Skill UI

This tool generates comprehensive briefing documents for scheduled meetings. It integrates data from calendar systems, email history (up to 90 days and historical), professional networking sites (LinkedIn), and past interaction records (Granola). It provides context on attendees, relationship history, key discussion points, and critical action items to ensure users are fully prepared for every call, regardless of whether it's a first introduction or a follow-up.

RecallMax dramatically enhances AI agent memory capabilities by cleanly injecting massive external contexts (500K-1M tokens) without hallucination drift. It automatically summarizes lengthy conversations, preserving tone, intent, and key facts. Furthermore, it compresses multi-turn interaction histories into high-density token sequences, ensuring agents maintain perfect recall across complex and long-running sessions.

This skill monitors Todoist for tasks that are due or overdue and require follow-up (email, ping, etc.). It automatically drafts highly contextual emails by combining task descriptions, retrieved meeting transcripts (from Granola/Grain), and prior email history. Drafts are created directly in Gmail and the user is notified via WhatsApp, saving significant time on manual follow-ups and ensuring context-aware communication.

A comprehensive collection of six expert-level, structured workflows designed to elevate AI assistance from ad-hoc querying to repeatable, production-grade engineering practices. Users can evaluate prompts, design RAG architectures, plan context budgets, run security audits, build eval harnesses, and coach product strategy.

This skill details the architecture and implementation of an automated Indicator of Compromise (IOC) enrichment pipeline using OpenCTI. It demonstrates how to connect OpenCTI to various external threat intelligence services (like VirusTotal, Shodan, AbuseIPDB) to automatically gather context, correlate indicators, and assign confidence scores. This is crucial for enhancing security monitoring and prioritizing threats for cyber analysts.

This guide details how to build automated threat intelligence enrichment pipelines within Splunk Enterprise Security. By leveraging the Threat Intelligence Framework, users can ingest, normalize, and correlate Indicators of Compromise (IOCs) from diverse external sources (such as TAXII, CSV, and custom APIs). The process uses KV Store collections and lookup searches to enrich raw security events with critical threat context, significantly reducing triage time for SOC teams.

This skill provides comprehensive methods for collecting and synthesizing Open-Source Intelligence (OSINT) regarding threat actors, malicious infrastructure, and attack campaigns. It utilizes public data sources, passive reconnaissance tools (like WHOIS, Certificate Transparency), and specialized platforms (Maltego, Shodan, SpiderFoot) to map adversary context and perform pre-engagement intelligence gathering for authorized red team assessments. Emphasis is placed on passive collection techniques to ensure legality and operational security.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

This system deploys advanced AI, NLP, and behavioral analytics to detect sophisticated Business Email Compromise (BEC) attacks. Unlike traditional filters that rely on malicious links, this solution analyzes writing style, tone, grammatical patterns, and contextual anomalies to identify pure social engineering impersonation, providing a robust defense layer against advanced phishing and fraud.

This skill detects unauthorized modifications (container drift) to running containers by monitoring for deviations from the original image state. It monitors binary execution drift, file system changes, and configuration deviations using tools like Falco and Kubernetes security contexts. Essential for SOC analysts and security teams investigating runtime compromises and enforcing immutable infrastructure.

This skill fetches the latest, live documentation and code examples for specific libraries and frameworks (e.g., Next.js, React, Prisma). Instead of relying on static or outdated training data, it utilizes the Context7 MCP to provide accurate, up-to-date answers for setup questions, API references, and code generation based on current best practices.

This guide details the implementation of robust API abuse detection mechanisms. It covers advanced rate limiting techniques, such as the Token Bucket and Sliding Window algorithms, to defend APIs against DDoS attacks, brute force attempts, and credential stuffing. It emphasizes using distributed stores like Redis for accurate, scalable, and adaptive security controls in an API gateway context.