Skill UI

Conduct hypothesis-driven threat hunting for Command-and-Control (C2) activity (T1071). This skill guides the analysis of SIEM/EDR network telemetry to detect anomalous outbound traffic, rare destination IPs, non-standard ports, and unusual connection frequencies, helping identify beaconing or data exfiltration attempts. Essential for proactive defense and incident response.

A comprehensive guide for performing deep network forensics using Wireshark and tshark. This technique analyzes raw PCAP/PCAPNG files captured during security incidents to reconstruct network events, identify data exfiltration methods, extract sensitive artifacts (credentials, files), detect Command-and-Control (C2) communications, and pinpoint network indicators of compromise (IOCs). Ideal for digital forensics and incident response teams.

A comprehensive guide and framework for performing digital forensics analysis on PCAP/PCAPNG files. This skill covers using industry-standard tools like Wireshark, tshark, tcpdump, and Python/Scapy to reconstruct network communications, extract evidence of data exfiltration, identify command-and-control (C2) activity, and trace lateral movement during incident response.

A comprehensive guide for statically analyzing suspicious Android APKs. This skill demonstrates how to use JADX, apktool, and androguard to decompile Java/Kotlin source code, examine manifest permissions, and identify malicious patterns. Use this to detect data exfiltration, C2 command and control communication, privilege escalation, and overlay attacks in mobile threats.

A sophisticated skill for detecting Command and Control (C2) traffic tunneled through DNS protocols. It utilizes advanced techniques like Shannon entropy analysis of subdomains, Machine Learning for DGA classification, and correlation with network logs from Zeek/Suricata. Ideal for SOC analysts and threat hunters investigating data exfiltration, DNS beaconing, or suspicious DNS activity.

Controls Google Forms through the gws CLI with commands for creating blank forms, batch updates, publishing settings, and managing responses or watches to automate form workflows.

deepTools is a comprehensive command-line toolkit designed for processing and analyzing high-throughput sequencing data. It handles core genomics tasks including BAM to bigWig conversion, quality control assessment (PCA, correlation), normalization, and generating publication-quality visualizations (heatmaps, profiles) for ChIP-seq, RNA-seq, and ATAC-seq data. Essential for reproducible genomic research workflows.

This setup implements a pre-execution hook to safeguard code repositories by intercepting and blocking destructive Git operations (e.g., `git push`, `git reset --hard`, `git clean`). It prevents accidental or unauthorized data loss during automated code generation or tool use within AI environments, ensuring robust version control safety.

Implement robust human-in-the-loop (HITL) approval gates for sophisticated LangGraph workflows. This skill enables the graph to pause execution before critical, irreversible actions (like sending emails or calling tools). It manages complex state serialization, provides clear resume semantics using `Command(resume=...)`, and integrates with external UIs (e.g., Slack) to await human decision, ensuring safe and controlled workflow execution.

A comprehensive guide for writing, debugging, and maintaining Windows batch files (.bat/.cmd). This skill covers advanced CMD scripting techniques, including environment variable management, complex control flow (IF, FOR), argument parsing, delayed expansion, and command chaining. Ideal for automating system tasks, creating command-line utilities (CLI), managing deployments, or writing scheduled task scripts in Windows environments.

A powerful CLI tool for interacting with Atlassian Jira. It allows users to manage the entire issue lifecycle—from creating, viewing, editing, and transitioning issues, to managing sprints, epics, and projects—all directly from the terminal. Essential for developers and project managers needing robust automation and workflow control.

Covers offensive workflows for Zigbee, Thread, and Matter mesh networks, including 802.15.4 sniffing, commissioning abuse, key capture, replay/injection, and control-command exploitation in smart-home deployments.