Skill UI

Guides CTOs and tech leaders through strategy, architecture governance, team scaling, and crisis response, with workflows for technical debt assessment, ADR creation, and vendor evaluation to keep engineering healthy.

Transforms messy invoices, receipts, and bank docs into structured folders by reading files, extracting vendors, dates, amounts, and descriptions, renaming them consistently, and sorting copies ready for tax prep or accountant handoff.

SkyPilot orchestrates ML training, batch jobs, and serving across 20+ clouds with automatic cost-aware region selection, spot-instance recovery, managed clusters, and GPU-aware distributed training, letting you optimize spend and avoid vendor lock-in.

PyLabRobot is a vendor-agnostic, pure Python SDK designed for autonomous and automated laboratory workflows. It provides a unified interface to control a wide array of laboratory equipment, including liquid handling robots (Hamilton, Opentrons, Tecan), plate readers, pumps, shakers, and incubators. Ideal for developing complex, multi-device, reproducible protocols and simulating experiments before physical execution.

Guides the full Odoo purchase cycle from RFQ through PO, receiving, and vendor billing, covering approvals, agreements, vendor price lists, automation, and 3-way matching so procurement teams can configure, enforce, and troubleshoot workflows.

Standardized expert guidance for return authorization, inspection, grading, disposition decisions, refunds, fraud detection, and vendor recovery in retail and e-commerce operations.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

A comprehensive skill for building detailed threat actor profiles. It systematically collects and correlates intelligence from diverse open-source sources, including vendor reports, dark web forums, social media, and code repositories. The resulting structured dossiers map adversary motivations, capabilities, infrastructure, and Tactics, Techniques, and Procedures (TTPs), enabling robust attribution and defensive planning.

This skill guides the comprehensive evaluation and selection of Threat Intelligence Platforms (TIPs). It assesses vendor capabilities, including STIX/TAXII support, workflow automation, SIEM/SOAR integration, and total cost of ownership. It is essential for procurement decisions, migrating between TIP solutions, or assessing whether the current CTI program meets required maturity levels.

A comprehensive guide for conducting hypothesis-driven threat hunting against supply chain compromises (T1195). This skill focuses on querying SIEM/EDR logs to detect indicators of trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. It is crucial when investigating suspected vendor compromises or scoping a build pipeline breach, requiring advanced knowledge of logging systems and threat intelligence.

Provides a structured, risk-based framework for managing patches in Operational Technology (OT) and Industrial Control Systems (ICS). It addresses the critical difference between IT and OT environments, prioritizing safety and availability over immediate remediation. The guide covers risk scoring, vendor compatibility testing, staged deployment, and defining compensating controls for unpatchable assets.

This guide details the design and configuration of secure, compliant remote access architectures for Operational Technology (OT) and Industrial Control Systems (ICS). It covers implementing jump server architectures, Multi-Factor Authentication (MFA), Privileged Access Management (PAM), session recording, and adhering to standards like IEC 62443 and NERC CIP-005. Ideal for network architects, security engineers, and operations teams needing to manage third-party vendor access securely.