Skill UI

Configure Vercel's advanced role-based access control (RBAC) for enterprise environments. This guide covers setting up granular team roles, managing project-level access groups, integrating SAML SSO for secure authentication, and enabling detailed audit logging. Use this when implementing strict security protocols and enforcing the principle of least privilege across your team's deployments and resources.

This skill automatically generates structured and user-friendly changelogs by analyzing the complete git commit history. It groups commits by time period (daily/weekly) and classifies changes into key categories (Features, Fixes, Docs, etc.), providing a concise summary of recent development activity for end-users. Ideal for answering 'what changed recently' or summarizing project updates.

Generates and reviews Odoo XML definitions for Form, List, Kanban, Search, Calendar, and Graph views across versions 14–17, handling visibility, groups, domains, contexts, and widget rules with migration-aware syntax so you can deliver production-ready view XML.

This skill aggregates a user's entire year's work—including GitHub PRs, Notion documents, and Linear tickets—into a single, structured Notion document. It automatically groups these artifacts by project, providing a comprehensive and organized summary ideal for professional reviews or annual performance documentation (e.g., SRED preparation).

This skill analyzes Active Directory (AD) Access Control Lists (ACLs) to detect dangerous misconfigurations. It uses the ldap3 Python library to query domain controllers, parse security descriptors (SDDL), and identify instances where non-privileged users or groups are granted dangerous permissions like GenericAll, WriteDACL, or WriteOwner on sensitive objects. Essential for security incident response and privilege escalation path discovery.

This skill provides a comprehensive method for querying advanced threat intelligence using ATT&CK data. It maps the Tactics, Techniques, and Procedures (TTPs) of specific APT groups into MITRE ATT&CK Navigator layers. Users can build multi-layer heatmaps to identify detection gaps, compare threat coverage, and create structured threat-intel reports for defense engineering.

This skill provides a structured methodology and Python implementation for monitoring and analyzing data leak sites (DLS) associated with ransomware groups. It helps security analysts track victim postings, extract threat intelligence on group tactics, assess sector-specific risks, and understand evolving ransomware threat landscapes for proactive defense.

A comprehensive guide to implementing and validating Transport Layer Security (TLS) 1.3. This skill covers configuring modern cipher suites, key exchange groups, and enforcing perfect forward secrecy (PFS). Use this when deploying secure communication protocols, hardening network services, meeting compliance standards, or performing deep security assessments on web servers and applications.

Provides detailed, cloud-native procedures for containing security incidents across major platforms (AWS, Azure, GCP). The guide outlines how to revoke compromised IAM credentials, isolate resources using network security groups and ACLs, and preserve forensic evidence through snapshots and policy enforcement, minimizing lateral movement risk during an active breach.

This skill provides a comprehensive automation solution for conducting red team phishing simulations using the Python gophish library. It streamlines the entire campaign lifecycle, including creating sophisticated email templates with tracking pixels, configuring SMTP profiles, importing user groups from CSV, launching targeted attacks, and generating detailed reports on open rates, click-through rates, and credential submission statistics for robust security awareness assessments.

This skill utilizes PyMISP, the official library, to programmatically manage the lifecycle of threat intelligence within a MISP instance. Users can create structured events containing Indicators of Compromise (IOCs) such as IPs, domains, and hashes, enrich these events with MITRE ATT&CK tags, manage sharing groups, and export the collected data in standardized STIX 2.1 format. Ideal for security assessments, incident response, and integrating external IOC feeds.

Develops comprehensive profiles for Advanced Persistent Threat (APT) groups, criminal organizations, and hacktivist collectivities. This tool aggregates TTP documentation, campaign data, and attribution indicators from major intelligence sources (MITRE ATT&CK, Mandiant, CrowdStrike) to help organizations update threat models, prioritize defensive controls, and prepare executive briefings on sector-specific risks.