Skill UI

This skill guides the process of designing, implementing, and validating advanced security detection use cases for Security Information and Event Management (SIEM) platforms like Splunk, Elastic, and Microsoft Sentinel. It focuses on mapping organizational threat profiles to the MITRE ATT&CK framework to build formal, high-fidelity detection rules, thereby strengthening Security Operations Center (SOC) coverage and reducing blind spots.

A comprehensive guide for performing systematic security assessments on web applications. Following the OWASP Web Security Testing Guide (WSTG), this process identifies critical vulnerabilities such as broken authentication, authorization flaws (IDOR), SQL injection, and Cross-Site Scripting (XSS). The workflow covers reconnaissance, mapping, and advanced testing techniques using tools like Burp Suite and sqlmap, ensuring deep coverage beyond automated scanner capabilities. Ideal for pre-production security validation and compliance audits.

This playbook guides Security Operations Center (SOC) analysts through a comprehensive, multi-step process for triaging and prioritizing security incidents. It covers receiving alerts from SIEM/EDR, enriching data using threat intelligence feeds (VirusTotal, AbuseIPDB), classifying the incident type (MITRE ATT&CK mapping), and calculating a severity score based on asset criticality and data sensitivity. The workflow culminates in automating ticket creation and triggering immediate response procedures via tools like PagerDuty.

This guide teaches how to decompose large, complex requirements or specifications into a sequence of small, verifiable, and implementable tasks. It emphasizes techniques like vertical slicing and dependency mapping to ensure a structured, reliable, and testable development process, preventing scope creep and vague outputs.

This specialized skill automates the process of converting visual designs (from Stitch) into high-quality, modular React and Vite components. It adheres to modern frontend best practices, enforcing logic isolation via custom hooks, data decoupling using mock data files, and ensuring type safety with TypeScript interfaces. The workflow includes automated asset fetching, style mapping (Tailwind), and rigorous validation cycles to produce production-ready, maintainable code.

This guide provides a reference architecture for automating the design-to-code workflow. It outlines the complete pipeline—from Figma design input to structured React/Vue output—detailing components like Figma API integration, code generation, and crucial post-processing steps (token mapping, normalization). Ideal for establishing scalable design systems and managing large-scale design handoffs in a professional environment.

This advanced script offers a comprehensive solution for migrating project management data into ClickUp. It facilitates importing structured data from major external tools like Jira, Asana, and Trello, or moving data between disparate ClickUp workspaces. The process handles complex data mapping (e.g., Boards to Spaces, Issues to Tasks), custom fields, and ensures the integrity of hierarchical project structures.

This workflow integrates with the Ramp API to manage corporate card transactions and expenses. It allows users to list, filter, and retrieve detailed transaction data, and crucially, sync these expenses directly to an accounting system (ERP). The process includes mapping transactions to general ledger accounts, making it ideal for finance teams handling expense reconciliation and accounting processes.

A comprehensive playbook for API reconnaissance and documentation review. Use this skill early in the testing process to enumerate all reachable endpoints, extract schemas, identify hidden versions (e.g., v1, v2, mobile), and discover undocumented parameters or fields across REST, GraphQL, and mobile APIs. Essential for mapping the full attack surface before deeper exploitation.

This advanced orchestrator manages complex internal business workflows, covering process mapping, vendor management, capacity planning, and procurement optimization. It acts as a central router, classifying multi-signal inquiries and delegating tasks to specialized sub-skills (e.g., knowledge-ops, vendor-management). It follows a structured, depth-first workflow and returns actionable, digested reports anchored in documentation and next steps.

A specialized tool for internal operations leaders to document complex, end-to-end business workflows (e.g., procurement, onboarding, claims adjudication) using BPMN-style notation. It applies Lean and Six Sigma principles to measure cycle time, quantify value-add ratios, and deterministically identify process bottlenecks and root causes, moving beyond simple pipeline tracking.

This tool assists researchers in structuring academic papers by mapping specific claims across different sections (Introduction, Method, Results, Discussion) to required external citations (BibTeX keys). It enforces citation density rules and ensures the correct role alignment (e.g., background, comparison, limitation) before the actual drafting process, guaranteeing that every core claim is properly supported and distributed.