Skill UI

A comprehensive toolkit using Splunk's SPL language to analyze Windows Security, System, and Sysmon event logs. It maps advanced detection queries to specific MITRE ATT&CK techniques, enabling SOC analysts to investigate authentication attacks (e.g., brute force, password spraying), detect privilege escalation, locate persistence mechanisms, and trace lateral movement for detailed forensic timeline analysis.

This guide details how to write advanced correlation searches using Splunk's Search Processing Language (SPL). It covers techniques like threshold-based detection, sequence analysis, and anomaly detection to identify sophisticated security threats (e.g., brute force, data exfiltration, lateral movement) in a Security Operations Center (SOC) environment. Mastery of SPL is essential for closing SIEM detection gaps and ensuring compliance.

This skill guides SOC analysts and detection engineers on how to correlate complex, multi-stage attacks within the IBM QRadar SIEM platform. It covers advanced usage of AQL (Ariel Query Language) for deep event investigation, building custom correlation rules (Building Blocks and Offenses), and cross-source data correlation (e.g., auth failures with network flows). It is essential for reducing false positives and improving threat detection accuracy.

This skill guides developers on building LLM-powered applications using the Claude API, Anthropic SDKs, or the Agent SDK. It provides comprehensive guidance on language detection, best practices (like default model versions and streaming), and choosing the correct development surface (API call, Workflow, or Agent) based on the use case.

Python library for medicinal chemistry filtering of compound libraries. Apply drug-likeness rules (Lipinski, Veber, CNS), structural alerts (PAINS, NIBR, ChEMBL), complexity metrics, chemical group detection, and a query language for large-scale molecular triage in drug discovery.

A comprehensive security auditing framework designed to systematically detect sensitive information disclosure from Large Language Models (LLMs). It uses multi-phase, escalating dialogue probes to test for leaks such as system prompts, API keys, PII, and internal configurations. Essential for red teaming and rigorous model security assessment.

This benchmark evaluates Vision-Language Models (VLMs) on detecting potential safety hazards within indoor environments. It uses static camera frames, simulating real-world fixed security camera monitoring. The test covers 40 scenarios across 5 critical categories, including fire/smoke, electrical risks, trips/falls, child safety, and falling objects, providing a rigorous measure of VLM's practical safety inspection capability.

This comprehensive benchmark suite evaluates the performance of Vision-Language Models (VLM) on complex video anomaly detection tasks using the SmartHome-Bench dataset. It covers a wide range of real-world smart home scenarios, including security breaches, elderly fall detection, and unusual pet behavior. Unlike single-frame analysis, this benchmark requires deep multi-frame video understanding, making it a robust tool for testing the advanced AI capabilities of video monitoring systems.

An expert guide covering advanced exploitation techniques for Expression Language (EL) injection across multiple Java frameworks, including Spring (SpEL), Struts2 (OGNL), and JSP/JSF (Java EL). Details detection methods, sandbox bypasses, and real-world CVE chains for Remote Code Execution (RCE).

jscpd is a comprehensive code quality tool designed to detect copy-pasted or duplicated segments across programming source code. Supporting over 150 languages, it identifies redundant code blocks and calculates the overall duplication percentage. It offers multiple reporters (AI, HTML, JSON) and integrates with refactoring workflows to help developers maintain high code integrity.

This skill helps developers programmatically discover, filter, and inspect the entire OpenMed model registry. It allows users to find the correct model key for specific clinical tasks (e.g., diseases, oncology, PII detection), filter by language, size, or task, and review model metadata before loading. It pairs with `loading-openmed-models`.

Guides users to select a local, on-device Personally Identifiable Information (PII) detection model from a committed registry. It filters models based on language, required runtime environment (e.g., PyTorch, MLX), and size constraints. The process emphasizes building an offline shortlist and mandates rigorous pre-deployment recall validation and performance benchmarking to ensure secure, privacy-preserving deployment.