Skill UI

This skill provides a comprehensive guide to integrating STIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Intelligence Information). It covers using Python to consume and produce cyber threat intelligence feeds, including server discovery, object fetching, and parsing of STIX 2.1 objects for integration into SIEM and TIP platforms.

This skill guides the implementation of a structured, six-phase threat intelligence lifecycle. It covers transforming raw data into actionable intelligence by mastering planning, collection, processing, analysis, dissemination, and feedback. Ideal for building mature Cyber Threat Intelligence (CTI) programs and aligning security architecture with compliance standards.

This skill guides Security Operations Center (SOC) teams through structured threat modeling using the MITRE ATT&CK framework. It enables mapping adversary Tactics, Techniques, and Procedures (TTPs) against organizational assets to identify critical detection coverage gaps, prioritize defensive investments, and improve overall security posture. Ideal for risk assessment, purple teaming, and compliance planning.

This skill provides SOC teams with a structured, multi-source workflow to investigate potential insider threats. It correlates data from SIEM, DLP, EDR, and HR feeds to detect data exfiltration attempts (via cloud, USB, email), unauthorized access patterns, and policy violations. It is crucial for building comprehensive investigation timelines, especially when handling departing employees or suspected data theft.

Provides a detailed, multi-platform workflow to monitor long-running computational experiments. It checks the status of jobs across various environments (SSH, vast.ai, Modal), collects screen logs, fetches structured JSON results, and pulls detailed training metrics (loss curves, accuracy) from Weights & Biases (W&B). Essential for MLOps and automated result review.

This advanced skill systematically verifies the novelty of a proposed research method or technical idea against the global body of academic literature. It guides the user to extract core technical claims, performs multi-source searches across major academic databases (e.g., arXiv, Google Scholar, top conferences), and utilizes high-level LLM reasoning to generate a detailed, structured novelty assessment report. Ideal for researchers seeking to validate the unique contribution of their work.

This skill generates a structured, section-by-section outline for academic papers. By synthesizing diverse inputs—including research narratives, auto-review conclusions, and experiment results—it guides researchers in structuring their findings into a cohesive draft plan. It also supports optional style references to align the outline's section structure with specific target venues or published works.

Automatically generates structured academic papers in LaTeX format. By integrating a detailed paper plan, the research narrative, and generated figures, this tool structures the content section by section. It supports major conference and journal templates (e.g., ICLR, NeurIPS, IEEE), manages complex citation fetching via DBLP/CrossRef, and allows structural guidance using reference papers. Ideal for drafting the complete manuscript.

This skill automates the end-to-end academic paper writing process. It transforms raw narrative reports, research ideas, or existing plans into polished, submission-ready LaTeX source and PDF. The comprehensive pipeline includes planning, figure generation, structured writing, compilation, and an advanced improvement loop, allowing users to achieve publication-quality results. Users can optionally guide the structural style using a reference paper.

Perform comprehensive and structured API security testing using Postman. This skill covers testing for OWASP API Security Top 10 vulnerabilities, including authentication bypass, authorization flaws (BOLA), injection, and data exposure. It guides users through setting up multi-role environments, writing automated test scripts for regression testing, and integrating the workflow with CI/CD tools like Newman and OWASP ZAP.

This comprehensive guide outlines a structured workflow for conducting digital forensics investigations across major cloud providers, including AWS, Azure, and GCP. It covers critical steps such as evidence preservation (snapshots, metadata capture), systematic log collection (CloudTrail, Activity Logs, Audit Logs, VPC Flow Logs), and advanced analysis techniques to trace unauthorized accesses and identify root causes of security breaches.

Zeek is a powerful, open-source network security monitoring framework that generates high-fidelity structured logs and metadata from raw network traffic. This skill covers deploying Zeek, analyzing various protocol logs (HTTP, DNS, TLS, etc.), writing custom detection scripts to identify anomalies, and integrating resulting security insights with SIEM platforms for comprehensive threat detection and forensic investigation.