the maintenance phase.

This tool reviews and migrates deprecated wildcard (*) values found in Power Pages Web API field settings. It replaces them with explicit, least-privilege Dataverse column definitions. Use this when addressing Web API wildcard deprecation, reviewing data exposure, or fixing integration failures across traditional and SPA site architectures.

Expert guide for the Gemini Notebook (formerly NotebookLM) CLI and MCP server. Manage notebooks, add sources from URLs, YouTube, text or Google Drive, generate podcasts, reports, quizzes and mind maps, plus research, chat and workflow automation.

A comprehensive guide to conducting authorized security assessments across API-driven applications. This skill covers REST, gRPC, and WebSocket protocols, addressing the full OWASP API Security Top 10 2023. Techniques include identifying Broken Object Level Authorization (BOLA/IDOR), broken authentication, excessive data exposure, and implementing fuzzing for various API endpoints. Designed for professional penetration testing engagements.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

A comprehensive guide to tuning game physics parameters, including mass, gravity, drag, and continuous collision detection (CCD). It addresses common stability issues like jitter and tunneling by correctly separating the fixed-timestep simulation (physics updates) from the variable-rate rendering (visual updates) using interpolation. Essential for creating predictable and responsive game motion across various hardware.

A practical methodology for turning a known vulnerability into a stable working remote exploit. Covers stack overflow, heap exploitation, and Linux kernel pwn, addressing real-world gaps between local CTF success and reliable remote execution: libc version mismatches, heap spray timing, SMEP/SMAP/KASLR, stack alignment, and network buffering. Uses pwntools with GEF/pwndbg, ROPgadget/Ropper, one_gadget, libc-database, and qemu-system.

This skill generates high-quality, styled code screenshots by calling the ray.tinte.dev API. It allows users to convert raw code snippets into professional PNG images, supporting multiple programming languages (e.g., Python, JavaScript, TypeScript), customizable themes, and various styling parameters like font size and padding. Use this when the user explicitly requests code images, code snippets as pictures, or mentions 'ray' to visualize code.

This advanced skill performs server-enforced security and privacy reviews for applications, including those rapidly developed with AI agents. It implements comprehensive models like STRIDE (security) and LINDDUN (privacy), screens dependencies against live CVE/CISA data, and evaluates applicability of major EU regulations (GDPR, AI Act, NIS2). The output is a formal, auditable compliance report, never a simulated chat response or legal verdict.

This meta-skill automates the entire short-drama production pipeline, starting from a simple topic. The workflow analyzes the request to infer render style, character identity, and shot count. It first drafts a detailed, shot-by-shot shooting script and pauses for user review. After approval, it generates a universal cast reference image, per-shot composition images, and corresponding video clips. Crucially, it maintains character and scene consistency by anchoring every video to both the reference image and the composition image. Finally, it adds title/ending cards, burns subtitles, and de...

This comprehensive wizard guides users through setting up various AI agent clients (e.g., Claude Code, Codex, CodeBuddy) to connect with a Memory Proxy. It handles configuration scanning, gathering necessary credentials (Proxy URL, User Key), selecting the specific agent, and validating connectivity via live API health checks for multiple protocols (Anthropic, OpenAI, etc.) before writing the final configuration.

This skill automates the creation of a Dataverse publisher and solution, and systematically adds necessary Power Pages site components. It is crucial for managing the Application Lifecycle Management (ALM) and structured deployment of Power Pages sites, ensuring components are correctly packaged for export and import.