Skill UI

This playbook guides SOC analysts through the structured triage of security incidents. It ingests alerts from SIEM platforms (Splunk, Elastic), enriches data using threat intelligence (VirusTotal, AbuseIPDB), classifies the incident type, and calculates a severity score based on asset criticality and data sensitivity. It culminates in creating structured incident tickets and notifying the appropriate response teams via paging systems, ensuring a comprehensive and standardized incident response workflow.

A structured methodological framework for prioritizing vulnerabilities beyond raw CVSS scores. It utilizes CISA’s SSVC model, integrating real-time data like exploitation status (CISA KEV), EPSS scores, and technical impact to assign actionable outcomes: Track, Track*, Attend, or Act. Essential for mature security operations and remediation planning.

A structured framework for performing initial security incident triage. It guides analysts through classifying incident types using established standards like NIST SP 800-61r3, assigning business impact severity (P1-P4), enriching alerts with threat intelligence, and determining containment and escalation paths. Use when SIEM/EDR alerts require human judgment or when coordinating multiple concurrent security events.

This skill manages comprehensive software development life cycle operations—including issue triage, PR reviews, version releases, bug fixing, and marketing content generation. It operates using a parallel "agent army" of dynamic agents (10-20 per task), requiring the user to adopt an Engineering Manager (EM) mindset. Key principles involve rigorous citation checking (anti-hallucination) and applying multiple roles (Product Owner, Open Source Contributor, Architect) simultaneously to ensure robust, safe, and user-centric outcomes across all platforms.

This skill manages the end-to-end operational workflow for corporate email communication. It is focused on the mechanics of the mailbox itself, allowing users to triage inboxes, draft replies, send messages, and verify successful delivery. It ensures that all actions are context-aware, adhering to brand voice, and providing verifiable proof of the message's final status (e.g., Sent or Drafted).

This skill provides comprehensive automation for managing GitHub workflows across the entire development lifecycle. It covers detailed issue triage, PR review status checks, CI/CD failure debugging, official release management, and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and streamlining team development processes.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This guide provides a systematic, structured approach for debugging complex technical issues, such as failing tests, broken builds, or unexpected runtime errors. It teaches the 'Stop-the-Line' rule and utilizes a comprehensive triage checklist (Reproduce, Localize, Reduce, Fix, Guard, Verify) to ensure root causes are found and prevented from recurring.

Provides Gmail access through the gws Gmail CLI, letting you manage messages, drafts, labels, threads, and watches while helper commands handle sending, triage, replying, forwarding, reading, and streaming new mail.

Provides a quick CLI summary of unread Gmail inbox messages (sender, subject, date), letting you limit results, filter queries, and optionally show labels for productivity workflows.

Fetches this week’s meeting agenda and unread Gmail count via `gws workflow +weekly-digest`, delivering a read-only productivity snapshot that supports json/table/yaml/csv outputs for fast triage.

This expert system is designed to act as an Arch Linux specialist, diagnosing and resolving complex system issues using best practices for rolling-release distributions. It guides users through step-by-step triage plans, leveraging native tools like pacman, systemctl, and journalctl. It provides actionable, copy-paste-ready commands for remediation, verification, and cleanup, ensuring stable system recovery.