Skill UI

Chainsaw is a fast, Rust-based forensic tool designed for first-response threat hunting. It analyzes collected Windows EVTX files using the comprehensive Sigma rule corpus, built-in detection rules, and high-speed keyword/regex searching. Furthermore, it uniquely analyzes critical artifacts such as shimcache, SRUM, and event-log gaps, providing robust, offline detection capabilities without needing a SIEM pipeline. It is essential for digital forensic triage and hypothesis confirmation.

A comprehensive guide for threat hunters focusing on detecting stolen session cookies and OAuth/PRT token replay (T1550.001). This skill teaches correlation techniques across Microsoft Entra ID SigninLogs and Okta System Logs, enabling the detection of impossible travel, refresh-token reuse, and anomalous lateral movement within federated SaaS environments. Essential for post-phishing or post-compromise investigations.

KAPE (Kroll Artifact Parser and Extractor) is a specialized, rapid triage tool for incident response. It collects specific, volatile forensic artifacts (like registry hives, event logs, and browser data) from compromised Windows systems. It is designed for remote, at-scale artifact collection when full disk imaging is impractical, enabling analysts to quickly build a defensible, parseable dataset for initial investigation and containment.

Workthreads analyzes a team's coding history across multiple repositories to generate a structured weekly status report. It clusters raw logs into 'work threads' and automatically tags their lifecycle status (new, open loops, closed, reverted). This is essential for leads needing a high-level, actionable summary of project progress, outstanding tasks, and completed features without reading thousands of lines of raw activity.

A specialized diagnostic skill designed to analyze failing GitHub Actions workflow logs. It identifies the root cause of crashes, such as missing secrets, environment mismatches, or deprecated syntax. The output provides precise YAML or code diffs required to fix the pipeline and optimize CI/CD processes.

A comprehensive guide on creating developer-centric changelogs and release notes. Learn how to structure updates using Semantic Versioning and the Keep a Changelog format. This skill helps communicate new features, breaking changes, deprecations, and performance improvements in a way that developers genuinely care about, building trust and demonstrating product momentum.

A sophisticated presentation template designed for technical content, mimicking the clean, professional aesthetic of GitHub blogs or product changelogs. It features a dark GitHub-dark background, vibrant purple and blue radial ambient lighting, a multi-color gradient title, and dedicated GitHub-style code blocks. Perfect for tech talks, deep-dive tutorials, and developer documentation.

A comprehensive team management dashboard designed for operational oversight. It features three main tabs: Members, Team Details, and Activity Log. The dashboard provides key performance indicator (KPI) statistics, role distribution charts, online presence tracking, and activity logs. It supports data export to CSV, making it an ideal tool for monitoring team performance and operations.

A specialized tool for generating long-form content, including guides, blogs, and tutorials, that maintains a unique, human-like brand voice. It ensures structural integrity and factual accuracy, preventing the generic, boilerplate feel often associated with raw LLM output. Ideal for content teams needing sophisticated, reliable narrative development.

A high-performance utility for executing simple, deterministic code transformations (e.g., removing console logs, converting var to const). This engine leverages a WASM core to perform structural refactoring sub-millisecond, without calling any expensive LLM APIs. Ideal for CI/CD pipelines, automated bulk refactoring, and cost-sensitive development workflows where determinism and speed are paramount.

A Stop hook that mechanically blocks Claude from finishing until quality checks pass. Detects rationalization patterns, stale learning logs, and low disk space using deterministic checks. Enforces learning capture habits for complex tasks.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.