Skill UI

Provides Python access to openFDA endpoints for drugs, devices, foods, veterinary products, and substances, enabling regulatory analysis, safety monitoring, recalls tracking, and pharmacovigilance research.

This advanced engine acts as the memory layer for C-suite advisory sessions. It loads, manages, and enriches detailed company context from local files, automatically detecting context staleness. Crucially, it enforces strict anonymization protocols before any external API calls, ensuring sensitive data (like revenue or names) is protected while providing deep, specific insights for high-level business strategy.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

This guide demonstrates how to implement clean and robust asynchronous pipelines in TypeScript using `TaskEither` from `fp-ts`. It solves the common problem of deeply nested, unmanageable `try/catch` blocks, allowing developers to compose sequential API calls and operations while correctly handling success and failure paths in a functional, immutable manner. Ideal for complex data fetching and workflow orchestration.

TaskEither is a functional programming utility from fp-ts designed for handling asynchronous operations that might fail. It provides a robust, type-safe mechanism for managing complex async workflows, such as chained API calls or promise wrappers. Instead of relying on traditional try/catch blocks where errors can be lost, TaskEither forces the developer to explicitly handle both success and failure paths, making error management predictable and composable.

Enables an OpenClaw agent to place managed outbound phone calls for alerts, briefings, reminders, and urgent notifications without Twilio, combining REST-triggered dialing with transcription and TTS so conversations feel like chat.

Coordinates Exa MCP-driven web_search_exa and get_code_context_exa calls for up-to-date web results, code snippets, and company or people intel whenever the user requests research, competitive analysis, or development context.

A comprehensive tool for performing static analysis on Android APK malware samples. It utilizes androguard, apktool, and jadx to detect dangerous permission combinations, suspicious API calls (like reflection or crypto), dynamic code loading patterns, and extract Indicators of Compromise (IOCs) for robust security incident response and threat hunting.

Detects abnormal access patterns across major cloud storage platforms, including AWS S3, GCS, and Azure Blob Storage. By analyzing cloud audit logs (CloudTrail, etc.), this tool identifies critical security threats such as after-hours bulk data downloads, sudden spikes in API calls (GetObject spikes), access from new geographic IPs, and potential data exfiltration. It utilizes statistical baselines and time-series anomaly detection for proactive threat hunting and security incident investigation.

This guide details the comprehensive process of using the Linux Audit framework (auditd) to detect advanced security threats. It covers deploying specific rules to monitor critical system files, detecting unauthorized privilege escalation, process injection, and suspicious system calls. Users can then leverage ausearch and aureport to efficiently query, reconstruct timelines, and summarize findings for forensic analysis and compliance auditing.

This skill automates the execution of suspicious malware samples within a secure, isolated Cuckoo Sandbox environment. It observes comprehensive runtime behaviors, including process creation chains, file system tampering, registry modifications, network communications, and API calls. It is essential for generating detailed behavioral reports, extracting Indicators of Compromise (IOCs), and classifying unknown malware samples.

This guide outlines the comprehensive process for planning and executing authorized vishing (voice phishing) pretext calls. Used in red teaming exercises, it assesses employee susceptibility to social engineering attacks and evaluates the effectiveness of existing security awareness controls. Key steps include OSINT research, developing believable pretexts (e.g., IT helpdesk impersonation), structured call execution, and collecting detailed metrics.