Skill UI

Extracts adversary behaviors from CTI reports, maps them to MITRE ATT&CK IDs, and compiles STIX-based attack-pattern records so defenders can query tactics/techniques and generate detection templates.

Provides structured templates for malware incident notifications, executive briefings, technical advisories, and regulatory disclosures, ensuring severity-based escalation and consistent messaging across stakeholders during response efforts.

Exploit misconfigured Active Directory Certificate Services ESC1 templates to request certificates as privileged users, then escalate to Domain Admin during authorized red team or pentest work. Includes enumeration, certificate requests, PKINIT authentication, and follow-on domain access.

Generates structured finished intelligence products across strategic, operational, tactical, and flash formats with templates, TLP controls, and tailored messaging for executives, security leaders, and analysts when turning raw collection into actionable reporting.

This guide details the implementation of Delinea Secret Server for robust Privileged Access Management (PAM). It covers infrastructure deployment (IIS, SQL Server), configuring secret templates, automating the onboarding of credentials, and establishing centralized vaulting for sensitive accounts. It is essential for organizations needing to meet compliance mandates (SOX, PCI-DSS) by eliminating plaintext credentials and automating password rotation.

Use OPA Gatekeeper as a Kubernetes admission controller to enforce policy-as-code via ConstraintTemplates, Rego rules, and Constraints so clusters validate, mutate, or deny workloads that violate organizational standards.

Guides deploying Rapid7 InsightVM Security Console, pairing Scan Engines, defining templates, configuring credentialed scans, and integrating Insight Agents to automate authenticated and unauthenticated vulnerability detection across enterprise assets.

Generates LaTeX paper sections from a detailed outline, orchestrating venue-specific templates, reviewer model checks, bibliography lookup, and figure inputs so researchers can iteratively draft camera-ready-ready manuscripts without manual formatting.

This skill automates the execution of red team phishing campaigns using the Python gophish library. It enables users to create sophisticated email templates with tracking pixels, configure SMTP profiles, import target lists from CSV, and launch full-scale simulations. The system tracks key metrics, including open rates, click rates, and submitted credentials, providing essential data for security awareness training and vulnerability assessments.

Defines best practices for securing Helm chart deployments: verifying chart provenance, scanning rendered templates for misconfigurations, enforcing security and RBAC contexts, and managing secrets during Helm releases in Kubernetes.

Spawn N parallel subagents in isolated git worktrees to tackle the same session task concurrently, using optional templates with dispatch prompts for optimizer, refactorer, test-writer, or bug-fixer strategies.

Guides developers to wrap Feishu API calls into reusable lark-cli skills, covering API research, command templates, and best practices for authentication, permissions, and orchestration.