Skill UI

A comprehensive system for implementing policy guardrails in data enrichment pipelines. It enforces critical controls including credit spending limits, blocks the enrichment of sensitive PII (e.g., SSN, bank details), and validates input data quality. Essential for maintaining compliance (GDPR/CCPA) and managing costs when processing large volumes of personal and business data.

Controls Mixpanel analytics via Rube MCP to aggregate events, run segmentation, funnels, cohorts, profiles, and JQL/insight queries while ensuring schema discovery precedes automation.

This skill acts as an expert risk manager, providing comprehensive guidance on monitoring portfolio risk, calculating R-multiples, and optimizing position limits. It covers advanced quantitative finance topics such as Value at Risk (VaR), correlation analysis, and stress testing using Monte Carlo simulations. Use it for systematic risk assessment, developing hedging strategies (options/futures), and implementing rigorous risk controls in trading workflows.

Guides production ML engineering with patterns for deploying models, building MLOps pipelines, monitoring drift, integrating LLMs and RAG systems, and enforcing feature-store, retraining, and cost controls in live environments.

This skill analyzes DNS query logs to detect sophisticated threats such as data exfiltration via DNS tunneling, Domain Generation Algorithm (DGA) usage, and covert Command and Control (C2) channels. It utilizes advanced techniques like entropy analysis, query volume anomaly detection, and subdomain length analysis within SIEM platforms, helping SOC teams identify threats that bypass traditional network security controls.

This skill provides a methodology to detect data exfiltration attempts hidden within DNS queries. By analyzing Zeek dns.log files, the agent computes Shannon entropy of subdomains, flags unusually long labels, and monitors unique subdomain counts per parent domain. This technique is crucial for identifying malicious tunneling tools like dnscat2 or iodine that bypass traditional security controls.

This skill provides a comprehensive framework for detecting Living Off the Land Binaries (LOLBAS) abuse, such as misuse of certutil, regsvr32, and mshta. It leverages process telemetry from Sysmon and Windows Event Logs, combined with advanced Sigma rule-based detection and parent-child process anomaly analysis. Ideal for SOC analysts and threat hunters investigating sophisticated adversaries aiming to evade traditional security controls.