Skill UI

Run OpenMM-powered molecular dynamics simulations and MDAnalysis trajectory workflows to build protein or small-molecule systems, minimize energy, equilibrate conditions, and characterize RMSD/RMSF, contacts, and free-energy surfaces for structural biology or drug studies.

Guide teams through a structured PESTEL assessment of external political, economic, social, technological, environmental, and legal forces to surface risks and opportunities for product strategy, market entry, and long-term planning.

A comprehensive toolkit for reconstructing and analyzing the evolutionary history of biological sequences (genes, proteins, genomes). The standard workflow includes multiple sequence alignment using MAFFT, robust maximum likelihood tree inference with IQ-TREE 2 and FastTree, and advanced visualization/manipulation using ETE3. This skill is essential for studies in viral phylodynamics, microbial genomics, protein family evolution, and molecular clock dating.

This skill establishes a rigorous framework for building deep architectural context by performing ultra-granular, line-by-line analysis of code. It applies methodologies like First Principles and 5 Whys to maintain a stable, evolving mental model of the entire system, making it essential for pre-vulnerability security auditing, threat modeling, and complex architecture reviews.

Osint Evals provides a structured way to assess open-source intelligence collection and analysis workflows, helping security teams benchmark their OSINT tooling and methodologies against predefined scenarios.

A rigorous, multi-phase auditing skill designed for blockchain protocols. It verifies whether the implemented smart contract code strictly adheres to the detailed specifications provided in whitepapers, design documents, or technical specifications. It performs exhaustive, line-by-line semantic analysis to identify gaps, inconsistencies, and deviations across logic, invariants, and security guarantees, making it essential for formal compliance checking in decentralized systems.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

This skill provides a systematic framework for analyzing cyber campaign attribution. It involves collecting, weighting, and correlating diverse indicators—such as infrastructure overlaps, TTP consistency, malware code similarities, and operational patterns—to determine the responsible threat actor. Utilizing structured methodologies like Analysis of Competing Hypotheses (ACH) and the Diamond Model, users can build confidence-weighted assessments to enhance threat intelligence accuracy.

This skill analyzes DNS query logs to detect sophisticated threats such as data exfiltration via DNS tunneling, Domain Generation Algorithm (DGA) usage, and covert Command and Control (C2) channels. It utilizes advanced techniques like entropy analysis, query volume anomaly detection, and subdomain length analysis within SIEM platforms, helping SOC teams identify threats that bypass traditional network security controls.

This guide details the comprehensive process of using the Linux Audit framework (auditd) to detect advanced security threats. It covers deploying specific rules to monitor critical system files, detecting unauthorized privilege escalation, process injection, and suspicious system calls. Users can then leverage ausearch and aureport to efficiently query, reconstruct timelines, and summarize findings for forensic analysis and compliance auditing.

Comprehensive digital forensic analysis guide for Linux systems. It covers the collection and examination of critical artifacts such as authentication logs, shell histories, user configurations, system files (passwd, shadow), and persistence mechanisms to effectively detect security compromises, unauthorized access, and malicious activity.

Examines packet captures, Zeek logs, and NetFlow data to uncover C2 channels, lateral movement, and exfiltration during security incidents, guiding analysts through capture, filtering, and IOC extraction workflows.