Skill UI

This tool implements network segmentation based on the Purdue Enterprise Reference Architecture (PERA). It helps secure Industrial Control Systems (ICS) by mapping assets and data flows to specific Purdue levels (0-5), defining necessary firewall rules, and establishing DMZs. It ensures strict traffic control between IT and OT domains, adhering to standards like IEC 62443 and facilitating secure network retrofitting.

Cartography is a CNCF project designed to perform comprehensive cloud asset inventory across AWS, GCP, and Azure. It queries cloud APIs to aggregate infrastructure resources, map complex relationships (like IAM permissions and network paths), and store them in a Neo4j graph database. This allows security teams to visualize potential attack paths, conduct deep security audits, and identify cross-cloud misconfigurations.

This skill detects advanced lateral movement techniques used by attackers after initial compromise, mapping them to MITRE ATT&CK TA0008. It correlates multiple data sources, including Windows event logs (4624, 4769), Sysmon telemetry, network flow data, and endpoint logs, to identify suspicious activities like Pass-the-Hash, PsExec, WMI exploitation, RDP pivoting, and SMB spreading.

Open Source Intelligence (OSINT) is the critical first phase of red team engagements. This guide details how to systematically collect publicly available data about a target organization. It covers mapping network assets (domains, IPs), identifying personnel for social engineering, discovering credential leaks, and mapping the entire technology stack. Use this skill during authorized security assessments to build comprehensive attack surface maps and initial access strategies.

This skill utilizes the SpiderFoot REST API and CLI to automate Open-Source Intelligence (OSINT) collection. It performs comprehensive target profiling, reconnaissance, and attack surface mapping across 200+ data sources. Users can select specialized modules (e.g., footprint, investigate) to analyze domains, IPs, and credentials, generating structured intelligence reports essential for security assessments, incident response, and threat intelligence gathering.

This playbook guides Security Operations Center (SOC) analysts through a comprehensive, multi-step process for triaging and prioritizing security incidents. It covers receiving alerts from SIEM/EDR, enriching data using threat intelligence feeds (VirusTotal, AbuseIPDB), classifying the incident type (MITRE ATT&CK mapping), and calculating a severity score based on asset criticality and data sensitivity. The workflow culminates in automating ticket creation and triggering immediate response procedures via tools like PagerDuty.

Assesses AI/ML systems for prompt injection, jailbreak, model inversion, data poisoning, and agent tool abuse using MITRE ATLAS mapping, signature detection, and scoring metrics before deployment.

Provides direct REST API access to UniProt, the premier resource for protein sequence and functional information. This skill enables users to search proteins by name, gene, or accession number, retrieve sequences in FASTA format, perform cross-database ID mapping (e.g., Ensembl, RefSeq), and analyze functional annotations (GO terms) for building comprehensive bioinformatics pipelines.

A utility for interacting with the Lark/Feishu communication directory. It allows users to search for employees by name or email to obtain an open_id, or use an open_id to retrieve comprehensive profile data, including department, contact details, status, and signature. Ideal for preparing information before sending messages or scheduling events. Note that department tree traversal and organizational structure mapping require native OpenAPI calls.

This tool facilitates the migration of stored procedures and functions from Oracle PL/SQL to PostgreSQL PL/pgSQL. It handles complex syntax translation, preserves function signatures and type-anchored parameters, and manages explicit collation mapping. Use this when converting an existing Oracle database schema or application logic to a PostgreSQL environment.

Audits crawlability, metadata, structured data, Core Web Vitals, and content signals while planning keyword mapping, internal linking, and sitemap fixes so teams can steadily boost organic visibility.

This skill is designed for understanding complex database structures. It allows users to list all available tables, intelligently filter relevant tables based on natural language queries, retrieve detailed schemas (columns, types, primary/foreign keys), and map inter-table relationships. It culminates in generating the M-Schema format, which is essential for accurately preparing the context needed for advanced SQL query generation.