Skill UI

Generates Python code and workflows for collaborative, content-based, or hybrid recommendation models, handling data prep, training, evaluation, and scalability so Claude can deliver tailored suggestions across domains.

This skill models the expertise of a senior data scientist, covering the entire data science lifecycle. It provides advanced capabilities in statistical modeling, machine learning (deep learning, XGBoost), predictive analytics, and business intelligence. From raw data exploration (EDA) to deploying production-ready models and creating actionable dashboards, it covers technical depth across Python, R, SQL, and cloud platforms, while applying domain knowledge in finance, marketing, and operations.

A comprehensive workflow for executing advanced, semantic web searches using Exa. This tool moves beyond simple keyword matching, enabling deep context retrieval by understanding the intent behind the query. Key features include RAG context retrieval, content extraction (summaries, highlights, full text), and robust filtering by date range, specific domains, and content categories. Ideal for building knowledge base search features and complex research pipelines.

This skill functions as an expert-level web researcher, utilizing advanced search strategies (query optimization, domain filtering) to gather, synthesize, and validate information from multiple web sources. It is ideal for complex research tasks requiring fact verification, identifying trends, and producing structured, actionable insights, ensuring high credibility for the final output.

Conduct rigorous, multi-database literature reviews with systematic workflows, verified citations in styles like APA or Nature, and AI-enhanced schematics for publication-ready markdown and PDF outputs in biomedical and technical domains.

Query InterPro for protein family, domain, and GO annotations via a REST API with Python helpers, enabling function prediction, domain architecture mapping, and evolutionary classification insights for proteomic workflows.

This skill analyzes DNS query logs to detect sophisticated threats such as data exfiltration via DNS tunneling, Domain Generation Algorithm (DGA) usage, and covert Command and Control (C2) channels. It utilizes advanced techniques like entropy analysis, query volume anomaly detection, and subdomain length analysis within SIEM platforms, helping SOC teams identify threats that bypass traditional network security controls.

This skill analyzes Indicators of Compromise (IOCs)—such as IP addresses, domains, and file hashes—by querying multiple threat intelligence platforms (VirusTotal, AbuseIPDB, MISP). It determines maliciousness confidence, assigns blocking priorities, and attributes threats to campaigns, crucial for incident response, threat triage, and making informed security decisions.

This tool provides comprehensive analysis of the cybersecurity threat landscape using the Malware Information Sharing Platform (MISP). It allows users to query event statistics, analyze attribute distributions (IPs, domains, hashes), identify top threat actors and malware families, and track temporal trends. It is essential for SOC analysts performing incident response, threat hunting, and building advanced detection rules.

This system automates the tracking and mapping of threat actor Command-and-Control (C2) networks. By leveraging passive DNS records, WHOIS data, certificate transparency logs, and IP enrichment, it helps security analysts perform infrastructure pivoting. It identifies shared hosting patterns, monitors domain reuse, and continuously maps adversary relationships for proactive threat intelligence.

This skill provides a comprehensive framework for detecting data exfiltration attempts that utilize DNS tunneling. It analyzes DNS logs for anomalies such as high Shannon entropy in subdomains, excessive query volume, abnormal query lengths, and misuse of TXT/CNAME records. It is ideal for SOC analysts and security engineers building advanced threat detection rules and performing threat hunting.

This skill provides a methodology to detect data exfiltration attempts hidden within DNS queries. By analyzing Zeek dns.log files, the agent computes Shannon entropy of subdomains, flags unusually long labels, and monitors unique subdomain counts per parent domain. This technique is crucial for identifying malicious tunneling tools like dnscat2 or iodine that bypass traditional security controls.