Skill UI

A comprehensive guide detailing offensive methodologies for exploiting Layer 2 (ARP spoofing, VLAN hopping) and Layer 3 (DNS poisoning, DHCP attacks) network infrastructure. Covers credential capture, traffic interception, and privilege escalation using tools like Bettercap, Responder, and ntlmrelayx. Essential for authorized internal penetration testing and red teaming.

A comprehensive guide for authorized red team and penetration testing engagements, detailing techniques that exploit human trust and psychological vulnerabilities. Coverage includes pretexting, vishing, smishing, physical access attacks (e.g., badge cloning, tailgating), USB payload delivery, and OSINT-driven targeting. This methodology maps to key MITRE ATT&CK T-numbers, simulating real-world, multi-vector adversaries to test organizational defenses at the human layer.

A comprehensive skill set for performing offensive security assessments on TLS/SSL implementations. This includes identifying cryptographic weaknesses (like POODLE, DROWN, Heartbleed), testing for protocol downgrades, analyzing weak cipher suites, and bypassing security controls such as certificate pinning and improper validation. Essential for penetration testers and security engineers to audit network service integrity.

Detailed methodology for achieving NT AUTHORITY\SYSTEM or local Administrator privileges on Windows targets. Covers token impersonation (JuicyPotato, PrintSpoofer), exploiting service misconfigurations, DLL hijacking, UAC bypass techniques, persistent access, and credential harvesting (LSA, DPAPI). Essential toolkit for red team and penetration testing engagements.

This is a synthetic, instructional fixture designed solely for verifying the delivery and access of community skills within the OpenSquilla live Skill Hub canary environment. It is crucial for testing platform capability (e.g., resource access validation) and should not be executed for actual functionality or command processing.

This tool simulates an experienced opposing counsel, providing a deep, adversarial analysis of legal arguments, submissions, or statements. It goes beyond mere critique, generating a six-part structure: a core theory of attack, structural deconstruction, primary lines of flaw (e.g., evidential gaps, legal misstatements), and high-impact points for oral submissions. Ideal for stress-testing legal writing before litigation.

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.

Provides a comprehensive setup for Playwright End-to-End (E2E) testing. This skill automatically analyzes your project structure (framework detection, TypeScript/JavaScript) and generates all necessary files: the core playwright.config.ts, standardized folder structure, initial test examples, and full CI/CD workflows (GitHub Actions/GitLab). It ensures your testing environment is production-ready, supporting modern frameworks like Next.js, React, Vue, and Angular.

QiuZhi2046's content playbook for AI science popularization: pain-point-first hooks, hands-on testing with real data, one-click solutions, and multi-platform strategies for tutorials, tool reviews, and tech commentary. Ideal for creators making AI accessible.

This skill guides the comprehensive drafting of formal legal requests submitted to the French Labor Court (Conseil de prud'hommes). It is designed for employees contesting a dismissal, especially when accused of gross misconduct, aiming to have the dismissal requalified as without real and serious cause. The process requires collecting extensive details on employment history, employer structure, and calculating mandated legal indemnities.

This adapter acts as a specialized entry point for authorized security analysis, reverse engineering, and CTF tasks using the 'reverse-skill' repository. It guides users through a systematic, multi-step workflow, ensuring that all actions—from setting initial scope to resolving tools—are executed within the defined security contract of the repository. Ideal for defensive testing and deep technical investigations.

This robust fixture is designed to execute predefined tasks using a specified seed path and current working directory. It intelligently separates dispatch metadata within YAML frontmatter from the main content body, ensuring the router reliably loads execution parameters while ignoring potential interference from the body text. Ideal for structured testing and controlled execution workflows.