Skill UI

This tool traces the entire downstream dependency chain from a core semantic model to all connected reports and assets across multiple Fabric workspaces. Use it for crucial impact analysis before modifications, auditing model usage, or mapping cross-workspace data dependencies. It helps data stakeholders understand the full scope of influence a model has on the reporting layer.

A comprehensive guide for managing the entire lifecycle of tabular data models (Semantic Models) in Power BI/Analysis Services. It provides best practices and a tool cascade (CLI, TOM, TMDL) for designing, building, optimizing, refreshing, and auditing models. Use this skill when performing advanced model operations, optimizing performance, or ensuring data quality.

This技能 is used when analyzing complex propositions, debating, or reviewing arguments within the CrossFrame Suite. It helps users deconstruct claims into testable arguments, identifying hidden premises, strongest counterarguments, evidence requirements, and conditions for withdrawal, ensuring conclusions are robust and non-judgmental.

This skill generates comprehensive, production-ready database schema documents. It covers Entity-Relationship (ER) diagrams, detailed SQL DDL definitions, constraint analysis, index strategies, and access pattern optimization. Use it when designing a new database, documenting an existing one, or modeling complex data relationships for engineering review.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.

A comprehensive guide detailing the structured process for responding to phishing incidents. It covers email header analysis, malicious content sandboxing (URLs/attachments), scoping the impact across the organization, and performing thorough remediation, including mailbox purging and credential reset.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

Plaso (log2timeline) is an open-source engine used to generate forensic super-timelines. This skill guides the process of normalizing hundreds of diverse artifact types—including MACB times, registry keys, EVTX logs, and browser history—into a single, cohesive chronological view. The workflow covers extraction, filtering, and importing the timeline into Timesketch for collaborative analysis, which is crucial for incident response, correlating complex activity chains, and detecting anti-forensic techniques like timestomping.

Provides a comprehensive workflow and tooling (GuardDog) to triage npm packages and dependency trees for signs of malicious activity. It focuses on static analysis of install scripts, detecting credential exfiltration, reverse shells, and worming behavior, thereby safeguarding against software supply-chain attacks.

This skill detects malicious, misspelled, or brand-jacked package names (typosquatting) across major ecosystems (npm, PyPI, crates.io). It uses advanced techniques like edit-distance and keyboard-proximity analysis, powered by tools like typomania and OSSGadget, to flag potential supply chain attacks *before* a dependency is installed. It is essential for implementing robust CI/CD security gates and proactive dependency screening.

A comprehensive guide for threat hunting and detection engineering focused on identifying SSO and OAuth token abuse. It detects 'pass-the-cookie' and session replay attacks where attackers use stolen tokens (like cookies or refresh tokens) to move laterally across federated SaaS platforms (Entra ID, Okta) without needing credentials. Essential for post-incident scope analysis and validating T1550.001 coverage.