Results for “relay”

Human-in-the-loop CAPTCHA solving with two modes: screenshot (default, zero infrastructure) and token relay (requires network access). Screenshot mode captures the page with a grid overlay, sends it to the human, and injects clicks based on their reply. Token relay mode detects CAPTCHA type + sitekey, serves the real widget on a relay page for native solving, and injects the token via CDP.

The English summary is being prepared. Showing the original description.

Design a connection that turns GenLayer agent reviews into changes to ERC-7710 delegated permissions. Define decision messages, relay paths, EVM controls, trust assumptions, and tests for revoking authority or tightening its limits.

• Connect agent reviews to delegated permission revocation
• Choose a relay approach for a prototype
• Design decision messages and EVM controller interfaces

Assess mail server security by checking unauthorized relaying, exposed user accounts, weak authentication, encryption, and sender verification records. This skill guides SMTP testing and helps organize findings into an assessment report with practical configuration improvements.

• Check whether a mail server permits unauthorized relaying
• Assess exposure of user accounts and weak authentication
• Review TLS and SPF, DKIM, and DMARC settings

Use this skill when first-time NeMo Relay users want to try Relay, choose the least-complex supported quick start, or verify initial value through the CLI, a maintained integration, or direct Python, Node.js, or Rust instrumentation before production setup.

The English summary is being prepared. Showing the original description.

Use when you need Codex to coordinate multiple agents through Agent Relay for peer-to-peer messaging, lead/worker handoffs, or shared status tracking across sub-agents and terminals.

The English summary is being prepared. Showing the original description.

Use when writing agent-relay workflows that must fully validate features end-to-end before merging. Covers the 80-to-100 pattern - going beyond "code compiles" to "feature works, tested E2E locally." Includes repair-before-failure validation gates, review-depth fresh-eyes review/fix loops with test hardening, PGlite for in-memory Postgres testing, mock sandbox patterns, test-fix-rerun loops, verify gates after every edit, and the full lifecycle from implementation through passing tests to commit.

The English summary is being prepared. Showing the original description.

Session relay — compresses what's been done so far (writes a one-liner for /compact) and generates a "next task" prompt (a baton) for the user to hand off. Use on requests like "relay / hand off / next session / continue after compact / baton / handoff / clean up context and continue next task." Does not run /compact itself (a skill cannot do that) — it produces the one-liner the user pastes in.

The English summary is being prepared. Showing the original description.

Fix NDK (Nostr Dev Kit) operations hanging indefinitely when relay connections stall. Use when: (1) App freezes during fetchEvents or publish calls, (2) No timeout errors despite network issues, (3) Relay connection appears stuck, (4) Using NDK with unstable or slow relays. NDK operations have no built-in timeout - wrap with Promise.race.

The English summary is being prepared. Showing the original description.

Identify and exploit SMTP Open Relays. This skill teaches how to test mail servers to determine if they process email delivery regardless of the sender or recipient domain, enabling attackers to spoof internal addresses and bypass basic anti-phishing controls.

The English summary is being prepared. Showing the original description.

Active Directory and network lateral movement assessment. Pass-the-hash, pass-the-ticket, Kerberoasting, AS-REP roasting, NTLM relay, SMB relay, WMI/WinRM/PSRemoting abuse, constrained/unconstrained delegation, RBCD, cross-trust exploitation, and pivoting. Uses impacket, netexec, enum4linux-ng, smbmap, smbclient, bloodhound-python, Responder, ntlmrelayx, mitm6, and ldap-utils. Chains from /post-exploit or /credential-audit.

The English summary is being prepared. Showing the original description.

Detect NTLM relay attacks through Windows Security Event correlation by analyzing Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB and LDAP signing enforcement across the domain, and detecting NTLM downgrade attacks from NTLMv2 to NTLMv1 using event log analysis.

The English summary is being prepared. Showing the original description.

Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer across MS-RPRN, MS-DFSNM, and MS-FSRVP to feed NTLM relay into AD CS Web Enrollment (ESC8) and other relay targets.

The English summary is being prepared. Showing the original description.

Detect NTLM relay attacks through Windows Security Event correlation by analyzing Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB and LDAP signing enforcement across the domain, and detecting NTLM downgrade attacks from NTLMv2 to NTLMv1 using event log analysis.

The English summary is being prepared. Showing the original description.

Detect NTLM relay attacks through Windows Security Event correlation by analyzing Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB and LDAP signing enforcement across the domain, and detecting NTLM downgrade attacks from NTLMv2 to NTLMv1 using event log analysis.

The English summary is being prepared. Showing the original description.

Route requests from OpenClaw to external coding agents such as Claude Code or Cursor. Start or continue sessions using ACP, a protocol for connecting agents, or relay prompts directly through acpx while preserving conversation context.

• Starting a Claude Code session in a thread
• Continuing work with an external coding agent
• Relaying prompts directly through acpx

Set up Havoc infrastructure for authorized attack simulations, including its command server, traffic listeners, Nginx relay servers, and Windows agents. The skill also covers communication profiles and operational precautions for running the infrastructure.

• Preparing Havoc infrastructure for an authorized exercise
• Reviewing server and traffic relay separation
• Configuring communication profiles for an exercise

Deliver knowledge-page updates with links derived from Git paths and checked after pushing. Use defined alternatives for local repositories, rewrite paths relayed by other agents, and keep links between pages relative to preserve their connections.

• Include verified page links in completion messages
• Investigate page links that return a 404 error
• Rewrite local paths returned by other agents for delivery

Guide embedding Zoom Virtual Agent in an Android WebView, a browser view inside an app. Covers communication with Java or Kotlin, URL routing, support handoff events, and embedding that accounts for the WebView lifecycle.

• Embedding Zoom Virtual Agent in an Android app
• Receiving JavaScript callbacks in Java or Kotlin
• Routing links from a WebView to native app handling

Guide changes to cmux CLI and socket commands with rules for thread use, app focus, and remote relay authorization. It helps keep frequent status updates off the main thread and preserve focus during background automation.

• Review thread handling for new socket commands
• Keep automated operations from stealing app focus
• Check focus behavior when opening panes or workspaces

Organize authorized phishing exercises from sending infrastructure and email scenarios to landing pages and reporting. Uses GoPhish campaign tracking to review opens, clicks, and submissions while assessing employee awareness and email security controls.

• Planning an authorized phishing exercise
• Preparing sending infrastructure and landing pages
• Reviewing email, QR code, and callback scenarios

Review lateral movement, the ways access spreads between systems, during authorized security tests. Covers credential reuse, remote execution, network tunnels, prerequisites, and the logs or defensive controls associated with each technique.

• Compare lateral movement methods for an internal penetration test
• Plan tunnels across segmented networks
• Review detection logs and controls for lateral movement

Plan and configure command and control (C2) systems for red team exercises. Covers major frameworks, communication methods, relay servers, certificate management, and the network or endpoint signals defenders use to detect these systems.

• Compare C2 frameworks for a red team exercise
• Plan communication methods and relay infrastructure
• Review C2 detection signals from a defender's perspective

Assess GraphQL APIs during penetration tests, from finding endpoints and mapping data structures to checking access controls, query limits, subscriptions, and uploads. Includes example queries, guidance for testing tools, and defensive controls for interpreting findings.

• Map GraphQL endpoints and data structures
• Check access controls across users and roles
• Review query limits and subscription security

Build JavaScript or TypeScript apps that interact with NEAR. This skill guides token transfers, smart contract calls, account and key management, transaction signing, and message authentication through near-api-js v7 examples.

• Adding NEAR and token transfers to an app
• Reading and updating smart contract data
• Managing account keys and access permissions