Skill UI

Guards borrower interactions by enforcing TRID, RESPA, TILA, ECOA/Fair Lending, licensing, disclosures, and privacy rules whenever rates, fees, qualifications, or data are discussed in mortgage conversations.

Guides borrowers through refinance evaluation by collecting loan data, extracting mortgage statement fields, validating inputs against underwriting rules, and recommending the best products with clear, consumer-friendly explanations.

Guides founders and GTM leaders through designing partner/affiliate programs, from partner recruitment to scaled revenue sharing, recommending tiers, compensation, enablement, and integration strategies.

Guides founders on AI positioning, ICP definition, messaging architecture, and quarterly PMF validation so they can translate technical capabilities into the business outcomes buyer-facing teams care about.

Helps founders and go-to-market teams select between PLG, hybrid, and sales-led motions, design value-before-purchase flows, and optimize time-to-first-value based on price, complexity, and buyer signals.

Guides solo founders through end-to-end GTM decisions, stacking affordable AI-supported tools, designing agent workflows, allocating their most precious time, and knowing when to hire so they can scale go-to-market without adding headcount.

This agent provides structured summarization for academic papers, reports, and articles. It goes beyond simple summarizing by extracting key findings, generating comparative matrices across multiple sources, and producing properly formatted citations (APA, IEEE, etc.). It is designed for analysts, product managers, and researchers who need actionable, deep insights from dense documentation.

This framework provides structured templates for managing communications during malware incidents. It generates tailored reports for various stakeholders, including C-level executives, technical IT teams, and regulatory bodies. The system accounts for severity levels (P1-P4) and different threat types, ensuring consistent, timely, and compliant information dissemination during a crisis.

DefectDojo is an open-source platform designed to centralize, aggregate, and manage security vulnerabilities. It integrates findings from over 200 security scanners (e.g., Nessus, ZAP, Trivy), automatically deduplicates results, tracks remediation progress, and provides executive-level dashboards. It supports robust workflows, including CI/CD pipeline integration and Jira ticketing, making it essential for DevSecOps practices and compliance adherence.

Focuses on advanced threat detection within Azure AD/Entra ID. This skill guides users on correlating Graph API audit logs, sign-in anomalies, and KQL queries in Microsoft Sentinel to identify sophisticated lateral movement techniques, such as privilege escalation, OAuth abuse, and cross-tenant pivoting. Essential for SOC threat hunting.

A comprehensive guide for proactive threat hunting and incident response, detailing how to detect Pass-the-Hash attacks. It involves analyzing NTLM authentication patterns, identifying suspicious Type 3 logons, and correlating these anomalies with credential dumping techniques using SIEM/EDR tools.

This guide details a systematic methodology for proactive threat hunting across Windows endpoints. It focuses on identifying various adversary persistence techniques, such as registry modifications (Run Keys), malicious services, WMI event subscriptions, and scheduled tasks. It is essential for incident response, security audits, and improving detection coverage against dormant backdoors.