Skill UI

A comprehensive guide and methodology for proactively hunting adversary abuse of legitimate cloud services (Azure, AWS, GCP, SaaS). This technique focuses on identifying Command and Control (C2), data staging, and exfiltration methods that leverage normal cloud functionality, making detection challenging.

This skill guides the implementation of network traffic baselining using historical NetFlow/IPFIX data. It leverages Python's pandas library to compute detailed statistical profiles, including hourly/daily distributions, per-host metrics, and protocol ratios. Anomalies are robustly detected using z-score and Interquartile Range (IQR) methods, assisting SOC analysts in identifying unusual activities like data exfiltration or beaconing.

This guide details comprehensive physical security penetration testing techniques, essential for red teaming engagements. It covers methods such as tailgating, badge cloning (RFID), lock bypassing, and deploying rogue network devices (e.g., Pineapple, LAN Turtle). It provides practical toolkits and MITRE ATT&CK mapping to evaluate an organization's physical and digital control weaknesses.

A comprehensive guide and workflow demonstrating how to use YARA rules for proactive threat hunting. This method helps detect unknown malware, suspicious patterns, and Indicators of Compromise (IOCs) across filesystems, memory dumps, and network artifacts, making it essential for incident response and security analysis.

A specialized tool for formalizing and verifying complex mathematical proofs, particularly in Machine Learning and AI theory. It guides users through structuring theorems, identifying explicit assumptions, performing feasibility triage, and ensuring every logical step is rigorously justified, preventing the fabrication of proofs.

Guides fine-tuning and evaluation of OpenVLA-OFT/OFT+ for robot action generation, covering LoRA adaptation, continuous action heads, FiLM conditioning, and LIBERO/ALOHA benchmarks plus deployment considerations.

Soft Predict Future is a structured foresight engine that triggers whenever the user asks about future outcomes or scenarios. It enforces a nine-step analytical pipeline (validation, signal collection, scoring, driver extraction, etc.), highlights required searches and inputs, and directs the user to web-enabled reasoning for predictive analysis.

This skill provides guidance on implementing common architectural patterns and best practices within the PyTorch framework. It is designed for developers building sophisticated deep learning models, helping to improve structure, efficiency, and code maintainability when working with neural networks.

This tool automates the end-to-end workflow for GDPR Data Subject Access Requests (DSAR). It handles identity verification, discovers PII across structured and unstructured data sources using NER and regex, maps data to Article 15 requirements, and generates auditable compliance reports, ensuring adherence to ICO/EDPB guidelines and scaling compliance efforts.

Provides an expert methodology to significantly reduce AI API spending (40-80%) without sacrificing user quality. The guide covers cost auditing, optimizing existing systems, and designing cost-efficient architectures using techniques like model routing, prompt caching, output length control, and prompt compression.

This skill provides a systematic, four-phase workflow for diagnosing and recovering from AI agent failures. It guides the agent to first capture the failure state, diagnose the root cause (e.g., loop, context overflow, state drift), apply minimal containment recovery actions, and finally generate a detailed introspection report, minimizing the need for human intervention.

A comprehensive guide and function for discovering, searching, and securely installing modular agent skills from an open ecosystem. It helps users identify specialized capabilities needed for domains like web development, testing, or DevOps, utilizing the `npx skills` CLI. The skill emphasizes best practices, including checking skill reputation and requiring explicit user confirmation before running code.