Skill UI

Builds AI-powered paid media creative across Meta, Google, TikTok, YouTube, and LinkedIn by combining native platform tools and generative models to automate asset creation, fatigue management, and performance testing while driving ROAS.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This tool analyzes ML experiment results from various paths (JSON/CSV). It computes comprehensive statistics, builds detailed comparison tables based on model types and hyperparameters, and generates actionable insights. Use it when you need to interpret raw experimental data, compare different model runs, or determine the next steps for research.

Systematically evaluates cyber-campaign evidence to attribute a cyber operation to a specific threat actor. This skill utilizes advanced analytical frameworks like the Diamond Model and Analysis of Competing Hypotheses (ACH) to weigh multiple indicators, including infrastructure overlaps, TTP consistency, malware similarity, and operational patterns, providing confidence-weighted attribution assessments for incident response.

A comprehensive guide to building an automated Indicator of Compromise (IOC) enrichment pipeline using OpenCTI. This skill teaches how to leverage OpenCTI's native STIX 2.1 model and internal connectors to pull deep context from major external threat intelligence sources like VirusTotal, Shodan, AbuseIPDB, and GreyNoise. The pipeline automatically enriches newly ingested indicators, correlates them with known threat actors and campaigns, and generates confidence scores for rapid analyst prioritization.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.

Structures completed intrusion investigations with the Diamond Model by documenting adversaries, capabilities, infrastructure, and victims plus their relationships, metadata, and pivots to cluster incidents and support campaign attribution, confidence scoring, and analytic write-ups.

This skill implements the CISA Zero Trust Maturity Model (ZTMM) v2.0. It provides a structured framework to assess, gap-analyze, and roadmap the adoption of zero trust architecture across five core pillars: Identity, Devices, Networks, Applications, and Data. It guides organizations from Traditional to Optimal maturity, aiding compliance with NIST standards and federal mandates.

This guide details the design and implementation of security zones and conduits for Industrial Automation and Control Systems (IACS) following the stringent standards of IEC 62443-3-2. It enables risk-based network partitioning, assigning Security Level Targets (SL-T), and enforcing granular conduit controls. Use this when retrofitting flat OT networks or designing greenfield facilities to achieve IEC 62443 compliance, validating boundaries against the Purdue Reference Model.

This skill guides the implementation of fine-grained network security policies in Kubernetes using Calico CNI. It covers establishing a default-deny baseline, understanding policy ordering, and applying advanced rules like service-account-based selectors. Use it for hardening cluster security, enforcing zero-trust models, and managing network segmentation within containerized environments.

This guide details the configuration and implementation of mutual TLS (mTLS) authentication between microservices. It utilizes Python's cryptography library for robust certificate generation, validation, and secure service-to-service authentication, essential for adopting zero-trust security models.

This skill details the design and implementation of Privileged Access Workstations (PAWs). It covers establishing a tiered administration model, enforcing device compliance using Microsoft Intune or Group Policy, integrating Just-in-Time (JIT) access provisioning, and connecting with leading PAM platforms like CyberArk or BeyondTrust to secure sensitive administrative operations.