Skill UI

This skill guides the installation and configuration of the Juicebox PeopleGPT API. It enables developers to access AI-powered people search capabilities across millions of professional profiles. Use this when setting up the initial connection or performing deep people search functionality within your application.

This comprehensive guide details the end-to-end setup process for integrating Lindy AI into external applications. Learn how to obtain and manage API keys, install and initialize SDKs (Python/Node.js), and securely configure webhook authentication endpoints to enable programmatic access and trigger AI agents.

A comprehensive guide detailing red team tactics based on the MITRE ATT&CK framework. It covers the entire adversary lifecycle, including reconnaissance, initial access, privilege escalation, defense evasion, lateral movement, and exfiltration. This skill is designed for authorized security assessments to simulate real-world threats and identify critical defensive gaps.

This skill provides implementation patterns for building advanced voice agents and automating phone call workflows using the Retell AI platform. It covers SDK initialization, agent listing, and includes robust error handling for common telephony issues (e.g., unauthorized access, rate limiting), ensuring reliable integration into your enterprise applications.

This comprehensive guide details the setup and authentication process for the TwinMind AI suite. It covers installing the Chrome extension, setting up mobile applications, integrating with Google/Microsoft calendars, and configuring API access. Use this skill when initializing TwinMind into a professional workflow for automated meeting transcription, note-taking, and data synchronization.

A comprehensive guide to installing and configuring the Vast.ai Command Line Interface (CLI) and REST API access. This skill is used for setting up new cloud integrations, managing API keys, and initializing access to GPU compute instances from the Vast.ai marketplace. It provides steps for CLI authentication, environment variable setup, and implementing a Python client for resource management.

A comprehensive skill for detecting early-stage ransomware indicators before data encryption occurs. It utilizes advanced network detection tools such as Zeek and Suricata, combined with SIEM correlation rules and threat intelligence feeds. This method monitors the entire pre-encryption kill chain, identifying precursor behaviors like initial access broker activity, Cobalt Strike C2 beaconing, credential harvesting (e.g., Mimikatz signatures), and data staging attempts, enabling timely incident response and containment.

Execute deep, stealthy red team exercises that emulate real-world sophisticated adversaries. This process maps attacks to the MITRE ATT&CK framework, testing an organization's entire security posture—including detection, incident response, and containment capabilities (Blue Team). It is designed for simulating full attack lifecycles (initial access, lateral movement, exfiltration) to validate security investments and meet regulatory requirements (TIBER-EU, CBEST). Requires executive authorization and defined Rules of Engagement.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.

A comprehensive guide for collecting, parsing, and correlating system, application, and security logs from diverse sources (Windows, Linux, Web). This technique is crucial for reconstructing detailed event timelines, identifying initial access vectors, tracking lateral movement, and establishing evidence of unauthorized activity during post-breach forensic investigations.

Open Source Intelligence (OSINT) is the critical first phase of red team engagements. This guide details how to systematically collect publicly available data about a target organization. It covers mapping network assets (domains, IPs), identifying personnel for social engineering, discovering credential leaks, and mapping the entire technology stack. Use this skill during authorized security assessments to build comprehensive attack surface maps and initial access strategies.

This skill provides a comprehensive framework for performing privilege escalation assessments post-initial compromise. It guides testers in identifying paths from low-privilege access to root or SYSTEM-level control on both Linux and Windows operating systems. Techniques covered include abusing SUID binaries, exploiting misconfigured services, leveraging kernel vulnerabilities, and harvesting credentials.