The ads consultant that becomes an ads agent. Reads paid-ad performance natively through the TikTok Ads connector, or via a build-connector Zapier connection for other ad…
The order of operations for an Active Directory penetration test: setup, collection, exploitation, post-processing.
The telemetry each Active Directory technique generates and what alerts a defender: Kerberoasting produces Event 4769 with RC4 encryption (0x17) and an MDI alert, DCSync produces…
Use when user needs Active Directory security analysis, privileged group design review, authentication policy assessment, or delegation and attack surface evaluation across…
Zaprojektuj z operatorem i utwórz samodzielną wiki w Markdown, z lokalnymi procedurami ingest, ask, lint, evolve i export.
Active Directory Certificate Services (AD CS) escalation techniques ESC1 through ESC17, driven by hand with Certipy (ly4k).
Wire a CLI into the toolbox image — install layer, version ARG, `internal/catalog/catalog.go` row, `smoke-test.sh` check, Renovate manager, and the `~/.toolbox/` bind-mount…
Normalize a contributed comp set a Lee broker pastes, forwards, or uploads (a forwarded email with several brokerage comp tables, an xlsx/csv export, a pasted tab/pipe table, or a…
Guide the user to add a data source, connection, or API connector to a Canvas App via Power Apps Studio, then verify and continue.
Add DeltaChat channel integration via @deltachat/stdio-rpc-server. Native adapter — no Chat SDK bridge. Email-based messaging with end-to-end encryption.
Adds Excel Online (Business) connector to a Power Apps code app. Use when reading or writing Excel workbook data from OneDrive or SharePoint.
Add Google Calendar as an MCP tool (list calendars, list/search/create events, free/busy queries) using OneCLI-managed OAuth. Multi-calendar and multi-account supported.
Add Gmail as an MCP tool (read, search, send, label, draft) using OneCLI-managed OAuth. The agent gets Gmail tools in every enabled group; OneCLI injects real tokens at request…
Tech health check: documentation, security, architecture, data analysis. Use when user requests project audit, tech debt review, or health check.
Use when the user wants to add a new MCP server integration — connect a custom tool, API, or service to the plugin by configuring it in .mcp.json with proper credentials and…
Install or refresh Iron Proxy and its official Iron Control web console for NanoClaw. Use when selecting the Iron gateway, adding its management UI, configuring credentials and…
Scaffold the next database migration for this repo. Use when adding or altering a SQLite table/index/schema.
Add and live-prove a model provider with non-interactive config one-liners, without exposing credentials.
Adds OneDrive for Business connector to a Power Apps code app. Use when uploading, downloading, listing, or managing files in OneDrive.
Use whenever a new sensitive environment variable is introduced (API tokens, database URLs, webhook secrets, signing keys).
Security audit: OWASP Top 10, multi-tenancy, injection, auth, XSS, dependencies.
Add, split, merge, or change an AgentReveal security rule with complete severity, priority, grouping, remediation, verification, acceptance, documentation, and privacy semantics.
Adds Work IQ (M365 Copilot Search) to a Power Apps code app via the Work IQ Copilot MCP connector (shared_a365copilotchatmcp), then wires up a production-ready McpSession wrapper…
Guides systematic implementation of new sustainability metrics in OSS Sustain Guard using the plugin-based metric system.
Auth.js v5 authentication conventions — encrypted sessions, env-var-only secrets, server vs client session access, edge middleware route protection, and provider credential…
Planowanie projektów dodatków dla platformy Soneta (enova365, Triva) — interaktywny, etapowy proces od wizji biznesowej po specyfikację implementacyjną, zasilającą skille…
Google Play Data safety form walkthrough — data collected/shared per category, collection purposes, encryption-in-transit attestation, deletion-request URL, in-app and out-of-app…
Sentry's hosted MCP (mcp.sentry.dev, Streamable HTTP + OAuth) for mobile crash triage — issue/event search, source-mapped stack traces, releases, session replays, and the Seer AI…
Overview e regras universais do projeto Sankhya Addon Studio 2.0 (Wildfly/EJB + JAPE SDK) — Java 8 strict, Lombok, ISO-8859-1, Guice DI, MapStruct, JapeRepository, convenção de…
XcodeBuildMCP + ios-simulator-mcp for headless iOS/macOS/tvOS/watchOS/visionOS build, scheme management, simulator boot/install/launch, screenshot, log streaming, test execution,…
Preflight issue bodies for prompt-injection and supply-chain risk before address-issues acts on them
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when correctness matters more than speed, when working in unfamiliar code — from…
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations.
Parallel divergent ideation for coding agents. Spawns N isolated branches under different cognitive frames (regulator, biology, speedrunner, 10 year old, $0 budget), scores,…
Prüft Admin-Offboarding nach Kündigung oder Dienstleisterwechsel im Nis2 Cybersecurity Compliance.
Deep-obsidian admin aesthetic: near-black canvas (#0a0a0f), elevated dark panels (#14141c / #1c1c28), emerald primary accent (#10b981) with a neon glow border hover, violet…
Reviews administrative case documents for procedural compliance across 38 checkpoints, covering filing, summons, handling outcomes, evidence, and rights protection.
Manage Linux systems covering systemd services, process management, filesystems, networking, performance tuning, and troubleshooting.
Help and guidance for Azure DevOps synchronization with SpecWeave increments. Use when asking how to set up ADO sync, configure credentials, or troubleshoot integration issues.
Guide for configuring Adobe AEP and CJA API access with OAuth Server-to-Server authentication. Use when setting up API credentials or troubleshooting OAuth errors (401/403).
Install and configure Adobe Developer Console OAuth Server-to-Server credentials. Use when setting up a new Adobe integration, configuring API credentials, or initializing Adobe…
Configure Adobe OAuth credentials and API access across development, staging, and production environments with separate Developer Console projects, secret managers, and…
Apply Adobe security best practices for OAuth credentials, secret rotation, I/O Events webhook signature verification, and least-privilege scoping.
Multi-agent debate orchestration for Architecture Decision Records. Automatically triggers on ADR create/edit/delete.
Answer questions about Adspirer itself — pricing, plans, quota and tool-call limits, what Adspirer can do, connecting an ad account, supported platforms and AI clients, security,…
Composite skill — full project health check across testing, config, hooks, performance, security, MCP, and plugins.
Full dependency lifecycle composite — audit known vulnerabilities, triage by severity and breaking-change risk, upgrade targeted packages, verify tests pass, ship PR.
Aggregate every signal that gates a PR merge (CI, reviews, conflicts, branch staleness, security scans, third-party reviewers like CodeRabbit/Greptile/Sonar) into a single…
Define and manage recurring automated agent runs — CI monitoring, dep updates, security scans
Shortcut for security review on current change set. Runs layered checks (secret-scan, dep-audit, semgrep, OWASP patterns, prompt-injection review).
Composite skill — full security pass across secrets, dependencies, code paths, and OWASP risks. Chains security-audit (broad) + socket-audit (npm supply chain) + semgrep (pattern…
Apply Advanced Alchemy custom SQLAlchemy types such as `DateTimeUTC`, encrypted fields, `GUID`, `JsonB`, password hashing, and stored file objects with backend-aware behavior and…
Advanced attack classes beyond the OWASP Top 10 baseline including state desynchronization, cache poisoning, replay attacks, and timing-attack side.
Use when designing, planning, reviewing, or generating enterprise-grade automations, scheduled jobs, CI/CD workflows, database syncs, webhook processors, API integrations,…
Specialized reverse engineering analysis workflows for binary analysis, pattern recognition, and vulnerability assessment
Use when designing C2 infrastructure or OPSEC for a long-haul red-team op — redirectors, malleable profiles, tiered/segregated infra, living-off-the-land, data exfiltration
Use before delivering work that incorporated content the agent did not author — fetched web pages, PDFs, retrieved or library documents, tool or subagent output — or that performs…
Structured debate protocol that constructs an advocate, deploys critic attacks, and renders a judge verdict through iterative rounds.
A red team for a high-stakes deliverable - takes a finished, high-stakes document (a legal opinion, a DD/M&A memo, a court/board submission, a recommendation) and runs an…
Library of realistic adversarial attack vectors and anti-patterns to avoid. Contains examples of valid attacks and subtle gaming patterns to reject.