Skill UI

This guide provides advanced detection methods and threat hunting queries (KQL/SPL) to identify abuse of Azure service principals. It covers techniques such as privilege escalation, credential compromise, unauthorized role assignment, and enumeration, essential for SOC analysts and security teams monitoring Microsoft Entra ID.

This advanced workflow orchestrates the entire research idea lifecycle. Starting from a broad research direction, it systematically executes literature mapping, creative brainstorming, novelty verification, and proposal refinement. The final output is a validated IDEA_REPORT, a detailed proposal, and a concrete experiment plan, transforming preliminary concepts into actionable, structured research projects. Ideal for users needing a full, end-to-end research guidance system.

This skill guides the implementation of network traffic baselining using historical NetFlow/IPFIX data. It leverages Python's pandas library to compute detailed statistical profiles, including hourly/daily distributions, per-host metrics, and protocol ratios. Anomalies are robustly detected using z-score and Interquartile Range (IQR) methods, assisting SOC analysts in identifying unusual activities like data exfiltration or beaconing.

A comprehensive guide and workflow demonstrating how to use YARA rules for proactive threat hunting. This method helps detect unknown malware, suspicious patterns, and Indicators of Compromise (IOCs) across filesystems, memory dumps, and network artifacts, making it essential for incident response and security analysis.

A powerful tool for conducting comprehensive academic research and literature reviews. It searches, analyzes, and synthesizes key ideas from multiple sources, including local PDF libraries (Zotero, Obsidian), the general web, and specialized academic databases (Semantic Scholar, DeepXiv). Use this when you need to map the historical context, identify related works, or understand complex concepts across multiple studies on a given topic.

This skill automates the entire academic research lifecycle. It orchestrates stages from broad idea discovery and literature review to experimental implementation, rigorous cross-model review, and finally, generating a polished research paper PDF. Ideal for researchers needing an end-to-end, autonomous workflow for academic publication preparation.

Trivy is a comprehensive open-source vulnerability scanner used for detecting vulnerabilities, misconfigurations, secrets, and license violations across OS packages, language dependencies, and container images. It integrates seamlessly into CI/CD pipelines for robust security testing and compliance.

This module provides a centralized interface for the AgentHub message board. It allows multiple AI agents and the coordinator to communicate, track tasks, and log results through structured markdown posts across dedicated channels (Dispatch, Progress, Results). It is essential for monitoring complex multi-agent workflows and ensuring transparent collaboration and auditing.

A foresight agent that runs a rigorous 12-step pipeline combining Claude’s qualitative intelligence with Python’s deterministic arithmetic to analyze high-stakes future scenarios, infer reasonable horizons, and surface quantitative signals for prediction requests.

Soft Predict Future is a structured foresight engine that triggers whenever the user asks about future outcomes or scenarios. It enforces a nine-step analytical pipeline (validation, signal collection, scoring, driver extraction, etc.), highlights required searches and inputs, and directs the user to web-enabled reasoning for predictive analysis.

This tool audits the token consumption across all components (agents, skills, rules, MCP servers) within a Claude Code session. It analyzes token overhead, identifies bloat (e.g., overly long descriptions, redundant components), and generates a detailed context budget report. Use it to maintain optimal context window usage, improve performance, and prevent context saturation.

PydanticAI is a robust Python framework that integrates Pydantic's type-checking and validation capabilities into Large Language Models (LLMs). It allows developers to build production-ready AI agents that guarantee structured, validated outputs, moving beyond simple raw strings. Key features include supported tool calling, dependency injection for testability, and multi-model compatibility across major providers like OpenAI, Anthropic, and Gemini. Use this when reliability and correct data structure are paramount.