885 skills · sorted by relevance
Manage WireMock from the command line to create mock HTTP responses, inspect and count received requests, change scenario states, and record real backend traffic. These operations support integration tests with controlled responses.
Turn routine resume duties into concise bullets that show real contributions. Use focused questions to uncover achievements, verify numbers and individual responsibilities, and describe scope or concrete changes when reliable performance figures are unavailable.
Write more reliable Bash scripts for production automation, CI/CD pipelines, and system administration. Covers input validation, error handling, structured logs, safe temporary files, dry runs to preview changes, and scripts designed for safe reruns.
Manage resources in OpenViking through its command-line tool. The skill guides adding and searching materials, editing and organizing files, scheduling refreshes, and transferring or backing up resource collections with the appropriate commands and options.
Create an agent user in Microsoft Entra ID so an AI agent can access services requiring a user identity. Covers validating the parent agent identity, creating the account, assigning a manager and licenses, and troubleshooting setup errors.
Build or modify content management systems such as WordPress and Shopify. Locate the right theme, extension, editor, or content layer, then make changes that respect platform conventions, media handling, previews, and publishing behavior.
Investigate suspicious privilege increases, including Windows UAC approval bypasses and Linux sudo or setuid abuse. Use registry changes, process relationships, and permission changes to identify possible abuse and document affected hosts, methods, and risk levels.
Investigate excessive privileges inside Kubernetes pods by reviewing security settings, runtime events, and audit logs. Use admission policies to restrict risky configurations and Falco monitoring to detect suspicious privilege changes and container activity.
Identify runtime signs of attackers breaking out of Docker or Kubernetes containers. Review namespace changes, privilege abuse, sensitive host access, and unusual system calls to guide incident investigations and compare monitoring coverage across security tools.
Investigate DCSync attacks, which abuse Active Directory replication to steal password hashes. Use audit events and network traffic to identify suspicious replication requests, examine their sources, and check for subsequent credential misuse.
Investigate misuse of application identities in Microsoft Entra ID using audit and sign-in logs. Provides detection queries and investigation steps for suspicious credential additions, privileged role assignments, consent grants, and service principal enumeration.
Deploy CrowdStrike Falcon sensors across Windows, macOS, and Linux endpoints. Configure threat prevention and response policies, verify installation and detection, troubleshoot sensor issues, and connect events to SIEM platforms, which collect security logs for analysis.
Support authorized Active Directory assessments of DCSync, which abuses directory replication rights to obtain credential data. Cover replication permission review, Golden Ticket persistence testing, detection validation, and documentation of evidence and remediation recommendations.
Assess Microsoft Entra ID with AADInternals during authorized security testing. Examine publicly exposed tenant information, API access, and federation weaknesses, including Golden SAML, a token forgery technique, then document evidence and recommendations for stronger identity protection.
Audit Google Cloud access permissions to find overly broad roles, unnecessary service account keys, public access, and impersonation risks. Use gcloud CLI, Policy Analyzer, and IAM Recommender to document findings and plan more limited permissions.
Review Active Directory permissions with ldap3, a Python library for directory queries. Identify excessive access granted to non-administrative accounts, explain potential privilege escalation paths, and produce a JSON report with affected objects and remediation recommendations.
Assess exposure of Windows secrets protected by DPAPI, the operating system’s data protection service, during authorized security tests. Guide examination and decryption of saved credentials and browser data using available user sessions, credentials, or backup keys.
Build AWS applications with managed services that reduce server administration. Follow patterns for Lambda functions, HTTP APIs, database access, and queued background processing, with guidance on deployment and delays when functions first start.
Design and review web and mobile interfaces using searchable guidance on colors, fonts, layouts, charts, and interaction. Generate a consistent design plan, then apply framework-specific advice and checks for accessibility, responsiveness, and visual consistency.
Design visually distinctive websites, landing pages, and portfolios as React components, reusable pieces of a web page. Use industry references to guide typography, color, layout, motion, and relevant 3D visuals that fit the brand.
Generate page and component folder structures with a command, keeping related files together by feature. Create tabbed page shells, starter tests, and README files, and register page routes within the supplied frontend structure.
Adapt a knowledge collection's schema, the rules defining page types and relationships. Review untyped pages, propose new types, update classification settings, and apply those types to existing pages after previewing the changes and checking consistency.
Add Telegram bot support to NanoClaw through Chat SDK. The skill covers adapter installation, bot token setup, pairing a chat with a verification code, connecting groups through approval, and adding separately configured bots.
Connect a container agent to local Ollama models through MCP, a protocol for agent tools. The agent can list models and generate responses, with optional tools to download, delete, inspect, and check loaded models.