Skill UI

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.

This playbook guides SOC analysts through the structured triage of security incidents. It ingests alerts from SIEM platforms (Splunk, Elastic), enriches data using threat intelligence (VirusTotal, AbuseIPDB), classifies the incident type, and calculates a severity score based on asset criticality and data sensitivity. It culminates in creating structured incident tickets and notifying the appropriate response teams via paging systems, ensuring a comprehensive and standardized incident response workflow.

Vibers provides a human code review workflow for AI-generated GitHub projects; add the collaborator, GitHub Action, and commit guidance to receive spec- and security-focused feedback plus follow-up PR fixes.

Create cross-platform agent skills from workflow descriptions. Supports single skills, multi-agent suites, transcript processing, template-based creation, interactive configuration, cross-platform export, spec validation, and security auditing of third-party skills before install. Triggers on requests to automate repetitive workflows or create custom agents.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Provides offensive security testing methodology, tooling guidance, and workflows for scanning web apps, APIs, dependencies, secrets, and infrastructure to uncover vulnerabilities before attackers exploit them.

A comprehensive skill for conducting authorized Bluetooth Low Energy (BLE) security assessments. It covers detecting various attacks, including sniffing, Man-in-the-Middle interception, replay attacks, and GATT enumeration abuse. The workflow guides users through packet capture using specialized sniffers (Ubertooth, nRF Sniffer), analyzing services and characteristics via Python/bleak, and performing cryptographic analysis using tools like crackle.

A comprehensive guide detailing the workflow for firmware reverse engineering. It uses tools like binwalk to identify embedded filesystems (e.g., SquashFS, CramFS), perform entropy analysis to locate hidden data, and extract components. The process covers deep inspection, credential discovery, and reporting for IoT and embedded security assessments.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

This skill provides comprehensive automation for managing GitHub workflows across the entire development lifecycle. It covers detailed issue triage, PR review status checks, CI/CD failure debugging, official release management, and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and streamlining team development processes.

A comprehensive guide to achieving high code quality in Go projects using `golangci-lint`. This skill covers the entire development lifecycle, including setting up the essential `.golangci.yml` configuration, running automated linters (style, security, complexity), automatically fixing issues, interpreting detailed lint output, and correctly suppressing false positives using `//nolint` directives. Ideal for enforcing best practices in CI/CD pipelines and maintaining legacy codebases.

Persona for IT administrators to monitor Workspace security, configure Drive sharing policies, and run workflows for standup reporting and audit review while emphasizing dry-run checks and auth-status verification.