Skill UI

Automates Webflow CMS, pages, and publishing workflows through Rube MCP’s Composio toolkit, covering collection CRUD, site inspection, asset uploads, and ecommerce order retrieval with the latest schemas.

A robust Python client wrapper for interacting with the Zotero Web API v3. This skill allows users to programmatically manage academic references, including retrieving, creating, updating, and deleting items, collections, tags, and attachments. Ideal for academic researchers building automated workflows, bulk exporting citations (e.g., BibTeX), or integrating Zotero data into larger research applications.

A comprehensive collection of six expert-level, structured workflows designed to elevate AI assistance from ad-hoc querying to repeatable, production-grade engineering practices. Users can evaluate prompts, design RAG architectures, plan context budgets, run security audits, build eval harnesses, and coach product strategy.

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

A comprehensive, structured playbook for Security Operations Centers (SOCs) detailing the entire lifecycle of ransomware incidents. It guides analysts through detection (SIEM queries), triage decision trees, containment (EDR/Firewall), evidence collection, and recovery phases, adhering to NIST CSF and MITRE ATT&CK frameworks.

A comprehensive guide to building automated Indicator of Compromise (IOC) enrichment pipelines within Splunk Enterprise Security. This process integrates multiple external threat feeds (STIX/TAXII, CSV, APIs) into normalized KV Store collections. By correlating these enriched threat indicators against live security events using advanced lookup searches, SOC teams can significantly reduce manual triage time and automatically identify potential security incidents.

This skill provides a comprehensive guide on integrating Cyber Threat Intelligence (CTI) feeds using STIX 2.1 and TAXII 2.1 standards. It demonstrates how to build both consumer and producer capabilities in Python, covering server discovery, polling collections, and parsing complex STIX objects (Indicators, Malware, Threat Actors). Ideal for professionals building SIEM/TIP integrations or advanced security architectures.

Learn how to deploy and configure a TAXII 2.1 server using OpenTAXII and Medallion. This guide covers publishing STIX 2.1 bundles, managing collections for various threat feeds, and integrating the resulting data stream with SIEM/SOAR platforms to automate the exchange of cyber indicators between organizations.

This skill guides the implementation of a full Cyber Threat Intelligence (CTI) program across the six-phase intelligence lifecycle. It covers defining intelligence requirements (PIRs), building collection pipelines, normalizing data, performing analysis, and managing feedback loops. Ideal for maturing existing CTI teams or establishing foundational security intelligence capabilities.

This skill guides the end-to-end management of the Cyber Threat Intelligence (CTI) lifecycle. It covers defining Priority Intelligence Requirements (PIRs), planning data collection, processing data, performing multi-level analysis (Strategic, Operational, Tactical), disseminating tailored reports, and establishing continuous feedback loops to ensure intelligence relevance and maturity.

Guides teams through designing, implementing, and evidencing SOC 2 Type II controls aligned with the AICPA Trust Services Criteria, covering scoping, control mapping, evidence collection, remediation, and audit collaboration for a six- to twelve-month examination.

Skill for implementing Firebase Crashlytics in Flutter apps. Covers fatal/non-fatal error capture, async and isolate exceptions, crash customization with keys/logs/user IDs, symbol upload, opt-in data collection, and debug build disables.