Skill UI

A comprehensive domain orchestrator designed to manage the entire project delivery lifecycle. It can route specific project management inquiries (e.g., Jira permissions, sprint velocity) to specialized sub-skills, or execute complex, goal-oriented workflows through a gated agentic loop. This process pulls live data from Jira/Atlassian, runs deterministic analytics, and verifies every step to ensure auditability and successful closure.

This utility converts a single, high-level objective into a comprehensive, step-by-step build plan suitable for complex, multi-agent, or multi-session engineering projects. It automatically handles dependency mapping, detects parallel steps, and structures each step with self-contained context briefs, ensuring any new agent can execute it without prior knowledge. Ideal for large-scale refactoring or feature development spanning multiple PRs.

This blueprint guides the creation of F.R.I.D.A.Y., a tactical, low-latency voice assistant inspired by Iron Man. It utilizes the specialized Pipecat framework to orchestrate a comprehensive, real-time audio pipeline: STT (OpenAI Whisper/GPT-4o) -> LLM (Gemini) -> TTS (OpenAI Nova). Ideal for developers needing to build advanced, multi-provider, conversational voice applications.

A structured methodology for de-risking product ideas and validating market opportunities. This framework guides teams through defining measurable outcomes, building Opportunity Solution Trees (OST), mapping critical assumptions (Desirability, Viability, Feasibility), and planning rigorous experiments (prototyping, interviews, usability tests) before committing to full development resources. Ideal for discovery sprints and pre-build validation.

Blueprint for B2B lead enrichment that sequences waterfalls, ICP scoring layers, and verification pipelines to maximize coverage, boost intent alignment, and keep cost per verified contact low.

Analyzes behavioral reports from security sandboxes (Cuckoo, AnyRun) to detect advanced anti-analysis and evasion techniques. It specifically identifies indicators such as timing checks, hypervisor artifact queries, user interaction patterns, and environment fingerprinting. This tool is essential for threat hunting, enhancing detection rules, and conducting deep malware triage.

This tool provides a comprehensive framework for analyzing web server logs (Apache/Nginx) to detect various security threats. It uses advanced regex matching against OWASP attack signatures to identify SQL injection, Local File Inclusion, and Directory Traversal attempts, alongside behavioral analysis for brute-force attacks and web scanner fingerprints. The system also enriches data using GeoIP for source attribution, generating a prioritized report for SOC analysts.

This guide outlines the process of passive external reconnaissance using Open Source Intelligence (OSINT) techniques. Users can map an organization's digital footprint by gathering comprehensive data, including DNS records, subdomains, certificate transparency logs, social media profiles, and leaked credentials. It is critical for the planning phase of penetration testing, asset mapping, or preparing for social engineering, all without actively interacting with target systems.

A comprehensive guide for authorized penetration testing, demonstrating how to identify and exploit critical vulnerabilities in the SMB protocol (e.g., EternalBlue, PrintNightmare). This skill covers network enumeration, lateral movement techniques (Pass-the-Hash, SMB Relay), and post-exploitation activities using Metasploit and Impacket tools to assess enterprise network security posture.

A comprehensive guide detailing the process of identifying and exploiting SQL injection vulnerabilities in web applications. The content covers manual and automated techniques, including error-based, boolean, and time-based blind injections. Users learn to fingerprint major database engines (MySQL, MSSQL, Oracle) and utilize tools like sqlmap to demonstrate data extraction and security risks during authorized penetration tests.

A proactive, hypothesis-driven skill designed to hunt for Advanced Persistent Threats (APT) within complex enterprise environments. It analyzes endpoint telemetry, network logs, and memory artifacts using frameworks like MITRE ATT&CK. Use this skill when investigating anomalous behavior flagged by UEBA, conducting scheduled threat sprints, or validating exposure to known TTPs using tools like Velociraptor and osquery.

This skill provides comprehensive methods to detect Cobalt Strike beacon command-and-control (C2) traffic. It uses advanced network forensics techniques, including analyzing default TLS certificates (e.g., serial 8BB00EE), JA3/JA3S fingerprints, HTTP malleable profiles, and beacon interval jitter, leveraging Zeek logs, Suricata rules, and Python PCAP analysis. It is essential for threat hunters and SOC analysts investigating sophisticated C2 communications.