Skill UI

This tool deploys decoy canary files in critical system directories to provide early warning against ransomware attacks. Utilizing Python's watchdog library, it monitors for any read, modify, rename, or delete operations on these decoy files. Detection triggers immediate alerts via multiple channels (Email, Slack, Syslog), helping security teams identify and respond to malicious activity before full data encryption occurs. It serves as a crucial detection layer in a layered security defense.

Detects persistence mechanisms (T1547.001) by monitoring critical Windows startup directories. This skill analyzes autoruns entries, monitors for real-time file system changes using Python watchdog, and examines file metadata (like creation timestamps and digital signatures) to identify suspicious implants and unauthorized execution points.

A meta-skill designed to monitor long-running processes, such as model fine-tunes or CI builds, executed within a detached tmux session. It captures output, automatically uses a sub-agent to diagnose failures, proposes a fix, and records the complete debugging process to memory. Ideal for intermittent failure debugging and continuous integration pipelines.