Skill UI

Sets up Microsoft Purview data loss prevention policies to protect sensitive content across Exchange, SharePoint, OneDrive, Teams, Power BI, and managed endpoints by defining sensitivity label taxonomies, custom regex types, endpoint controls, and monitoring with Activity Explorer plus PowerShell/Graph automation.

`jq` is the standard and powerful CLI tool for querying, filtering, and reshaping JSON data. This skill provides expert-level practical patterns for working with deeply nested structures, handling complex transformations (like flattening, renaming, and grouping), and integrating JSON logic into shell pipelines. Essential for parsing API outputs (AWS, GitHub), log files, and building robust Bash scripts.

Runs Invoke-AtomicRedTeam PowerShell suites aligned with MITRE ATT&CK, automating purple team exercises, coverage gap analysis, detection validation loops, heatmap generation, and continuous pipelines to prove SIEM/EDR visibility for atomic adversary emulation.

Tmux is a powerful terminal multiplexer that enables users to manage multiple sessions, windows, and panes within a single terminal connection. It is essential for maintaining persistent connections on remote servers (surviving SSH disconnects), running long-term background jobs, and automating complex, multi-pane workflows directly from shell scripts, significantly enhancing remote development efficiency.

Provides shared GWS CLI behaviors for authentication, global flags, formatting, pagination, and safety patterns, plus zsh tips and community guidance for safely scripting workspace workloads.

This guide details the process of creating and managing 'Agent Users' within Microsoft Entra ID. Agent Users are specialized identities that allow AI agents to function as digital workers, giving them user-level capabilities (e.g., accessing Exchange mailboxes or Teams) while maintaining robust security boundaries. It covers using the Microsoft Graph API and PowerShell to provision and configure these agents.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This skill scaffolds a complete, cohesive, mobile-first page structure, ensuring consistency across the entire application. It guides the user to define the page's core purpose, apply the Information Pyramid, and compose the layout using established design systems and existing components (shell, navigation, cards). It is ideal for starting new product flows or developing new screens while maintaining professional structural integrity and mobile-first best practices.

This utility collects comprehensive diagnostic evidence for Algolia support tickets or internal troubleshooting. It gathers index statistics, API key access control lists (ACLs), recent query logs, and network diagnostic information using API endpoints and shell scripting. Use it when diagnosing search performance or unexpected service behavior.

A comprehensive diagnostic utility designed to collect all necessary evidence when troubleshooting Attio API connectivity issues or preparing a support ticket. It checks API authentication, object schema definitions, rate limit status, and general endpoint health using shell scripting and cURL.

A comprehensive runbook for systematically handling Intercom API outages and integration failures. It guides technical teams through rapid triage (checking status codes, rate limits, and service status), implementing mitigation strategies like graceful degradation, and documenting post-incident reports (postmortem). Essential for maintaining service reliability during Intercom service interruptions.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.