Skill UI

Guides CTOs and tech leaders through strategy, architecture governance, team scaling, and crisis response, with workflows for technical debt assessment, ADR creation, and vendor evaluation to keep engineering healthy.

Transforms messy invoices, receipts, and bank docs into structured folders by reading files, extracting vendors, dates, amounts, and descriptions, renaming them consistently, and sorting copies ready for tax prep or accountant handoff.

SkyPilot orchestrates ML training, batch jobs, and serving across 20+ clouds with automatic cost-aware region selection, spot-instance recovery, managed clusters, and GPU-aware distributed training, letting you optimize spend and avoid vendor lock-in.

PyLabRobot is a vendor-agnostic, pure Python SDK designed for autonomous and automated laboratory workflows. It provides a unified interface to control a wide array of laboratory equipment, including liquid handling robots (Hamilton, Opentrons, Tecan), plate readers, pumps, shakers, and incubators. Ideal for developing complex, multi-device, reproducible protocols and simulating experiments before physical execution.

Guides the full Odoo purchase cycle from RFQ through PO, receiving, and vendor billing, covering approvals, agreements, vendor price lists, automation, and 3-way matching so procurement teams can configure, enforce, and troubleshoot workflows.

Standardized expert guidance for return authorization, inspection, grading, disposition decisions, refunds, fraud detection, and vendor recovery in retail and e-commerce operations.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

This skill provides a systematic methodology for building comprehensive threat actor profiles using Open-Source Intelligence (OSINT). It involves gathering, correlating, and analyzing publicly available data from diverse sources (e.g., vendor reports, dark web forums, code repositories). Users can map adversary TTPs to MITRE ATT&CK, assess motivations, and build structured dossiers for proactive defensive strategies and attribution assessments.

This skill guides the comprehensive evaluation and selection of Threat Intelligence Platforms (TIPs). It assesses vendor capabilities, including STIX/TAXII support, workflow automation, SIEM/SOAR integration, and total cost of ownership. It is essential for procurement decisions, migrating between TIP solutions, or assessing whether the current CTI program meets required maturity levels.

This skill provides a structured framework for implementing patch management in Operational Technology (OT) and Industrial Control Systems (ICS) environments. It addresses the critical balance between cybersecurity remediation and maintaining continuous operational safety and availability. Key components include risk-based patch prioritization, vendor compatibility testing, staged deployment through test environments, managing maintenance windows, and implementing compensating controls for unpatchable assets.

This skill provides a comprehensive guide to implementing secure, defense-in-depth remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers best practices such as using jump servers, implementing Multi-Factor Authentication (MFA), session recording, and adhering to standards like IEC 62443 and NERC CIP-005 for vendor and operator access.

This guide details implementing an IEC 62443 compliant conduit architecture for secure remote access into Operational Technology (OT) environments. It mandates the use of jump servers, MFA gateways, session recording, and approval workflows within a DMZ to strictly control vendor and engineer access, eliminating direct VPN connections to critical ICS assets.