Skill UI

Codifies best practices for commercial and industrial energy procurement, covering tariff analysis, demand charge management, renewable PPAs, and multi-site cost optimization for load, finance, and sustainability teams.

Guides medical device teams through preparing ISO 13485:2016 Quality Management System documentation by combining gap analysis, requirements references, templates, and step-by-step creation workflows for manuals, procedures, and compliance artifacts.

Advises product leaders on vision, portfolio management, PMF, org design, and metrics so they can prioritize investments, align teams, and report roadmap progress to the board.

Yara Authoring helps security teams write precise YARA rules for threat detection and malware hunting by guiding string/tag management and metadata handling so signature creation keeps pace with investigations.

This workflow guides SOC teams in establishing a comprehensive, structured process for vulnerability management. It utilizes major scanning tools (Nessus, Qualys, OpenVAS) to discover, prioritize, and track remediation of security weaknesses across the infrastructure. It integrates threat intelligence (CISA KEV) and asset criticality into risk scoring, ensuring resources are focused on the most critical threats.

A comprehensive guide to using the Metasploit Framework for advanced penetration testing and vulnerability validation. This skill details how to confirm exploitability of identified CVEs, gather post-exploitation evidence, and validate patch remediation effectiveness. It is essential for risk-based vulnerability management and red team exercises, providing proof of real-world impact beyond simple scanner scores.

Explores how to implement AWS IAM Permission Boundaries to cap the maximum permissions granted to users or roles. This advanced security feature allows security teams to safely delegate IAM management to developers for self-service while strictly enforcing the principle of least privilege and preventing privilege escalation in cloud environments.

This skill automates the process of vulnerability prioritization by querying the FIRST Exploit Prediction Scoring System (EPSS) API. It calculates the real-world probability of a CVE being exploited within 30 days, providing a crucial risk metric that surpasses traditional CVSS severity scoring. Use it for risk-based vulnerability management, allowing security teams to efficiently triage and remediate the most actively threatened vulnerabilities first.

This skill guides the implementation of a full Cyber Threat Intelligence (CTI) program across the six-phase intelligence lifecycle. It covers defining intelligence requirements (PIRs), building collection pipelines, normalizing data, performing analysis, and managing feedback loops. Ideal for maturing existing CTI teams or establishing foundational security intelligence capabilities.

This skill details advanced techniques for performing stealthy lateral movement across Windows domains using Windows Management Instrumentation (WMI). It covers the abuse of native tools like Impacket's wmiexec.py and CrackMapExec, enabling remote command execution, Pass-the-Hash attacks, and fileless techniques, crucial for authorized red team engagements and security auditing.

This guide details the design and configuration of secure, compliant remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers implementing jump server architectures, Multi-Factor Authentication (MFA), Privileged Access Management (PAM), session recording, and adhering to standards like IEC 62443 and NERC CIP-005. Ideal for network architects, security engineers, and operations teams needing to manage third-party vendor access securely.

A comprehensive operational guide for support teams to manage complex customer billing workflows. It assists operators in diagnosing billing anomalies, processing refunds, triaging charges, and recovering customer portals. Use this when investigating billing discrepancies, assessing churn risk, or ensuring accurate subscription state and revenue management.