Skill UI

This skill automates the extraction of actionable items, commitments, and follow-ups from meeting notes (e.g., Granola, Grain). It creates structured tasks in Todoist, updates task status, and drafts follow-up emails. Ideal for running daily or post-meeting cron jobs to ensure all commitments are tracked and executed.

This skill generates a comprehensive daily digest summarizing all critical pending items into a single summary. It aggregates stalled scheduling threads, unanswered emails, pending introductions/follow-ups, open Todoist tasks, and upcoming calendar events from multiple sources. It is essential for running a daily summary cron job or when the user requires a quick status check on their workload and commitments.

This skill monitors Todoist for tasks that are due or overdue and require follow-up (email, ping, etc.). It automatically drafts highly contextual emails by combining task descriptions, retrieved meeting transcripts (from Granola/Grain), and prior email history. Drafts are created directly in Gmail and the user is notified via WhatsApp, saving significant time on manual follow-ups and ensuring context-aware communication.

This skill provides a comprehensive workflow for detecting and analyzing malware persistence mechanisms on Windows systems. It automates the use of Sysinternals Autoruns via scripting to scan hundreds of Auto-Start Extensibility Points (ASEPs), including registry keys, services, scheduled tasks, and drivers. The process flags suspicious entries like unsigned binaries, suspicious paths, or dangerous command-line arguments, making it an essential tool for security incident response and threat hunting.

A robust framework for orchestrating complex, multi-step coding tasks using multiple AI agents. It functions by first planning the entire project into a mission dependency graph (DAG), then dispatching specialized agents to isolated Git worktrees for parallel development. The system automatically monitors progress, handles merges, and generates structured, comprehensive reports detailing changes, completed tasks, and next steps.

This skill provides a structured methodology for detecting persistence and lateral movement via malicious scheduled tasks. It utilizes Sysmon Event IDs (1, 11) and Windows Security Events (4698/4702) to correlate process creation, task file writes, and task registration details. Ideal for threat hunting and building robust detection rules for T1053.005.

This guide details a systematic methodology for proactive threat hunting across Windows endpoints. It focuses on identifying various adversary persistence techniques, such as registry modifications (Run Keys), malicious services, WMI event subscriptions, and scheduled tasks. It is essential for incident response, security audits, and improving detection coverage against dormant backdoors.

This guide provides a structured methodology for proactively hunting adversaries who establish persistence using Windows Scheduled Tasks (T1053). It outlines the necessary prerequisites (EDR, SIEM, Sysmon) and a comprehensive workflow—from hypothesis formulation to threat correlation—for detecting suspicious task creation, unusual scheduling patterns, and attacker TTPs during incident response or red teaming.

A comprehensive threat hunting methodology designed to detect adversary persistence and execution mechanisms utilizing Windows Scheduled Tasks (T1053.005). This guide covers analyzing task creation events (Event ID 4698), suspicious properties, unusual triggers, and correlating activity with process execution logs (Sysmon). Ideal for incident responders and security analysts conducting proactive threat hunting on compromised endpoints.

This skill provides a systematic methodology for investigating malware persistence mechanisms across Windows and Linux systems. It covers analyzing critical areas like the Windows Registry (SYSTEM, SOFTWARE, Run keys), Scheduled Tasks, and WMI artifacts. Use it during incident response, threat hunting, or digital forensics to ensure all unauthorized startup entries are found and remediated.

Automates complex red team operations using the Covenant C2 framework. This guide covers the entire lifecycle of authorized adversary simulation, including configuring HTTP/HTTPS listeners, deploying agents (grunts), executing tasks remotely, and tracking lateral movement. It is essential for performing comprehensive penetration testing and security auditing.

An interactive tool designed to discover, select, and assemble specialized teams of AI agents. It supports structured agent collections across different domains (e.g., Engineering, Marketing). Users select multiple roles for a specific task, and the skill launches them in parallel, synthesizing their independent findings into a unified report, including consensus and conflict analysis.