Skill UI

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This specialized skill acts as an expert AI auditor for Food Safety Modernization Act (FSMA) compliance. It is designed to review critical records, including HACCP plans, Preventive Controls, and Supply Chain documentation for food processing facilities. Use it to simulate FDA inspections, identify compliance gaps (such as missing CCPs or inadequate corrective actions), and receive actionable guidance to ensure the highest standards of food safety.

A rigorous, multi-phase auditing skill designed for blockchain protocols. It verifies whether the implemented smart contract code strictly adheres to the detailed specifications provided in whitepapers, design documents, or technical specifications. It performs exhaustive, line-by-line semantic analysis to identify gaps, inconsistencies, and deviations across logic, invariants, and security guarantees, making it essential for formal compliance checking in decentralized systems.

This expert skill performs non-intrusive static analysis to thoroughly audit AI skills and bundles. It identifies malicious patterns, data leaks, system stability risks, and obfuscated payloads across major operating systems (Windows, macOS, Linux/Unix) and mobile platforms (Android/iOS). Use it when verifying skill legitimacy or performing deep cross-platform security reviews.

This skill analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain framework. It identifies which attack phases an adversary has completed, points where defenses failed or succeeded, and recommends controls to disrupt the attack at earlier stages. It is essential for post-incident analysis, threat intelligence reporting, and designing robust defense-in-depth strategies.

This skill guides users through analyzing suspicious URLs using the URLScan.io platform or API. It provides a safe environment to capture screenshots, DOM content, network traffic, and analyze JavaScript behavior to investigate phishing attempts, credential harvesting, and sophisticated malicious redirects without risking the analyst's system.

A comprehensive guide for deep packet inspection and network forensics using Wireshark and tshark. This skill is critical for incident response, where it allows users to capture, filter, and analyze network packet data to identify malicious command-and-control traffic, diagnose complex protocol issues, extract indicators of compromise (IOCs), and reconstruct data exfiltration paths. Use it for validating security rules and understanding network anomalies.

This skill provides a comprehensive workflow for identifying, unpacking, and analyzing packed malware samples, especially those utilizing the UPX format. It details methods for standard UPX decompression and advanced techniques for repairing modified PE headers or magic bytes that prevent automated extraction. The process supports preparing samples for deep static analysis and dynamic debugging.

This comprehensive skill analyzes Zeek conn.log and NetFlow data to proactively detect advanced indicators of ransomware activity. It identifies critical threats such as Command and Control (C2) beaconing patterns, connections to TOR exit nodes, large-scale data exfiltration flows, and suspicious DNS anomalies. It is essential for threat hunting and complex security incident response.

A comprehensive guide utilizing Splunk Enterprise Security and SPL to conduct deep forensic analysis of security incidents. This skill covers correlating disparate sources like Windows event logs, firewall records, proxy data, and Sysmon logs to detect TTPs, reconstruct timelines, and identify anomalies, making it essential for incident response and threat hunting.

This skill provides a comprehensive guide to establishing SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers the architecture, prerequisites, and practical steps (including PowerShell scripting) required to achieve seamless Single Sign-On (SSO) and centralized authentication authority for hybrid environments and third-party SaaS applications.

This skill guides the implementation of comprehensive Identity Governance and Lifecycle Management (IGM) processes. It automates the entire employee identity lifecycle—from pre-hire onboarding (Joiner) to role changes (Mover) and termination (Leaver). Key components include Role-Based Access Control (RBAC) provisioning, periodic access recertification, and remediation of orphaned accounts, ensuring compliance with standards like SOX and GDPR.