스킬 찾기

Helps build AI agents in .NET with persistent conversation threads. Covers messages, execution status, streaming responses, document search, and custom function calls using Azure.AI.Agents.Persistent, with examples for creating agents and cleaning up resources.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build an AI assistant that retains conversation threads
• Answer questions using uploaded documents
• Connect an agent to custom functions

Build Python AI applications on Microsoft Foundry with azure-ai-projects. Provides examples for creating agents, connecting tools, managing conversations and project resources, and running evaluations through Foundry and OpenAI-compatible clients.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build an agent that searches uploaded documents
• Implement conversation threads and response handling
• List model deployments and project connections

Integrate Microsoft Graph SDK into .NET, TypeScript/JavaScript, or Python applications to access Microsoft 365 data. Covers authentication, permissions, paginated results, incremental synchronization, change notifications, and retries when requests hit service limits.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building apps that access Microsoft 365 mail and calendars
• Integrating Teams, OneDrive, and SharePoint data
• Synchronizing only data changed since the previous run

Investigate failed Power Automate cloud flows through FlowStudio MCP. Inspect each action’s inputs and outputs, trace incorrect data upstream, fix expression or data issues, and replay a previous run to check the repair.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigate why a cloud flow failed
• Find null values or incorrect field paths in expressions
• Inspect HTTP error response details

Build and update Power Automate cloud flows through FlowStudio MCP, a connection that lets an agent use external tools. The skill guides workflow definitions, service connections, deployment, verification, and testing without opening the Power Automate portal.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Build a recurring flow that sends SharePoint updates to Teams
• Add or change actions in an existing flow
• Build a flow triggered by an HTTP request

Investigate stolen OAuth tokens and their reuse in Microsoft Entra ID through sign-in log analysis. Follow response procedures for revoking sessions and reviewing app permissions, and configure device-bound token protection and session monitoring for Azure and M365 environments.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating anomalous token usage alerts
• Responding to suspected session hijacking
• Finding token reuse in sign-in logs

Simulate device-code and app-consent phishing in an explicitly authorized Microsoft Entra ID environment. Assess whether authentication and consent controls prevent token misuse, map reachable Microsoft 365 resources, and document findings with remediation recommendations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Run authorized Microsoft 365 phishing exercises
• Validate Conditional Access and MFA controls
• Test restrictions on app consent

Find brand materials across connected workplace platforms, rank useful sources, and compile a structured discovery report. Surface brand elements, conflicting guidance, and unanswered questions to support a later review or brand voice guideline document.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding scattered brand guidelines
• Taking inventory of brand materials
• Comparing conflicting style documents

Set up product legal workflows through an interview about company context, review practices, and approval routes. Past launch reviews help establish which risks block release, while connector checks record which tracking and document services actually respond.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up product legal workflows for the first time
• Recording company risk thresholds from past launch reviews
• Updating review practices when onboarding product counsel

Set up a privacy legal plugin through an interview and existing documents. Capture applicable regulations, data processing agreement positions, and privacy impact assessment formats in shared settings, with options to resume setup or recheck integrations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up the privacy plugin for the first time
• Capturing team standards from existing privacy documents
• Resuming or revising an incomplete setup interview

Set up a litigation practice profile through an interview tailored to your role and the side you represent. Record risk preferences, writing conventions, and working context in CLAUDE.md for later litigation tasks, and check available integrations.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up a litigation plugin for the first time
• Tailor practice settings to your role and litigation side
• Update risk preferences and document style

Set up regulatory monitoring by identifying which regulators to follow, what changes deserve attention, and where company policies are stored. The interview builds a watchlist, indexes policies, and checks which external connections actually respond.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create an initial regulator watchlist
• Set thresholds for immediate alerts and weekly digests
• Index company policies and their owners

Turn dispute documents into a sourced timeline by extracting dated events and merging duplicates. It highlights significance for the case, records missing source coverage, and supports updated timelines, factual narratives, and timelines focused on a named witness.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building a dispute timeline from emails and contracts
• Organizing events from disclosed litigation documents
• Preparing a sourced narrative of the facts

Set up a commercial contracts assistant around your team's review standards and approval rules. The interview creates an editable practice profile and can compare stated negotiation positions with terms found in signed agreements.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up a commercial contracts assistant for the first time
• Documenting contract review standards and approval rules
• Comparing stated policies with signed contract terms

Set up a corporate legal practice profile through guided questions about responsibilities, company context, document formats, and review thresholds. Select relevant practice areas, save their settings, and refresh individual modules or check connected services later.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up a corporate legal plugin for the first time
• Saving house formats and review thresholds
• Refreshing settings for one practice area

Route data analysis requests to focused workflows for metric checks, business decisions, charts, dashboards, and reports. Identify usable data sources and guide the next step, with delivery choices based on the available environment.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Choose a workflow for a broad analytics request
• Investigate conflicting metric definitions
• Start an analysis report from uploaded data

Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the 5-stage recon pipeline (seed discovery, asset expansion, enrichment, exposure analysis, reporting), asset-graph discipline with 29 asset types, severity rubric (CRITICAL/HIGH/MEDIUM/LOW/INFO), confidence upgrade workflows, time budgeting, asset-level triage rules, scale-based tactics, identity-fabric mapping (Entra/Okta/ADFS/Google/SAML/M365 Teams+SharePoint+OAuth), API and auth-map methodology, JavaScript deep analysis, mobile attack surface, cloud attack surface, breach×identity correlation, detectability tagging, detection-aware probing (back-off, persona rotation), read-only validator discipline, WAF/CDN bypass + origin discovery, vulnerability prioritization (CVE/EPSS/KEV), phishing infrastructure planning + pretext development, bug bounty submission templates, client deliverable templates with risk translation, threat-actor investigation (incl. RU/CN pivots), cryptocurrency tracing, image/video forensics, chronolocation. Use when planning or executing reconnaissance against authorized targets, mapping an organization's external attack surface, investigating a person/entity, tracing crypto flows, geolocating media, or performing attribution work.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Operational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, curl one-liners for: subdomain enum, GraphQL/Swagger/REST discovery, identity fabric (Entra/Okta/ADFS/Google/SAML/M365 deep — Teams/SharePoint/OneDrive), cloud bucket enum (S3/GCS/Azure), CDN/WAF bypass, origin discovery, vendor fingerprinting (Citrix/F5/Pulse/Fortinet/PaloAlto/Cisco/VMware), CI/CD exposure, 48-pattern secret-scan catalog (AWS/GCP/GitHub/Stripe/Slack/Anthropic/OpenAI/Atlassian/DataDog/npm/PyPI), Postman workspaces, breach correlation (HudsonRock/HIBP/DeHashed/IntelX), TLS/JA3 audit, certificate transparency, JS endpoint extraction, package registry leaks, mobile/APK recon, sat imagery, sector-specific recon (healthcare DICOM, finance SWIFT, ICS/SCADA Modbus/BACnet). Detail content in 15 modular reference files, loaded on demand. Use for any authorized recon: scoping, asset discovery, attack-path mapping, secret triage, severity scoring.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Microsoft 365 / Entra ID red-team attack chain — current 2026 reality. AADSTS code reference, user enumeration vectors (with hardening status), Smart Lockout math, Conditional Access bypass options, ROPC + SAML SSO browser flow, Burp/Playwright templates. Built from authorized red-team work where ROPC spray surfaced pre-existing lockouts and CA-blocked credentials, plus real-time external attacker activity correlation. Use for any M365/Entra credential attack, password spray, user enumeration, CA-bypass exploration, or active-attacker-detection scenario.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hunting skill for xxe vulnerabilities. Built from 10 public bug bounty reports including SVG-upload XXE, Office-doc (PPTX/DOCX) XXE, SOAP XXE, SAML AssertionConsumer XXE, blind OOB XXE via DTD callback, parameter-entity XXE, XXE-to-LFI, XXE-to-SSRF, and XXE-to-RCE chains (Adobe Commerce CosmicSting CVE-2024-34102). Use when hunting XXE on any target — emphasis on OOB-Or-It-Didn't-Happen Gate for blind cases.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hunt Microsoft SharePoint Server (2013/2016/2019/Subscription Edition) on-prem farms — anonymous endpoint enumeration, version disclosure, legacy SOAP login bypass (Authentication.asmx), ToolShell precondition chain (CVE-2025-53770), SafeControl reflection enumeration via Picker.aspx, NTLM Type-2 AD topology disclosure, custom-branding module discovery, EoL farm permanent-CVE-window exploitation, FormDigest anonymous issuance, file-extension blocklist NOT-an-oracle pattern, custom-zone Forms auth bridging on-prem AD. Use when target has SharePoint headers (SPRequestGuid, X-MS-InvokeApp, X-SharePointHealthScore, MicrosoftSharePointTeamServices) or paths (/_layouts/15/, /_vti_bin/, /_api/, /_catalogs/).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-2 challenge capture leaks NetBIOS domain, internal DNS forest, computer name, AD timestamp via AV_PAIRS structure. Default Windows-installer hostnames (WIN-XXXXXXXXXXX pattern) signal lazy provisioning. Use when target advertises `WWW-Authenticate: NTLM` or `Negotiate` headers anonymously.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Hunting skill for auth bypass vulnerabilities. Built from 12 public bug bounty reports across SAML XSW / parser-differential (GitHub Enterprise CVE-2025-25291/25292), SAML signature stripping (Uber, Rocket.Chat, samlify CVE-2025-47949), SAML domain enforcement bypass via control characters (HackerOne 2024), partner-portal cross-IdP assertion reuse (Slack), WordPress XMLRPC bypassing SSO (Uber), JWT alg-confusion HS256/RS256 (Jitsi), JWT signature-validation skip (Linktree, Newspack), and token-audience confusion (Argo CD CVE-2023-22482). For standalone JWT signature/crypto forging (alg:none, key confusion, kid/jku) see hunt-jwt-crypto; this skill covers JWT only inside SSO/SAML/token-trust bypass chains. SAML assertion-layer attacks (XSW, comment injection, signature stripping, XXE-in-assertion) are owned by hunt-saml; this skill owns the broader cross-protocol auth-bypass taxonomy. Use when hunting auth bypass — see the Legacy-Protocol Matrix for branded-UI vs legacy-endpoint patterns.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Skill-set loader for /hunt orchestrator. Fingerprints the target, picks the right platform attack skills, and loads the Red Team or WAPT skill set. Use when /hunt has just received a mode answer (redteam or wapt + blackbox|greybox) and needs to load the appropriate skills and print the taxonomy. Not for direct user invocation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.