Skill UI

A comprehensive guide for Security Operations Center (SOC) teams to perform proactive threat hunting using Elastic SIEM. This skill teaches advanced techniques like KQL and EQL queries, analyzing event sequences, and investigating anomalies to uncover threats that bypass automated detection rules. Ideal for validating detection coverage gaps and responding to new TTPs based on the MITRE ATT&CK framework.

Conducts comprehensive, sector-specific threat landscape assessments by profiling key threat actors, mapping attack vectors, and detailing associated MITRE ATT&CK TTPs (covering financial, healthcare, energy, etc.). Utilizing sophisticated data analysis via Python stacks and integrating real-time threat intelligence feeds (ISAC, CVEs), this tool generates highly actionable intelligence for risk management, security investment prioritization, and high-level board-level reporting on industry exposure.

This skill performs User and Entity Behavior Analytics (UEBA) to identify anomalous user activities such as impossible travel, unusual access patterns, and privilege abuse. It establishes behavioral baselines using SIEM logs and statistical analysis, helping SOC teams detect insider threats and compromised accounts by flagging deviations from normal user behavior. Use when monitoring security hygiene and suspicious activity is critical.

A comprehensive guide and code suite for performing penetration testing on real-time WebSocket APIs (WS/WSS). This tool assesses vulnerabilities including Cross-Site WebSocket Hijacking (CSWSH), missing handshake authentication, message injection, input validation failures, and DoS risks. It guides users through analyzing the handshake process and testing authorization enforcement using Python and specialized tools.

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.

This playbook guides SOC analysts through the structured triage of security incidents. It ingests alerts from SIEM platforms (Splunk, Elastic), enriches data using threat intelligence (VirusTotal, AbuseIPDB), classifies the incident type, and calculates a severity score based on asset criticality and data sensitivity. It culminates in creating structured incident tickets and notifying the appropriate response teams via paging systems, ensuring a comprehensive and standardized incident response workflow.

Provides end-to-end guidance for fine-tuning and serving Physical Intelligence’s OpenPI pi0 family (pi0, pi0-fast, pi0.5) with both JAX and PyTorch backends, covering dataset prep, norm stats, checkpoint conversion, and low-latency WebSocket policy inference for ALOHA, DROID, and LIBERO tasks.

GoldRush API by Covalent lets agents query wallet balances, token prices, transaction history, DEX pairs, and live OHLCV across 100+ chains via REST, CLI, SDK, or WebSocket, avoiding chain-specific plumbing.

A specialized skill for generating production-ready, SEO-optimized visual assets. It handles various use cases including OG social cards, blog hero images, product visuals, and infographics. The system ensures outputs adhere to best practices like specific aspect ratios, schema markup, and file naming conventions, making content publishable and discoverable by search engines.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

This skill provides comprehensive analysis and structured data extraction for academic research papers hosted on Hugging Face and arXiv. It can read paper content in markdown format, retrieve key metadata (authors, abstracts, GitHub repos), and identify linked assets such as associated models, datasets, and Spaces. Use this when the user provides a Hugging Face or arXiv URL, or explicitly requests a summary or explanation of an AI research topic.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.