Skill UI

This tool is designed to help optimize and refine prompts used with Large Language Models (LLMs). By structuring inputs, it ensures that the instructions given to AI systems are clear, comprehensive, and contextually rich, resulting in significantly higher quality and relevance of the generated output. Useful for developers, writers, and researchers.

A comprehensive, multi-stage workflow for enhancing and structuring raw footage using advanced AI tools. It covers the entire pipeline—from initial recording (Screen Studio) through AI planning (Claude/Codex), deterministic cutting (FFmpeg), compositing (Remotion), asset generation (ElevenLabs/fal.ai), and final human polish (Descript/CapCut). Designed for users creating vlogs, tutorials, or polished corporate videos.

Guides solo founders through end-to-end GTM decisions, stacking affordable AI-supported tools, designing agent workflows, allocating their most precious time, and knowing when to hire so they can scale go-to-market without adding headcount.

A comprehensive collection of six expert-level, structured workflows designed to elevate AI assistance from ad-hoc querying to repeatable, production-grade engineering practices. Users can evaluate prompts, design RAG architectures, plan context budgets, run security audits, build eval harnesses, and coach product strategy.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

This tool is designed to analyze complex Machine Learning experiment results from various sources (JSON/CSV). It computes detailed statistics, builds comprehensive comparison tables across hyperparameter variations, and generates structured, actionable insights. It helps researchers interpret findings, identify trends, and propose next steps for research.

Hindsight is an open-source digital forensics tool designed to parse and correlate artifacts from Chromium-based browsers (Chrome, Edge, Brave, Opera). It extracts comprehensive data, including browsing history, cookies, download records, autofill data, and saved passwords, generating unified, chronological timelines essential for incident response, insider threat investigation, and digital forensics cases.

A specialized tool designed for incident responders and threat hunters. It extracts critical configuration data—such as C2 server addresses, malleable profiles, watermarks, and communication settings—from Cobalt Strike beacon payloads found in PE files or memory dumps. This analysis is crucial for mapping attacker infrastructure and improving defensive detection rules.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

A comprehensive guide on building a unified Threat Intelligence Platform (TIP). This skill covers deploying and integrating multiple core CTI tools (MISP, OpenCTI, TheHive, Cortex) into a single system. Learn to design the architecture, configure feed ingestion pipelines, automate IOC enrichment, and ensure standardized intelligence sharing using STIX/TAXII standards.

This comprehensive skill guides users through designing and executing advanced social engineering penetration tests. It covers simulating real-world attacks, including phishing (email), vishing (voice), smishing (SMS), and physical pretexting. The goal is to measure an organization's human security resilience, identify training gaps, and test security controls across multiple vectors using tools like GoPhish and SET.