Skill UI

Evaluates a project’s dependencies for indicators of exploitation risk such as unmaintained code, single maintainers, high-risk features, missing security contacts, or past CVEs, guiding pre-engagement scoping and reporting to highlight high-risk components.

Performs a full GEO audit of any website by discovering business type, crawling prioritized pages, and delegating parallel subagents to evaluate AI visibility, platform readiness, technical infrastructure, EEAT content, and schema markup, then outputs a composite GEO score with prioritized actions.

Expert guidance for private, offline local LLM inference: selecting optimal quant formats (GGUF, EXL2, AWQ), sizing VRAM/RAM, and running models with Ollama, llama.cpp, vLLM or LM Studio while keeping privacy-first deployments secure.

Automated Terraform infrastructure scanning combines Checkov, tfsec, Terrascan, and OPA/Rego policies to catch misconfigurations such as permissive IAM, public exposure, or missing encryption before deployment, fitting CI/CD and compliance workflows.

Collects and synthesizes passive OSINT about threat actors, malicious infrastructure, and attack campaigns using sources like Maltego, Shodan, SpiderFoot, and security registries to support phishing investigations, infrastructure reconnaissance, or enrichment of CTI profiles.

Implements UEBA using Elasticsearch/OpenSearch to normalize authentication, file, and network logs, establish behavioral baselines, calculate anomaly scores through deviation and peer-group analysis, and correlate indicators into SOC-ready alerts for insider threat detection.

Automates SSL/TLS certificate lifecycle tasks—CSR generation, issuance, deployment, monitoring, renewal via ACME, and revocation checks—so organizations can keep certificates healthy across infrastructures and prevent outages.