Skill UI

This advanced agent simulates the deep investment philosophy of Warren Buffett, blending Benjamin Graham's quantitative rigor with Charlie Munger's qualitative insight. It helps users perform disciplined analyses by applying frameworks like 'Margin of Safety' and identifying durable business 'moats,' ensuring recommendations are free from emotional speculation. Ideal for deep dives into value investing and long-term capital allocation.

This framework outlines the 'Hook Model' (Trigger, Action, Variable Reward, Investment) for building deeply engaging, habit-forming product loops. It guides designers in optimizing user retention, understanding behavioral psychology, and structuring product features to move users from deliberate usage to automatic, routine behavior. Use it for onboarding, feature design, and improving long-term user stickiness.

Analyze existing XML sitemaps or generate new ones from industry templates. Validates XML format, URL status, lastmod accuracy, size limits and extension sitemaps for images, videos and news, then reports issues by severity.

Execute deep, stealthy red team exercises that emulate real-world sophisticated adversaries. This process maps attacks to the MITRE ATT&CK framework, testing an organization's entire security posture—including detection, incident response, and containment capabilities (Blue Team). It is designed for simulating full attack lifecycles (initial access, lateral movement, exfiltration) to validate security investments and meet regulatory requirements (TIBER-EU, CBEST). Requires executive authorization and defined Rules of Engagement.

This skill guides Security Operations Center (SOC) teams through structured threat modeling using the MITRE ATT&CK framework. It enables mapping adversary Tactics, Techniques, and Procedures (TTPs) against organizational assets to identify critical detection coverage gaps, prioritize defensive investments, and improve overall security posture. Ideal for risk assessment, purple teaming, and compliance planning.

A comprehensive guide for performing structured API security testing using Postman. It covers critical OWASP API Security Top 10 vulnerabilities, including BOLA, authentication bypass, and injection flaws. Ideal for building repeatable security regression tests, simulating multi-role user access, and integrating automated validation into CI/CD pipelines via Newman and OWASP ZAP.

A comprehensive guide simulating real-world attacks against internet-facing infrastructure (firewalls, web servers, DNS, etc.). It covers the entire penetration testing lifecycle, including passive and active reconnaissance, vulnerability scanning (using tools like Nmap, Nessus, and Nuclei), manual validation, and simulated exploitation, adhering to standards like PTES and OSSTMM.

This skill provides advanced techniques for bypassing SSL/TLS certificate pinning in Android and iOS applications. It supports interception of HTTPS traffic during authorized security assessments, covering pinning mechanisms like OkHttp, TrustManager, NSURLSession, and utilizes tools such as Frida and Objection for comprehensive testing.

Conducts comprehensive, sector-specific threat landscape assessments by profiling key threat actors, mapping attack vectors, and detailing associated MITRE ATT&CK TTPs (covering financial, healthcare, energy, etc.). Utilizing sophisticated data analysis via Python stacks and integrating real-time threat intelligence feeds (ISAC, CVEs), this tool generates highly actionable intelligence for risk management, security investment prioritization, and high-level board-level reporting on industry exposure.

Scans a company or sector for hiring, funding, product, team, market, and tech signals using CLAUDE web search and Python scoring to surface investment readiness, momentum, and competitive risks for VC deal sourcing.

Assistant for venture fund administrators: ingests capital calls, investments, and cash flows to compute KPIs (TVPI, DPI, IRR, MOIC), model carry/fees, and draft LP quarterly updates via Claude Code + Python.

Hard screening skill runs deterministic VC analyses where Claude gathers context, Python scores/formats, and the pipeline produces auditable verdicts with investment thesis guidance.