Skill UI

This skill captures and persists critical user decisions, project constraints, and architectural choices across multiple sessions and agents. It saves this context into a structured memory database (`mdbase`), ensuring that future development steps or agents can retrieve the original intent without re-deriving it from scratch. Ideal for documenting project rules, tech stacks, and design rationale.

This meta-skill is designed exclusively to orchestrate and formalize complex workflows composed of multiple existing skills. It acts as a comprehensive governance layer, guiding the user through intent clarification, trigger collision checks, linting, and proposal persistence. Use it when proposing a multi-step, integrated solution, but do not use it for simple standalone skill requests.

The Atlas Contract is a goal-integrity governance protocol designed for complex, multi-stage tasks such as backend development, API integration, or data persistence. It prevents 'goal drift' by enforcing critical checkpoints (Goal Contracts, Phase Checks, Final Audits). It is essential for high-risk, multi-part requests where maintaining strict alignment with the user's original objective is paramount.

Pacu is an open-source, modular AWS exploitation framework designed for authorized cloud penetration testing and red-teaming. It functions as a cloud-pentest analogue to Metasploit, enabling users to enumerate AWS resources, scan for privilege escalation paths, and automate the exploitation of IAM vulnerabilities, persistence mechanisms, and data exfiltration. Use this skill to assess the blast radius of compromised credentials in a controlled, authorized environment.

This skill is designed for proactive firmware forensics and advanced threat hunting. It analyzes the EFI System Partition (ESP) to detect sophisticated, pre-OS persistence mechanisms, such as UEFI bootkits (e.g., BlackLotus, ESPecter). Detection methods include verifying file hashes against a trusted golden baseline, checking Secure Boot signatures, scanning with YARA, and flagging structural anomalies within the ESP.

This PowerShell toolset performs advanced post-exploitation, reconnaissance, persistence, and data exfiltration against Microsoft 365/Entra ID tenants using the Microsoft Graph API. It operationalizes stolen Graph tokens to enumerate users, dump policies, escalate privileges, and search sensitive data across mailboxes, SharePoint, and Teams. Essential for authorized red teaming engagements.