home-assistant
Guidance for Home Assistant configurations. Use when writing automations, dashboards, or service calls for HA.
Essential command-line tools and system utilities.
Guidance for Home Assistant configurations. Use when writing automations, dashboards, or service calls for HA.
Conduct phishing campaigns, credential harvesting, pretexting, and social engineering attacks using tools like Gophish, SET, and custom techniques. Use when performing social engineering assessments or red team engagements.
Complete guide for Gray Swan MITM challenges across all waves. Includes AI agent profiling, defense bypass strategies, domain-specific handling, and platform troubleshooting. Use for ANY Gray Swan MITM challenge.
Crack password hashes using hashcat/john, perform password spraying, brute force authentication, and execute pass-the-hash attacks. Use when cracking credentials or performing password-based attacks.
Deploy Flask server to remote machine (185.96.221.52). Stops remote server, copies files via scp, restarts server, and verifies. Use when deploying Python server updates to remote Mac mini.
Manage tri-tier agent memory (hot/warm/cold) with event consolidation and weekly cleanup. Use for memory updates after completing tasks.
Escalate privileges on Windows systems using service misconfigurations, DLL hijacking, token manipulation, UAC bypasses, registry exploits, and credential dumping. Use when performing Windows post-exploitation or privilege escalation.
Instructions for building and restarting the AutomateLinux daemon.
WSL2 system health checks and Windows-specific hardening operator kernel for SYSopGPTWSL: run a repeatable sysop pipeline (preflight, WSL healthcheck, drift check, Windows snapshot via PowerShell, perf bench), produce a diffable report, and append evidence to `learn/LEDGER.md`. Use for sysop/health checks, drift/baseline verification, or when debugging Windows/WSL interop pitfalls (UNC cwd, UTF-8 BOM in PowerShell JSON, `/mnt/c` performance) and for Windows-side hardening/performance signals (power plan, power throttling, storage/volume inventory, WSL status/version). Use Plan-first execution and explicit verification reporting.
Use picocom to interact with IoT device UART consoles for pentesting operations including device enumeration, vulnerability discovery, bootloader manipulation, and gaining root shells. Use when the user needs to interact with embedded devices, IoT hardware, or serial consoles.
SSH key lifecycle management. Create, deploy, rotate, and revoke SSH keys with full tracking. Use when asked about: ssh keys, manage ssh, create ssh key, deploy key, ssh config, key rotation, ssh access, authorized_keys, ssh audit, which keys, ssh inventory.
Use telnet to interact with IoT device shells for pentesting operations including device enumeration, vulnerability discovery, credential testing, and post-exploitation. Use when the user needs to interact with network-accessible shells, IoT devices, or telnet services.
Manages watcher processes that monitor Gmail, WhatsApp, filesystem, and other external sources. Use when starting, stopping, or monitoring watcher scripts, configuring process management, or troubleshooting watcher issues.
Test MCP server connectivity and tool execution. Use when adding new MCP servers, debugging tool integration, or verifying tool availability. Supports stdio, http, and sse server types.
Configure Amp's permissions -- allowing, rejecting, or asking for tool invocations in Amp. Activates with phrases like "reject using this tool", "I want to modify the tool permissions", or "change Amp's permissions".
Records a handoff to another agent role within a session.
Operate macOS desktop UI via the desktop-ops CLI using the snapshot/ref/action workflow. Use when an agent needs to read UI state with `desktop-ops snapshot --json`, select refs, and execute `click`, `set-value`, `focus`, `press`, or `run` a recipe JSON.