Skill UI

This skill provides a systematic framework for managing Indicators of Compromise (IOCs) throughout their entire life cycle—from initial discovery and validation to enrichment, deployment, monitoring, and eventual retirement. It emphasizes implementing confidence decay functions, tracking hit rates, and managing false positives to maintain a high-quality, actionable threat intelligence database, thereby minimizing analyst fatigue and maximizing detection efficacy.

This skill automates deep packet capture (PCAP) analysis using tshark and pyshark. It is invaluable for security assessments and incident response, enabling the extraction of protocol statistics, identification of suspicious network flows (e.g., port scanning, beaconing), and comprehensive extraction of Indicators of Compromise (IOCs), including IPs, domains, and URLs. It also specializes in detecting complex anomalies like DNS tunneling.

This tool conducts comprehensive, sector-specific threat landscape assessments by analyzing designated threat actor patterns (e.g., APT groups, cybercriminals), common attack vectors, and industry-specific vulnerabilities. It is designed to provide actionable intelligence for risk management, security investment prioritization, and executive reporting across critical sectors like finance, healthcare, and energy.

This guide demonstrates how to build comprehensive forensic super-timelines using Plaso (log2timeline) to correlate events across diverse sources. It covers the entire workflow, from processing disk images and various logs (MFT, registry, browser history) to generating standardized CSV, JSONL exports, and visualizing the results in tools like Timesketch for deep investigative analysis.

This skill performs User and Entity Behavior Analytics (UEBA) to identify anomalous user activities such as impossible travel, unusual access patterns, and privilege abuse. It establishes behavioral baselines using SIEM logs and statistical analysis, helping SOC teams detect insider threats and compromised accounts by flagging deviations from normal user behavior. Use when monitoring security hygiene and suspicious activity is critical.

Comprehensive Snowflake development assistant covering SQL best practices, dynamic tables, streams, tasks, Snowpipe, Cortex AI functions/agents, Snowpark Python, dbt integration, performance tuning, and security hardening for production data platforms.

This skill provides institutional-depth equity analysis by combining public SEC EDGAR filings and real-time market data. It can generate structured, verdict-style memos, score stocks across four key pillars (Momentum, Stability, Financial Health, Upside), and perform side-by-side comparisons of two tickers, enabling data-driven investment decision support without requiring proprietary terminal access.

This comprehensive skill bridges the gap between initial idea discovery and final model deployment. It ingests a structured experiment plan (EXPERIMENT_PLAN.md), automatically implements the required code, performs cross-model code review, deploys the setup to GPU, and collects initial quantitative results, allowing for a rapid iteration loop in AI research.

Trackio is an essential library for logging, visualizing, and analyzing machine learning training experiments. It provides multi-interface support: a Python API for real-time metric logging and alert firing during training; a Command Line Interface (CLI) for retrieving historical metrics and alerts; and synchronization capabilities to Hugging Face Spaces for persistent dashboards. This tool is crucial for debugging, diagnosing training issues (like loss spikes), and automating ML workflow iteration.

This skill uses advanced AI and LLM capabilities to correlate fragmented Open Source Intelligence (OSINT) data. It ingests findings from diverse sources—including username enumeration, email lookups, social media, domain records, and breach databases—to generate unified, intelligence-grade profiles. It provides link analysis and confidence scoring, transforming raw data into actionable threat intelligence for target profiling.

Provides direct REST API access to UniProt, the premier resource for protein sequence and functional information. This skill enables users to search proteins by name, gene, or accession number, retrieve sequences in FASTA format, perform cross-database ID mapping (e.g., Ensembl, RefSeq), and analyze functional annotations (GO terms) for building comprehensive bioinformatics pipelines.

Plotly is a powerful Python graphing library designed to create highly interactive, publication-quality visualizations. It supports over 40 chart types, including scatter plots, heatmaps, candlestick charts, and geographical maps. Ideal for building sophisticated dashboards, conducting deep exploratory data analysis, and creating rich, web-embeddable presentations with features like zooming, panning, and hover tooltips.