Skill UI

A comprehensive guide for setting up a local development loop to test AI agent integrations. This skill teaches developers how to build and debug webhook receivers, callback handlers, and associated application code that interacts with a cloud-hosted AI agent (like Lindy). It requires using tunneling services (e.g., ngrok) to expose local endpoints for receiving webhooks and simulating the entire agent-to-application data flow.

Automates Ngrok operations through Composio’s Ngrok toolkit via Rube MCP, guiding discovery, connection checks, schema-aware executions, and pagination-safe workflows for reliable tunnel management.

Guides SSH service security assessments from discovery, enumeration, credential attacks and key testing to tunneling, vulnerability exploitation, and reporting deliverables.

Configure Playwright projects to run on BrowserStack’s cloud grid, add dedicated scripts, fetch builds and sessions, and report per-browser results so you can automate cross-browser/device testing with tunnel support.

This skill analyzes DNS query logs to detect sophisticated threats such as data exfiltration via DNS tunneling, Domain Generation Algorithm (DGA) usage, and covert Command and Control (C2) channels. It utilizes advanced techniques like entropy analysis, query volume anomaly detection, and subdomain length analysis within SIEM platforms, helping SOC teams identify threats that bypass traditional network security controls.

A comprehensive tool for detecting and analyzing covert communication channels used by sophisticated malware. It focuses on identifying anomalies in network traffic, such as DNS tunneling, ICMP exfiltration, and steganographic HTTP abuse, which are used for Command and Control (C2) communication and data exfiltration. Ideal for security incident response, threat hunting, and building advanced network detection rules.

Provides a comprehensive guide to configuring pfSense firewall rules, NAT policies, and VPN tunnels. It details best practices for enforcing network segmentation (DMZ, LAN, Guest, IOT), controlling traffic flow, and protecting internal network zones in SMB and enterprise environments. Covers VLAN setup, DHCP/DNS management, and granular access control.

This comprehensive guide details how to implement a Zero Trust Network Access (ZTNA) solution using Cloudflare Access and Cloudflare Tunnel. It provides a secure alternative to traditional VPNs by offering identity-aware, policy-driven access to self-hosted and private applications. The process covers setting up tunnels, integrating major Identity Providers (Okta, Azure AD), and enforcing granular access policies.

This skill provides a comprehensive framework for detecting data exfiltration attempts that utilize DNS tunneling. It analyzes DNS logs for anomalies such as high Shannon entropy in subdomains, excessive query volume, abnormal query lengths, and misuse of TXT/CNAME records. It is ideal for SOC analysts and security engineers building advanced threat detection rules and performing threat hunting.

This skill provides a methodology to detect data exfiltration attempts hidden within DNS queries. By analyzing Zeek dns.log files, the agent computes Shannon entropy of subdomains, flags unusually long labels, and monitors unique subdomain counts per parent domain. This technique is crucial for identifying malicious tunneling tools like dnscat2 or iodine that bypass traditional security controls.

This skill provides a comprehensive guide to deploying Zeek (formerly Bro) for passive network security monitoring. It details how to generate structured logs (DNS, HTTP, SSL, etc.) and write custom Zeek scripts to detect sophisticated anomalies like DNS tunneling and beaconing. Ideal for threat hunting, security incident response, and complementing traditional IDS solutions.

This comprehensive guide outlines methods to identify and exploit specific IPv6 vulnerabilities, including SLAAC spoofing, Router Advertisement (RA) manipulation, and Neighbor Discovery Protocol (NDP) attacks. It is designed strictly for authorized penetration testing to assess dual-stack security controls, detect unauthorized tunnels (like Teredo or 6to4), and validate network defenses against IPv6-specific threats. Always obtain explicit written authorization before use.