Skill UI

A comprehensive skill for ingesting, analyzing, and manipulating multi-modal video and audio content. Supports real-time desktop capture, live stream monitoring (RTSP), and file uploads (URL/local). Capabilities include advanced indexing (visual, semantic, temporal), precise moment searching, professional timeline editing (subtitles, overlays, dubbing), transcoding, and generating actionable alerts. Ideal for content creators, monitoring systems, and complex media workflows.

A comprehensive guide for defining, tracking, and interpreting product metrics across all stages—from discovery to maturity. This skill covers selecting metric frameworks (AARRR, HEART), defining stage-appropriate KPIs, designing multi-layered dashboards, and executing deep analyses like cohort and retention modeling. It helps teams transform raw data into actionable product strategies, moving beyond vanity metrics.

This skill initializes an autonomous, scheduled loop for running complex research or engineering experiments. Users specify the target experiment and select a recurring interval (e.g., 10 minutes, daily, weekly). It utilizes cron scheduling to ensure continuous research, guiding iterative changes, evaluating metrics, and committing results automatically until manually stopped.

This tool analyzes ML experiment results from various paths (JSON/CSV). It computes comprehensive statistics, builds detailed comparison tables based on model types and hyperparameters, and generates actionable insights. Use it when you need to interpret raw experimental data, compare different model runs, or determine the next steps for research.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

Hindsight is an open-source digital forensics tool designed to parse and correlate artifacts from Chromium-based browsers (Chrome, Edge, Brave, Opera). It extracts comprehensive data, including browsing history, cookies, download records, autofill data, and saved passwords, generating unified, chronological timelines essential for incident response, insider threat investigation, and digital forensics cases.

Detects abnormal access patterns across major cloud storage platforms, including AWS S3, GCS, and Azure Blob Storage. By analyzing cloud audit logs (CloudTrail, etc.), this tool identifies critical security threats such as after-hours bulk data downloads, sudden spikes in API calls (GetObject spikes), access from new geographic IPs, and potential data exfiltration. It utilizes statistical baselines and time-series anomaly detection for proactive threat hunting and security incident investigation.

This skill analyzes DNS query logs to detect sophisticated threats such as data exfiltration via DNS tunneling, Domain Generation Algorithm (DGA) usage, and covert Command and Control (C2) channels. It utilizes advanced techniques like entropy analysis, query volume anomaly detection, and subdomain length analysis within SIEM platforms, helping SOC teams identify threats that bypass traditional network security controls.

This tool parses Kubernetes API server audit logs (JSON lines) to detect critical security events. It specifically targets unauthorized access, secret enumeration, RBAC escalation, privileged pod creation, and shell access (exec/attach). Use it for incident response, threat hunting, or building SIEM detection rules.

This skill provides a comprehensive guide to using the Malpedia API for advanced malware intelligence analysis. Users can track malware family relationships, analyze variant evolution, extract associated YARA rules for detection, and map connections to specific threat actors. It is essential for security researchers and SOC analysts building robust threat models.

This skill provides a systematic methodology for mapping real-world threat actor Tactics, Techniques, and Procedures (TTPs) to the globally recognized MITRE ATT&CK framework. Users learn how to leverage tools like ATT&CK Navigator and Python libraries (e.g., attackcti, stix2) to analyze security incidents, visualize technical coverage heatmaps, identify critical detection gaps, and generate actionable intelligence reports linking observed Indicators of Compromise (IOCs) to specific adversary techniques across various platforms (Enterprise, Mobile, ICS).

This tool helps security analysts map Advanced Persistent Threat (APT) group tactics, techniques, and procedures (TTPs) to the MITRE ATT&CK framework. By utilizing the ATT&CK Navigator and the attackcti Python library, users can query STIX/TAXII data to visualize threat profiles, assess detection coverage gaps, and guide defensive planning for complex cyber incidents.