1.3K skills · sorted by relevance
Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using AzureAD PowerShell, Microsoft Graph API, and ScoutSuite.
The English summary is being prepared. Showing the original description.
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
The English summary is being prepared. Showing the original description.
Scan, structure, validate, and submit your project to the Next Level Builders Directory (https://nextlevelbuilder.io) with 17 rich blocks, cryptographic content hashing, Polar payment handling, and automated moderation queueing.
The English summary is being prepared. Showing the original description.
BloodHound is a graph-based Active Directory reconnaissance tool that uses graph theory to reveal hidden and unintended relationships within AD environments. Red teams use BloodHound to identify attac
The English summary is being prepared. Showing the original description.
Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1 vulnerability to request certificates as high-privileged users and escalate domain privileges during authorized red team assessments.
The English summary is being prepared. Showing the original description.
Deploys deception-based honeytokens in Active Directory including fake privileged accounts with AdminCount=1, fake SPNs for Kerberoasting detection (honeyroasting), decoy GPOs with cpassword traps, and fake BloodHound paths. Monitors Windows Security Event IDs 4769, 4625, 4662, 5136 for honeytoken interaction. Use when implementing AD deception defenses for detecting lateral movement, credential theft, and reconnaissance.
The English summary is being prepared. Showing the original description.
Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. Covers Tier 0/1/2 separation, privileged access workstations (PAWs), administrative f
The English summary is being prepared. Showing the original description.
Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using AzureAD PowerShell, Microsoft Graph API, and ScoutSuite.
The English summary is being prepared. Showing the original description.
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
The English summary is being prepared. Showing the original description.
Audit Claude Code configuration with AgentShield to find exposed secrets, excessive permissions, unsafe hooks, and prompt injection risks, where malicious instructions influence an agent. Generate reports, apply supported automatic fixes, or create a security-focused starter configuration.
Build and organize Claude Code plugins with guidance on directory layout, configuration files, commands, agents, skills, and hooks. Learn how automatic component discovery works and how to reference bundled files across different installation locations.
Remove the directory editing boundary set by `/freeze` so work can continue across all directories without ending the session. The existing freeze hooks remain registered, and `/freeze` can be used again to restore a boundary.
Turn a vague request into a precise specification through five phases and file it as a GitHub issue. Optionally start a Claude Code agent in a separate working directory to begin implementation.
Limit file edits to a chosen directory and block Edit, Write, and NotebookEdit operations outside it. Keep debugging or module changes within scope, with the restriction remaining active until explicitly removed.
Launch the Understand Anything web dashboard to explore an existing codebase knowledge graph, a map of its structure and relationships. Open the current project or a specified directory and receive the local access URL.
Document a project's structure, commands, and specific conventions in a hierarchy of AGENTS.md files. Analyze directory complexity to choose useful locations, update existing guidance, and check that child files avoid repeating their parents.
Test the Senpi adapter and task engine against the real senpi binary in an isolated environment. Check task and team behavior, record evidence in a consistent location, and verify that the existing agent directory remains untouched.
Set up a Python environment inside the project and install its packages. Follow existing environment tools when present, avoid changing the system Python, and provide commands that work from a fresh shell.
Plan large sets of search-focused pages using templates and data. The skill helps assess keyword demand, design useful page variations, organize internal links, choose a publishing platform, and check quality before launch.
Plan press outreach for software products, develop story angles, and prepare pitches, press materials, and podcast briefs. The skill also guides crisis communications, including initial statements and responses to breaches or outages.
Delegate a bounded task to the local OpenClaw main agent without opening an interactive interface. Run it in an authorized directory, read its structured response, and check for reported errors or timeouts.
Create and organize Claude Code plugins with guidance on configuration files, commands, agents, skills, hooks, and MCP servers. Learn where components belong, how automatic loading works, and how to reference files across different installation locations.
Trace movement between Windows hosts in a CTF sandbox using credentials and Kerberos tickets, which carry authentication information. Connect recovered artifacts to the service that accepted them and document the resulting access or privileges.
Investigate Active Directory Certificate Services in an isolated CTF competition environment. Trace certificate templates and enrollment rights through issuance, identity mapping, and service acceptance to explain resulting privileges and document a minimal reproducible chain.