Skill UI

This skill guides the development of EarLLM One, a complex Android application. The app captures real-time audio from Bluetooth earbuds, transcribes the voice using STT, sends the text input to a Large Language Model (LLM) via a robust pipeline, and plays the response back using TTS. It requires deep knowledge of Kotlin, Android development, Bluetooth profiles (A2DP/HFP), and advanced audio routing.

Live SEO data via DataForSEO MCP server: SERP analysis, keyword research, backlink profiles, on-page and competitor analysis, AI visibility tracking, and domain analytics across 79+ tools.

Provides an X/Twitter-focused growth engine that audits profiles, researches competitors, engineers viral tweets and threads, and decodes algorithm signals so creators can plan posting strategies and maximize engagement.

Guides social selling by combining profile optimization, Sales Navigator targeting, and content-to-conversation flows so LinkedIn engagement turns into qualified pipeline meetings without touching technical implementation.

A specialized tool designed for incident responders and threat hunters. It extracts critical configuration data—such as C2 server addresses, malleable profiles, watermarks, and communication settings—from Cobalt Strike beacon payloads found in PE files or memory dumps. This analysis is crucial for mapping attacker infrastructure and improving defensive detection rules.

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

This tool parses and analyzes Cobalt Strike Malleable C2 profiles, extracting critical network indicators such as HTTP/DNS transforms, URIs, headers, jitter, and sleep cycles. It is essential for reverse-engineering captured profiles or building robust network detection signatures for threat hunting and incident response.

This comprehensive skill scans Linux systems for various persistence vectors, including crontab entries, systemd units, LD_PRELOAD injections, and shell profile modifications. It correlates these findings with auditd logs to build a detailed installation timeline, which is critical for incident response and threat hunting to detect hidden backdoors.

This system maps advanced persistent threat (APT) group TTPs to the MITRE ATT&CK framework. Utilizing the attackcti library to query STIX/TAXII data, it generates specialized ATT&CK Navigator layer files. It is essential for security analysts to profile threat actors, visualize comprehensive coverage heatmaps, and precisely assess detection gaps against sophisticated adversaries.

A comprehensive skill for building detailed threat actor profiles. It systematically collects and correlates intelligence from diverse open-source sources, including vendor reports, dark web forums, social media, and code repositories. The resulting structured dossiers map adversary motivations, capabilities, infrastructure, and Tactics, Techniques, and Procedures (TTPs), enabling robust attribution and defensive planning.

This guide outlines the process of passive external reconnaissance using Open Source Intelligence (OSINT) techniques. Users can map an organization's digital footprint by gathering comprehensive data, including DNS records, subdomains, certificate transparency logs, social media profiles, and leaked credentials. It is critical for the planning phase of penetration testing, asset mapping, or preparing for social engineering, all without actively interacting with target systems.

This skill guides the creation of a foundational red team engagement plan. It covers defining the scope, establishing detailed Rules of Engagement (ROE), selecting MITRE ATT&CK-aligned threat profiles, and defining operational timelines. It is essential for conducting large-scale, assumed-breach, or objective-based offensive security testing.