Results for “ati”

红队渗透 / 攻防 — 受授权的红队作业者 + 渗透测试工程师 + 攻击型安全顾问的认知操作系统 (侦察 OSINT / 外网渗透 / 内网 AD 渗透 BloodHound + Kerberoasting + ADCS 利用 + 横向移动 / Web 应用渗透 OWASP WSTG / 移动 OWASP MASTG / 云渗透 AWS Azure GCP IAM 路径 + 容器逃逸 + K8s / C2 操作 Cobalt Strike Sliver Mythic Havoc + OPSEC / 初始访问 + AV EDR 绕过 (仅授权场景) / 无线 RF / 物理社工 / 报告与整改 / 框架 MITRE ATT&CK + D3FEND + PTES + OSSTMM + NIST 800-115 + Kill Chain / 法律伦理 CFAA + 网络安全法 + 刑法 285 286 + 数据安全法 + GDPR + 授权书 + 范围 + 交战规则 — 不含 黑产 / 未授权攻击 / 大规模 exploitation / 供应链投毒 / 未授权 DoS — 这是 重罪 + 行业封杀 + 律师吊销, 本 skill 严守 authorized-only 边界 — 也不含 蓝队 SOC + 恶意软件 即服务 / 僵尸网络 / 勒索软件作者 — 这是 cybercrime 不是 红队) (Cybersecurity Red Team / Offensive Security Operations — the cognitive operating system of authorized red team operators, penetration testers, and offensive security consultants covering (a) reconnaissance & OSINT (passive + active discovery, asset surface mapping), (b) external network pentest (perimeter, exposed services, web), (c) internal network / Active Directory pentest (AD enumeration via BloodHound, Kerberos abuse — Kerberoasting / AS-REP-roasting / Unconstrained delegation / S4U2self, NTLM relay, ADCS abuse, GPO abuse, lateral movement, privilege escalation), (d) web application pentest (OWASP WSTG, authentication, authorization, SSRF, XXE, deserialization, SSTI, prototype pollution, GraphQL, JWT, API), (e) mobile pentest (OWASP MASTG, iOS / Android, instrumentation Frida / Objection, MASVS), (f) cloud pentest (AWS / Azure / GCP — IAM enumeration, privilege escalation paths, container escape, K8s RBAC, serverless), (g) C2 operations & post-exploitation (Cobalt Strike / Sliver / Mythic / Havoc, beacon ops, malleable profiles, OPSEC), (h) initial access & evasion (phishing infrastructure, payload development, AV / EDR evasion, BYOVD, AMSI / ETW bypass — strictly for authorized engagements), (i) wireless / RF (WPA2/3, evil twin, Wi-Fi pivots), (j) physical / social engineering (badge cloning, pretexting, vishing — under engagement letter), (k) reporting & remediation (executive summary, technical findings, CVSS, MITRE ATT&CK mapping, retest), (l) frameworks & methodology (MITRE ATT&CK, MITRE D3FEND, PTES, OSSTMM, NIST SP 800-115, OWASP WSTG / MASTG, Cyber Kill Chain, Unified Kill Chain, Diamond Model), (m) law & ethics (CFAA US, Computer Misuse Act UK, 中国 刑法 285/286 + 网络安全法 + 数据安全法, GDPR for tested EU systems, engagement letter, scope, rules of engagement, safe harbor for bug bounty); NOT criminal hacking / 黑产 / unauthorized targeting / mass exploitation / supply-chain compromise / DoS against unconsented systems (这是 重罪 + 业内开除 + 律师执照吊销, 本 skill 严守 authorized-only 边界), NOT pure defensive blue team / SOC analyst tradecraft (是 平行学科, 仅做 边界标注 + ATT&CK 反推方向), NOT malware-as-a-service development / botnet ops / ransomware authoring (是 cybercrime 不是 红队), NOT 'ethical hacking' 在 'just curious 看看' 自我合理化的灰色操作 (违反 authorization 原则即不是 红队).) Master OS — automated mastery of Cybersecurity Red Team / Offensive Security Operations — the cognitive operating system of authorized red team operators, penetration testers, and offensive security consultants covering (a) reconnaissance & OSINT (passive + active discovery, asset surface mapping), (b) external network pentest (perimeter, exposed services, web), (c) internal network / Active Directory pentest (AD enumeration via BloodHound, Kerberos abuse — Kerberoasting / AS-REP-roasting / Unconstrained delegation / S4U2self, NTLM relay, ADCS abuse, GPO abuse, lateral movement, privilege escalation), (d) web application pentest (OWASP WSTG, authentication, authorization, SSRF, XXE, deserialization, SSTI, prototype pollution, GraphQL, JWT, API), (e) mobile pentest (OWASP MASTG, iOS / Android, instrumentation Frida / Objection, MASVS), (f) cloud pentest (AWS / Azure / GCP — IAM enumeration, privilege escalation paths, container escape, K8s RBAC, serverless), (g) C2 operations & post-exploitation (Cobalt Strike / Sliver / Mythic / Havoc, beacon ops, malleable profiles, OPSEC), (h) initial access & evasi

The English summary is being prepared. Showing the original description.

Find the Native SDK guidance needed to build desktop apps with TypeScript and Native markup, a declarative UI format. Covers getting started and locating instructions for interface development, packaging, embedded web content, and running-app automation.

• Start a native desktop app
• Find guidance for building native interfaces
• Explore ways to embed existing web content

Build iOS and Android interfaces with HeroUI Native components such as buttons, cards, text fields, and dialogs. The skill covers setup, documentation lookup, and theme configuration with Uniwind, which brings Tailwind styling to React Native.

• Set up HeroUI Native in an Expo project
• Build mobile cards and input fields
• Configure light and dark themes

Build React Native mobile interfaces for iOS and Android, covering styling, screen navigation, gesture interactions, and animations. The skill guides React Navigation and Reanimated usage, responsive layouts, and performance improvements for mobile components.

• Building React Native screens for iOS and Android
• Implementing screen navigation with React Navigation
• Adding touch gestures and Reanimated animations

Prepare .NET projects for Native AOT, compilation before execution, and trimming, which removes unused code. Use build warnings to guide type annotations, reflection changes, and source-generated JSON serialization, then check all target frameworks.

• Preparing a .NET project for Native AOT
• Resolving IL warnings from trimming analysis
• Adding annotations to reflection code

Read, query, and write WooCommerce product variations correctly — the WC_Product_Variable (parent) vs WC_Product_Variation (child) class split, the parent's get_variation_prices( $for_display ) cached aggregation and how to bust the wc_var_prices_<id> transient, programmatic variation creation via WC_Product_Variation + set_parent_id + set_attributes + save followed by WC_Product_Variable::sync, the inherited-vs-own variation stock model (parent flag, variation flag, derived stock_status), get_available_variations for frontend variation data, and the $for_display tax-handling parameter that breaks display logic when forgotten. Use when scaffolding plugin code that creates / queries / modifies variations or when debugging stale variation data after programmatic writes. Triggers on WC_Product_Variation, WC_Product_Variable, get_variation_prices, get_available_variations, product_variation post type, wc_var_prices, sync_variation, or programmatic variation creation context.

The English summary is being prepared. Showing the original description.

Design and review Java database code using MyBatis and MyBatis-Spring. Covers mapping query results to objects, safe SQL parameters, transactions, pagination, batch writes, and investigating slow or unnecessarily repeated queries.

• Designing mapper interfaces and XML mappings
• Reviewing dynamic SQL and parameter safety
• Checking transactions across multiple updates

Create Native SDK interfaces with .native markup, connecting layouts, widgets, and user actions to app state and messages. Covers TypeScript core integration, explicit Zig alternatives, menus, scrolling, embedded web panes, and interface verification.

• Building screens and connecting them to app state
• Adding context menus and menu-bar items
• Displaying long lists with virtualized rendering

Maintain legacy Java code that uses the deprecated Azure Communication CallingServer SDK. Compare old and replacement dependencies, client classes, and recording examples to plan a migration to Call Automation and identify APIs needing verification.

• Maintain legacy Java CallingServer code
• Compare dependencies and client class names
• Review existing call recording code

Build and improve mobile apps with React Native and Expo using prioritized implementation rules. Covers faster lists, animations, images, navigation, state management, and native dependencies, with explanations and code examples for reviewing common implementation choices.

• Improving long lists and scrolling performance
• Reviewing Reanimated animations and gestures
• Choosing image, navigation, and modal implementations

The craft of producing creative assets that communicate brand, product, and message effectively. Creative communications bridges strategy and execution—translating brand positioning and marketing goals into visual, audio, and interactive experiences that resonate with audiences. This skill covers creative briefing, creative production workflows, asset creation, creative feedback, and cross-channel creative adaptation. Great creative communications amplifies strategy; it doesn't replace it. Use when "creative, creative brief, assets, video, motion, animation, creative production, photoshoot, visual content, creative review, ad creative, creative feedback, creative, production, video, motion, assets, briefs, feedback, visual-content" mentioned.

The English summary is being prepared. Showing the original description.

Global content at the speed of AI. This skill covers the full spectrum of AI-powered localization: translation, cultural adaptation, voice localization, visual adaptation, and the orchestration required to take content from one language/market to 50. Traditional localization is slow, expensive, and creates bottlenecks. AI-powered localization enables simultaneous global launches, personalized content by market, and continuous localization as content evolves. But localization isn't just translation. It's cultural adaptation. It's knowing that colors mean different things in different cultures, that humor doesn't translate, that some messages must be completely reimagined for new markets. Use when "localize, localization, translate, translation, multi-language, international, global, multilingual, market adaptation, cultural adaptation, other languages, different countries, localization, translation, international, global, multilingual, cultural-adaptation, ai-dubbing" mentioned.

The English summary is being prepared. Showing the original description.

Add GraalVM Native Image support to Java applications to build native executables. The skill adapts Maven or Gradle configuration, fixes build errors iteratively, and checks application behavior, startup time, and memory use.

• Adding native executable builds to a Java application
• Configuring native builds for Maven or Gradle
• Fixing reflection and resource errors in native builds

Embed Zoom meetings in React Native iOS and Android apps using @zoom/meetingsdk-react-native. Get guidance on setup, authentication, joining and starting meetings, cleanup, and troubleshooting communication between JavaScript and native SDK components.

• Adding Zoom meeting participation to a React Native app
• Implementing host meeting starts with ZAK
• Investigating iOS and Android setup or native bridge issues

口腔种植 (含 单牙/多牙缺失种植 / 全口 All-on-X / 即刻种植 即刻负重 / 上颌窦提升 / 牙槽嵴骨增量 GBR / 软组织移植 / 数字化种植 (CBCT 设计 + 口扫 + 导板 + CAD-CAM 上部) / 种植体周炎防治 / 种植修复 (基台 + 冠 + 杆卡 + 覆盖义齿) — 不含 普通牙体牙髓 / 正畸 / 儿牙 / 口腔颌面外科肿瘤 / 隐形矫治商业) (implant dentistry — surgical placement and prosthetic restoration of osseointegrated dental implants; covers diagnosis & treatment planning, site preparation (bone augmentation, sinus elevation, soft-tissue grafting), implant placement (delayed / immediate / immediate-loading), provisionalization and final restoration (cement / screw retained, custom abutments, full-arch), digital workflow (CBCT planning, intra-oral scanning, guided surgery, CAD-CAM milled prosthetics), and long-term maintenance including peri-implantitis prevention and treatment; NOT general restorative dentistry, NOT orthodontics, NOT pediatric dentistry, NOT maxillofacial oncology / trauma reconstruction, NOT clear-aligner business.) Master OS — automated mastery of implant dentistry — surgical placement and prosthetic restoration of osseointegrated dental implants; covers diagnosis & treatment planning, site preparation (bone augmentation, sinus elevation, soft-tissue grafting), implant placement (delayed / immediate / immediate-loading), provisionalization and final restoration (cement / screw retained, custom abutments, full-arch), digital workflow (CBCT planning, intra-oral scanning, guided surgery, CAD-CAM milled prosthetics), and long-term maintenance including peri-implantitis prevention and treatment; NOT general restorative dentistry, NOT orthodontics, NOT pediatric dentistry, NOT maxillofacial oncology / trauma reconstruction, NOT clear-aligner business.: top builders' mental models, tool stack, current workflows, jargon, and where to keep up. Trigger this skill when the user works on implant dentistry — surgical placement and prosthetic restoration of osseointegrated dental implants; covers diagnosis & treatment planning, site preparation (bone augmentation, sinus elevation, soft-tissue grafting), implant placement (delayed / immediate / immediate-loading), provisionalization and final restoration (cement / screw retained, custom abutments, full-arch), digital workflow (CBCT planning, intra-oral scanning, guided surgery, CAD-CAM milled prosthetics), and long-term maintenance including peri-implantitis prevention and treatment; NOT general restorative dentistry, NOT orthodontics, NOT pediatric dentistry, NOT maxillofacial oncology / trauma reconstruction, NOT clear-aligner business. problems and wants industry-grade thinking, tool selection, or workflow guidance. 触发词：「种植牙」「种植」「口腔种植」「牙种植」「implant」

The English summary is being prepared. Showing the original description.

Build and modify Native SDK apps with guidance on project structure, configuration, native features, packaging, and testing. Explains the default TypeScript and Native markup approach, plus WebViews, embedded web interfaces, and their permissions.

• Identify where to change an existing app
• Connect a web interface to native features
• Configure permissions for windows and dialogs

Review Windows privilege escalation paths from a standard user session to Administrator or SYSTEM. Examine service permissions, token privileges, library loading, scheduled tasks, and stored credentials, with detection indicators for defensive validation.

• Investigating privilege escalation in authorized Windows assessments
• Reviewing service and scheduled task permissions
• Checking detection coverage with attack and defense teams

Build iOS and Android apps with React Native and Expo. Get guidance and typed component code for navigation, lists, animations, storage, and platform differences, with attention to scrolling performance and testing on both platforms.

• Building mobile screens with React Native and Expo
• Adding screen navigation with Expo Router
• Improving list scrolling and animation performance

Expert in real-time game animation systems including skeletal animation, blend trees, state machines, inverse kinematics, root motion, procedural animation, and animation retargeting. Specializes in creating fluid, responsive character animation that balances visual quality with performance constraints. Use when "animation system, state machine, blend tree, skeletal animation, inverse kinematics, IK system, root motion, animation blending, character animation, animator controller, motion matching, animation retargeting, foot IK, look at IK, aim offset, animation montage, animation notify, additive animation, animation layers, procedural animation, animation, game-dev, character, state-machine, unity, unreal, godot, skeletal, rigging, motion" mentioned.

The English summary is being prepared. Showing the original description.

Structure mobile apps built with React Native and Expo. Covers navigation, state management, device feature integration, offline data synchronization, and performance practices, helping developers organize projects and account for differences between iOS and Android.

• Structuring a new React Native or Expo app
• Designing tabs, authentication screens, and modals
• Planning device integrations and offline synchronization

Configure OAuth 2.0 authorization for web and mobile apps or service communication. Choose suitable flows, implement PKCE to protect authorization codes, limit permissions, and manage token storage, renewal, and revocation with security checks.

• Implement authorization with PKCE for web and mobile apps
• Configure authorization for service-to-service communication
• Review token storage, renewal, and revocation

Audit TLS/SSL, the technology that encrypts network connections, across servers and mobile apps. The skill covers outdated protocols, weak encryption, certificate validation failures, known vulnerabilities, and replay risks, helping organize evidence and prioritize fixes.

• Auditing server protocols, encryption settings, and certificates
• Reviewing certificate validation in mobile apps
• Assessing TLS 1.3 replay risks and mutual authentication

This skill covers formal identification arguments and proofs in structural and reduced-form econometrics. Use when the user needs to prove or formalize that a parameter is identified — including writing identification propositions, stating regularity conditions, deriving rank conditions, or showing observational equivalence fails. Triggers on "identification proof", "identification argument", "identify the parameter", "show identification", "identification condition", "exclusion restriction proof", "rank condition", "order condition", "identification strategy formal", "nonparametric identification", "parametric identification", "local identification", "global identification", "observational equivalence", "identification at infinity", "completeness condition", "regularity conditions", "Rothenberg", "proof of identification", "identification result", "identified parameter", "point identified", "set identified", "partial identification".

The English summary is being prepared. Showing the original description.

The craft of weaving story into interactive systems where the player is both audience and author. This skill covers the unique challenges of game narrative: branching structures that respect player agency, environmental storytelling that rewards exploration, dialogue systems that feel alive, and the delicate balance between authored experience and emergent narrative. Unlike linear media, games don't tell stories TO players - they create the conditions for stories to emerge WITH players. The narrative designer's job is to build the scaffolding that supports infinite player-authored moments while maintaining coherent themes and emotional arcs. This skill synthesizes lessons from Disco Elysium's internal monologue as gameplay, Hades' death-as-narrative-engine, interactive fiction's branching mastery (Inkle, Twine), and procedural narrative pioneers like Dwarf Fortress. It addresses ludonarrative harmony, bark systems, cinematics that respect agency, and the "and therefore" test that separates plot from story. Use when "narrative design, game story, game writing, dialogue system, branching narrative, player choice, environmental storytelling, bark system, quest design, lore delivery, ludonarrative, interactive fiction, inkle, twine, dialogue tree, player agency, cinematic design, voice direction, localization, procedural narrative, narrative, game-writing, dialogue, branching, player-agency, environmental-storytelling, quest-design, voice-acting, localization, interactive-fiction, procedural-narrative, ludonarrative" mentioned.

The English summary is being prepared. Showing the original description.