Skill UI

This skill serves as the central command center for all marketing initiatives. It is designed to route complex marketing questions to the most relevant specialist skill, orchestrate multi-stage campaigns (e.g., content -> SEO -> CRO), or perform comprehensive cross-functional audits. Use this tool when planning a full campaign, coordinating across content, channels, and analytics, or when unsure which specialist tool to use.

This index serves as the central directory and router for a comprehensive marketing skills library. It catalogs 44 specialist skills across 8 functional pods, including Content, SEO, CRO, and Growth. Instead of executing tasks, it guides users to the specific skill module needed for their marketing challenge, ensuring a structured approach to campaigns and content creation.

This skill provides comprehensive expertise in paid advertising across major platforms like Google Ads, Meta, LinkedIn, and TikTok. It guides users through the entire campaign lifecycle, from defining core objectives and identifying ideal audiences (lookalikes, retargeting) to crafting high-converting ad copy (PAS, BAB). Learn best practices for campaign structure, budget allocation, and advanced optimization techniques based on key metrics like ROAS, CPA, and CTR.

Full Instagram Graph API integration for Business/Creator accounts, handling publishing, analytics, comments, DMs, hashtags, scheduling, templates, dashboards, and governance; suited for automating multi-format campaigns via scripts and APIs.

Guides teams through building an AI cold outreach stack—from ICP signals and enrichment to personalization, sequencing, sending, and AI follow-ups—so they can scale precise campaigns without burning deliverability.

This skill analyzes Indicators of Compromise (IOCs)—such as IP addresses, domains, and file hashes—by querying multiple threat intelligence platforms (VirusTotal, AbuseIPDB, MISP). It determines maliciousness confidence, assigns blocking priorities, and attributes threats to campaigns, crucial for incident response, threat triage, and making informed security decisions.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.

A comprehensive guide to building an automated Indicator of Compromise (IOC) enrichment pipeline using OpenCTI. This skill teaches how to leverage OpenCTI's native STIX 2.1 model and internal connectors to pull deep context from major external threat intelligence sources like VirusTotal, Shodan, AbuseIPDB, and GreyNoise. The pipeline automatically enriches newly ingested indicators, correlates them with known threat actors and campaigns, and generates confidence scores for rapid analyst prioritization.

This skill provides comprehensive methods for collecting and synthesizing Open-Source Intelligence (OSINT) regarding threat actors, malicious infrastructure, and attack campaigns. It utilizes public data sources, passive reconnaissance tools (like WHOIS, Certificate Transparency), and specialized platforms (Maltego, Shodan, SpiderFoot) to map adversary context and perform pre-engagement intelligence gathering for authorized red team assessments. Emphasis is placed on passive collection techniques to ensure legality and operational security.

This skill correlates disparate security incidents, Indicators of Compromise (IOCs), and adversary behaviors across time and organizations. It systematically identifies unified threat campaigns, attributes them to common threat actors, and extracts shared indicators for significantly improved detection capabilities. Ideal for cross-organizational threat intelligence sharing and building comprehensive campaign reports.

This tool analyzes Web Application Firewall (WAF) logs (ModSecurity, AWS WAF, Cloudflare) to detect sophisticated SQL injection attack campaigns. It parses diverse log formats, identifies common SQLi payloads (UNION SELECT, OR 1=1), correlates multi-stage attacks, tracks source IPs, and generates detailed incident reports classified by OWASP standards for SOC analysts and security researchers.

This guide details the end-to-end process for executing authorized phishing simulations. It instructs security teams and red teams on designing realistic social engineering pretexts, setting up credential harvesting infrastructure (using tools like GoPhish), and measuring key metrics such as open rates, click-through rates, and credential submission rates. It is crucial for assessing organizational human security awareness and testing email security controls (e.g., DMARC, SPF, DKIM).