Skill UI

This skill provides comprehensive capabilities for web searching, content extraction, and web crawling using the Tavily API. It is ideal for tasks requiring up-to-date information retrieval, deep content scraping from specific URLs, or comprehensive website crawling for research purposes, making it a powerful research augmentation tool.

Comprehensive guide for creating, managing, and automating preview deployments on Vercel. Learn how to utilize both the CLI and REST API to deploy unique, temporary environments for specific branches or pull requests. This is essential for pre-production testing, integrating into CI/CD pipelines, and sharing stable preview URLs with stakeholders before merging to main.

Extract transcripts from YouTube videos, validate URLs and availability, then use STAR+R-I-S-E with youtube-transcript-api to craft comprehensive summaries and documentation for lectures, tutorials, and informational clips.

VideoDB ingests files, URLs, RTSP feeds, or desktop captures to build searchable visual and spoken indexes, edit timelines with overlays/subtitles, generate media, and emit realtime alerts for monitoring workflows.

This skill guides the process of auditing and correcting critical HTML metadata elements, ensuring optimal performance for search engines and social media sharing. It covers page titles, meta descriptions, canonical URLs, Open Graph tags, Twitter cards, favicons, JSON-LD structured data, and robots directives. Use this when implementing or refining SEO metadata, fixing broken social previews, or setting up structured data.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.

This skill guides users through analyzing suspicious URLs using the URLScan.io platform or API. It provides a safe environment to capture screenshots, DOM content, network traffic, and analyze JavaScript behavior to investigate phishing attempts, credential harvesting, and sophisticated malicious redirects without risking the analyst's system.

This pipeline provides an automated solution for processing raw Indicators of Compromise (IOCs) from various sources, including IPs, domains, URLs, and emails. It performs crucial steps such as normalization, deduplication, and defanging (modifying indicators to prevent accidental execution while preserving readability). The final, processed data is converted into the standardized STIX 2.1 format and can be securely distributed via TAXII servers or MISP instances, streamlining threat intelligence sharing.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.

This comprehensive guide details the multi-step workflow for responding to sophisticated phishing incidents. It covers everything from initial triage and detailed email header analysis to analyzing malicious URLs and attachments in sandboxes. Key steps include determining the scope of impact, implementing immediate containment actions (like purging emails and revoking sessions), and executing thorough remediation to neutralize the threat and recover affected accounts.

Master the creation of a two-tier Public Key Infrastructure (PKI) Certificate Authority hierarchy—including an offline Root CA and an operational Intermediate CA. This skill guides you through using OpenSSL and Python cryptography to manage X.509 certificate issuance, configure Certificate Revocation Lists (CRLs), set up OCSP responders, and enforce strict certificate policies. Essential for deploying robust trust anchors for TLS, code signing, or client authentication.

This guide details advanced methods for detecting and preventing QR code phishing (quishing) attacks. It covers how malicious URLs embedded in images bypass traditional email security filters, requiring multimodal AI, OCR, and robust mobile threat defense solutions. Essential for SOC analysts and security teams.