Skill UI

Guides SOC analysts through triaging Splunk ES notable events by prioritizing queues, investigating context, correlating telemetry, enriching with threat intelligence, and documenting disposition for escalation or closure.

Deploy deception-based Active Directory honeytokens—fake privileged accounts, SPNs, decoy GPOs and BloodHound paths—to detect Kerberoasting, lateral movement, credential theft and other reconnaissance activity via monitored Windows Security events.

Detects and prevents injection attacks targeting serverless functions by combining static analysis, event mapping, runtime behavior monitoring, and IAM auditing so SOCs can spot poisoned triggers, malicious layers, and privilege escalations across Lambda, Azure, and GCP environments.

Deploys Cilium Tetragon-based eBPF tracing to watch processes, network, file access, and enforce runtime policies while streaming JSON events to SIEM pipelines for Linux hosts or Kubernetes clusters.

Safety Guard prevents destructive operations on production systems or during autonomous agent runs by intercepting risky commands, restricting write access to specified directories, and combining both protections when needed.

Deletes the entire context-mode knowledge base plus session events, analytics, and stats for this project; trigger `/context-mode:ctx-purge` and run `mcp__context-mode__ctx_purge` with confirmation for a clean slate.

Prevents silent decimal mismatches across EVM chains by querying runtime decimals, caching per chain/token, and normalizing balances for bots, dashboards, and DeFi tooling.

Operates an ECC-native notification workflow that captures scattered events from GitHub, Linear, hooks, desktop alerts, and communication surfaces, then classifies, routes, deduplicates, and surfaces operator actions.

Automate Amplitude product analytics by orchestrating Composio's Rube MCP toolkit to send events, resolve user activity, manage cohorts, and sync identities while always querying RUBE_SEARCH_TOOLS for current schemas.

This skill helps developers accurately find and explore the correct Windows API for specific platform capabilities, such as file access, camera usage, notifications, or UI controls. It searches a comprehensive local cache of WinMD metadata, providing full technical details including methods, properties, events, and enumeration values for APIs sourced from the Windows Platform SDK and WinAppSDK. It is indispensable when building complex features requiring deep integration with the Windows operating system.