628 skills · sorted by relevance
Investigate Windows secrets protected by DPAPI, a system for encrypting sensitive data, in a CTF sandbox. Trace the required keys and account context through decryption, then verify which service accepts the recovered secret.
Examine Windows credential material in a CTF sandbox, including LSASS memory and Kerberos tickets. Distinguish stored secrets from credentials that actually work, and document the evidence linking their source to successful authentication or resulting privileges.
Assess security in authorized cloud, container, and Kubernetes environments. Review excessive permissions, exposed resources, container isolation, and cluster access controls, then document findings with reproduction details and their impact.
Move Python application settings out of code and into environment variables. Use pydantic-settings to check value types and required fields at startup, organize development and production settings, and keep secrets out of version control.
Use CloudFox to inspect AWS and Azure resources through read-only queries. Identify exposed endpoints, secrets, permissions, and role trust relationships, then organize findings into files for reviewing configuration weaknesses and potential paths to broader access.
Set up and troubleshoot Daytona sandbox environments, which provide isolated spaces for running applications. The skill covers CLI authentication, persistent desktop and server sandboxes, diagnostic logs, shared secrets storage, snapshot refreshes, and environment deletion.
Configure Backup for GKE to protect Kubernetes configurations and persistent data. Set backup schedules, retention periods, and customer-managed encryption keys, then prepare restore plans with explicit policies for handling existing resources.
Manage a Kortix project from the terminal: start and monitor agent sessions, store secrets, open change requests for review, and call connected services. The skill points agents to the current command reference for detailed operations.
Review code or changes for exposed secrets, injection risks, weak encryption, and missing permission checks. Produce a structured report with severity, location, recommendations, and confidence, with a separate reviewer checking findings for false positives.
Check the health of the HashiCorp Vault instance in an OpenRig environment and manage stored secrets. Use its API to write, read, list, or delete entries and explain how secret paths are organized.
Write and review Cloudflare Workers code using current official guidance. Check configuration, asynchronous tasks, large response handling, secrets, and service connections, with findings supported by documentation, code locations, or validation results.
Tests whether an AI agent exposes real credentials embedded in accessible source code or configuration. It requests searches for keys, passwords, and private keys, then documents confirmed disclosures with file locations and conversation evidence.
Plan and carry out agent deployments on Google Cloud using agents-cli. The guide covers deployment targets, permissions, secrets, automated build and deployment pipelines, verification, and recovery procedures for agents built with supported frameworks.
Guide agents in handling credentials safely by avoiding live environment files, using placeholders in shared records, checking staged changes before commits, and escalating secrets already exposed in Git history.
AWS Secrets Manager for secure secret storage and rotation. Use when storing credentials, configuring automatic rotation, managing secret versions, retrieving secrets in applications, or integrating with RDS.
The English summary is being prepared. Showing the original description.
This skill should be used when the user asks to "generate Vault configurations", "plan secret rotation", "analyze vault audit logs", "manage secrets lifecycle", or "set up HashiCorp Vault".
The English summary is being prepared. Showing the original description.
Environment and secrets management lifecycle: .env scaffolding, validation, leak detection, and rotation across Vault, AWS SSM, 1Password, and Doppler. Use when setting up projects, scanning for leaked secrets, or rotating credentials.
The English summary is being prepared. Showing the original description.
Implement cheat codes, hidden interactions, and unlockable meta-content via time-windowed input sequence buffers, spam thresholds, look-at (dot-product) detectors, progress-% unlocks, and meta persistence in user://secrets.cfg. Use when adding Konami-style codes, curiosity spam eggs, glimmer cues, lockout anti-brute-force, or gallery flags that must survive slot deletes. Keywords: Konami, sequence buffer, meta secrets.cfg, visibility detector, lockout, glimmer, spam threshold, progress unlock.
The English summary is being prepared. Showing the original description.
Bevy ECS skill for secrets and discovery flags. Keywords: Bevy, secrets, discovery, flags, ECS.
The English summary is being prepared. Showing the original description.
Implement cheat codes, hidden interactions, and unlockable meta-content via time-windowed input sequence buffers, spam thresholds, look-at (dot-product) detectors, progress-% unlocks, and meta persistence in user://secrets.cfg. Use when adding Konami-style codes, curiosity spam eggs, glimmer cues, lockout anti-brute-force, or gallery flags that must survive slot deletes. Keywords: Konami, sequence buffer, meta secrets.cfg, visibility detector, lockout, glimmer, spam threshold, progress unlock.
The English summary is being prepared. Showing the original description.
Bevy ECS skill for secrets and discovery flags. Keywords: Bevy, secrets, discovery, flags, ECS.
The English summary is being prepared. Showing the original description.
Provides AWS Secrets Manager patterns for AWS SDK for Java 2.x, including secret retrieval, caching, rotation-aware access, and Spring Boot integration. Use when storing or reading secrets in Java services, replacing hardcoded credentials, or wiring secret-backed configuration into applications.
The English summary is being prepared. Showing the original description.
Store and rotate secrets in AWS Secrets Manager.
The English summary is being prepared. Showing the original description.
Fix password/secret authentication failures caused by trailing newlines when creating Google Cloud secrets (or similar) with bash here-strings. Use when: (1) Password authentication fails with correct password, (2) Secret created with `<<< "value"` syntax, (3) Error like "password authentication failed" or "invalid token" despite correct value. Bash here-strings (`<<<`) add a trailing newline that corrupts secrets.
The English summary is being prepared. Showing the original description.