windows AI Agent Skills

wpf-high-dpi-analyzer

376

a5c-ai

Analyze and fix WPF applications for high DPI support, per-monitor DPI awareness, and scaling issues

dotnet-clickonce-config

376

a5c-ai

Configure ClickOnce deployment with auto-update, prerequisites, and publish settings for .NET applications

ev-certificate-validator

376

A5c Ai Babysitter Ev Certificate Validator

Validate EV code signing certificate chain and timestamp for Windows SmartScreen

windows-authenticode-signer

376

a5c-ai

Sign Windows executables with Authenticode using signtool, supporting EV and standard certificates

wix-toolset-config

376

a5c-ai

Configure WiX Toolset for Windows MSI installers

nsis-installer-generator

376

a5c-ai

Generate NSIS installer scripts for Windows with custom UI and features

win31-audio-design

43

curiositech

Expert in Windows 3.1 era sound vocabulary for modern web/mobile apps. Creates satisfying retro UI sounds using CC-licensed 8-bit audio, Web Audio API, and haptic coordination. Activate on 'win31 sounds', 'retro audio', '90s sound effects', 'chimes', 'tada', 'ding', 'satisfying UI sounds'. NOT for modern flat UI sounds, voice synthesis, or music composition.

Cross-Platform Build Expert

25

martinholovsky

Expert in building desktop applications for Windows, macOS, and Linux with focus on platform-specific configurations, code signing, and distribution requirements

Privilege Escalation Methods

14

zebbern

This skill should be used when the user asks to "escalate privileges", "get root access", "become administrator", "privesc techniques", "abuse sudo", "exploit SUID binaries", "Kerberoasting", "pass-the-ticket", "token impersonation", or needs guidance on post-exploitation privilege escalation for Linux or Windows systems.

PowerShell Scripting for Security

14

zebbern

This skill should be used when the user asks to "write PowerShell scripts", "automate security tasks with PowerShell", "create PowerShell functions", "work with PowerShell modules", "parse data with PowerShell", or "build security automation scripts". It provides comprehensive PowerShell scripting fundamentals for security professionals.

Active Directory Attacks

14

zebbern

This skill should be used when the user asks to "attack Active Directory", "exploit AD", "Kerberoasting", "DCSync", "pass-the-hash", "BloodHound enumeration", "Golden Ticket", "Silver Ticket", "AS-REP roasting", "NTLM relay", or needs guidance on Windows domain penetration testing.

hunting-for-suspicious-scheduled-tasks

2

mukul975

Hunt for adversary persistence and execution via Windows scheduled tasks by analyzing task creation events, suspicious task properties, and unusual execution patterns that indicate T1053.005 abuse.

performing-lateral-movement-with-wmiexec

2

mukul975

Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.

hunting-for-persistence-mechanisms-in-windows

2

mukul975

Systematically hunt for adversary persistence mechanisms across Windows endpoints including registry, services, startup folders, and WMI subscriptions.

analyzing-malware-persistence-with-autoruns

2

mukul975

Use Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registry keys, scheduled tasks, services, drivers, and startup locations on Windows systems.

hunting-for-registry-persistence-mechanisms

2

mukul975

Hunt for registry-based persistence mechanisms including Run keys, Winlogon modifications, IFEO injection, and COM hijacking in Windows environments.

hunting-for-persistence-via-wmi-subscriptions

2

mukul975

Hunt for adversary persistence through Windows Management Instrumentation event subscriptions by monitoring WMI consumer, filter, and binding creation events that execute malicious code triggered by system events.