Skill UI

This skill guides the development of EarLLM One, a complex Android application. The app captures real-time audio from Bluetooth earbuds, transcribes the voice using STT, sends the text input to a Large Language Model (LLM) via a robust pipeline, and plays the response back using TTS. It requires deep knowledge of Kotlin, Android development, Bluetooth profiles (A2DP/HFP), and advanced audio routing.

Provides an X/Twitter-focused growth engine that audits profiles, researches competitors, engineers viral tweets and threads, and decodes algorithm signals so creators can plan posting strategies and maximize engagement.

Allows users to resume an interrupted or paused autoresearch experiment. It automatically loads the full context, including configuration, strategy files, complete results history, and recent code changes. The system then summarizes the current best metrics and patterns, prompting the user to continue with a single iteration, set up an automated loop, or manually review the results.

This skill initializes a new autoresearch experiment. It guides the user through defining all necessary parameters, including the domain, target files, evaluation commands, metrics, and optimization direction. It is the essential starting point for automated optimization and performance benchmarking cycles.

Opinionated Docker development assistant that analyzes Dockerfiles, docker-compose setups, multi-stage builds, and container security to shrink images, speed builds, and enforce production-ready practices when users need optimized containers.

This skill provides a programmatic method for analyzing Advanced Persistent Threat (APT) groups using the MITRE ATT&CK framework. By querying TTPs and generating multi-layer JSON files compatible with ATT&CK Navigator, analysts can visualize threat actor coverage, map detection capabilities, and identify critical security gaps to build highly targeted, threat-informed defenses.

A specialized tool designed for incident responders and threat hunters. It extracts critical configuration data—such as C2 server addresses, malleable profiles, watermarks, and communication settings—from Cobalt Strike beacon payloads found in PE files or memory dumps. This analysis is crucial for mapping attacker infrastructure and improving defensive detection rules.

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

A comprehensive toolset for analyzing Cobalt Strike Malleable C2 profiles. It parses advanced C2 communication configurations to extract crucial Indicators of Compromise (IOCs) such as HTTP headers, DNS settings, URI patterns, and user agents. The analysis is vital for threat hunting, developing network detection signatures (Suricata/Snort), and understanding evasion techniques used by advanced persistent threats (APTs).

This comprehensive guide details the professional workflow for performing digital forensic analysis on disk images using Autopsy and The Sleuth Kit. It covers environment setup, data source ingestion, recovering deleted files, extracting critical metadata (EXIF, MFT timestamps), and performing advanced keyword searches to build a complete investigative timeline and detailed case report.

This guide details the comprehensive process of using the Linux Audit framework (auditd) to detect advanced security threats. It covers deploying specific rules to monitor critical system files, detecting unauthorized privilege escalation, process injection, and suspicious system calls. Users can then leverage ausearch and aureport to efficiently query, reconstruct timelines, and summarize findings for forensic analysis and compliance auditing.

Comprehensive digital forensic analysis guide for Linux systems. It covers the collection and examination of critical artifacts such as authentication logs, shell histories, user configurations, system files (passwd, shadow), and persistence mechanisms to effectively detect security compromises, unauthorized access, and malicious activity.