Skill UI

This skill provides a methodology to detect data exfiltration attempts hidden within DNS queries. By analyzing Zeek dns.log files, the agent computes Shannon entropy of subdomains, flags unusually long labels, and monitors unique subdomain counts per parent domain. This technique is crucial for identifying malicious tunneling tools like dnscat2 or iodine that bypass traditional security controls.

This skill provides structured procedures for detecting Golden Ticket attacks, a severe threat involving forging Kerberos Tickets in Active Directory. It analyzes Windows Event ID 4769 for indicators such as RC4 encryption downgrades, abnormal ticket lifetimes, and inconsistencies in TGS/TGT requests. Designed for SOC analysts and threat hunters using SIEM platforms (Splunk/Elastic) to enhance security monitoring coverage against credential theft.

This skill provides structured procedures and Python examples for detecting internal data exfiltration. It analyzes endpoint, cloud, and email logs by establishing behavioral baselines and performing statistical anomaly detection. Use cases include investigating insider threats, monitoring DLP policy violations, and building robust User and Entity Behavior Analytics (UEBA) rules for SOC teams.

A comprehensive guide on implementing AWS CloudTrail log analysis for robust security monitoring, threat detection, and forensic investigation. Learn how to configure CloudTrail, use Amazon Athena for SQL querying, and leverage CloudWatch Logs Insights and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity across AWS services.

This comprehensive skill guides the user through monitoring various running experiments across different platforms (SSH, Vast.ai, Modal). It provides structured steps to check running processes, collect logs, extract structured JSON results, and pull detailed metrics from Weights & Biases (W&B). Finally, it summarizes findings, compares against baselines, and suggests next steps.

This skill provides a systematic framework for managing Indicators of Compromise (IOCs) throughout their entire life cycle—from initial discovery and validation to enrichment, deployment, monitoring, and eventual retirement. It emphasizes implementing confidence decay functions, tracking hit rates, and managing false positives to maintain a high-quality, actionable threat intelligence database, thereby minimizing analyst fatigue and maximizing detection efficacy.

This skill performs User and Entity Behavior Analytics (UEBA) to identify anomalous user activities such as impossible travel, unusual access patterns, and privilege abuse. It establishes behavioral baselines using SIEM logs and statistical analysis, helping SOC teams detect insider threats and compromised accounts by flagging deviations from normal user behavior. Use when monitoring security hygiene and suspicious activity is critical.

Guides on using SwanLab for open-source ML experiment tracking, offering local or self-hosted dashboards, rich media logging, and integrations with PyTorch, Transformers, Lightning, or Fastai for comparing runs and monitoring metrics.

The Stock Analyzer Skill provides comprehensive technical analysis for stocks and ETFs. It utilizes industry-standard indicators like RSI, MACD, and Bollinger Bands to generate actionable trading signals. Users can perform advanced technical comparisons, monitor portfolio strength, and identify chart patterns through natural language queries, eliminating the need for manual indicator calculation.

Trackio is a comprehensive library for logging, visualizing, and managing ML experiment metrics and alerts. It allows developers to use a Python API to log metrics and set diagnostic alerts (INFO/WARN/ERROR) during training. Furthermore, a dedicated CLI enables metric retrieval and dashboard viewing, syncing data to Hugging Face Spaces for persistent, remote monitoring, making it ideal for autonomous ML agent workflows.

This skill provides interactive, periodic monitoring of deep learning training runs. It continuously checks critical metrics—such as loss trends, evaluation scores, and gradient norms—against defined baselines to detect signs of divergence, NaN values, plateaus, or general instability. It delivers a structured report and recommends whether to continue, wait, or stop the training process, ensuring computational resources are not wasted on failing models.

This expert tool provides deep, systematic auditing of datasets to assess completeness, consistency, accuracy, and structural validity. It performs full data profiling, detects anomalies (outliers), analyzes missing data mechanisms (MCAR/MAR/MNAR), and calculates a Data Quality Score (DQS). Use it when validating data for model training, debugging pipelines, or establishing ongoing monitoring checks.