Results for “open-source”

Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and attack campaigns using publicly available data sources, passive reconnaissance tools, and dark web monitoring. Use when investigating external threat actor infrastructure, performing pre-engagement reconnaissance for authorized red team assessments, or enriching CTI reports with publicly available adversary context. Activates for requests involving Maltego, Shodan, OSINT framework, SpiderFoot, or infrastructure reconnaissance.

The English summary is being prepared. Showing the original description.

Generates comprehensive documentation templates for open-source and internal projects including README, CONTRIBUTING, SECURITY, CODE_OF_CONDUCT, LICENSE, and other standard docs with suggested sections and best practices. Use when users request "create project docs", "add OSS documentation", "setup standard docs", or "make it open-source ready".

The English summary is being prepared. Showing the original description.

Design recommendation and ranking workflows that select the best items for a user or situation. Organize candidate retrieval, enrichment, filtering, scoring, selection, and background recording into six stages, then generate a runnable code scaffold.

• Designing personalized content feeds
• Reranking search or RAG results
• Building task prioritization workflows

Prepare a private project for public release by creating a separate copy, removing sensitive information, checking for remaining risks, and generating documentation, setup scripts, and license files for review before publishing.

• Preparing a private project for public release
• Checking a release copy for secrets and personal information
• Creating documentation and setup files for contributors

Investigate suspected malicious changes in open-source software on GitHub by comparing repository history, APIs, and archives. Attempt to recover deleted evidence, identify signs of compromise, and produce a report separating verified facts from hypotheses.

• Investigate suspicious commits or workflow changes
• Attempt to recover commits hidden by rewritten history
• Trace possible credential leaks

Generate complete songs locally from lyrics and tags describing mood, instruments, or genre. The skill guides setup, input formatting, memory-saving settings, and MP3 output using the open-source HeartMuLa music models.

• Turn original lyrics into a complete song
• Try different moods and instruments with tags
• Generate music locally or offline

Manage job searches through modes for evaluating vacancies, tailoring CVs, tracking applications, drafting outreach, and preparing for interviews. Start from a job description or URL, or choose a specific task to produce relevant documents and status summaries.

• Compare vacancies and prioritize applications
• Create a tailored CV and application email draft
• Track application status and overdue follow-ups

Set up Strix security checks in CI/CD to test pull request changes, report verified vulnerabilities, and gate merges. Covers both a CLI running on your own infrastructure and a managed service with pull request comments.

• Check pull request changes for vulnerabilities before merging
• Add Strix scans to GitHub Actions or GitLab CI
• Choose between managed reviews and scans on your own runners

Turn Strix vulnerability findings into focused code fixes, prioritized by severity. Address root causes, rerun security scans and original exploit examples, and report the changes and verification results for each issue.

• Fixing vulnerabilities reported by Strix
• Prioritizing remediation by severity
• Retesting original exploits after code changes

Use Strix to test web apps, APIs, and source code for exploitable security flaws. Choose local or cloud execution, set testing scope and budget, and review validated findings with reproducible examples and structured reports.

• Security testing an application or API
• Testing source code alongside a deployed application
• Choosing between local and cloud execution

Test a running web application with Strix to find authentication, access control, and other security flaws. Review working proof-of-concept exploits, which demonstrate each issue, and use the evidence to guide fixes and retesting.

• Security testing a staging web application
• Checking access between accounts and organizations
• Testing a local development server

Process 3D scan data with CloudCompare through text commands. Clean point clouds, collections of measured 3D points, extract ground surfaces, align scans, calculate distances, and convert or export point clouds and surface meshes in supported formats.

• Remove noise and reduce point counts in LiDAR scans
• Extract ground points from buildings and vegetation
• Align two scans and calculate distances between them

Build and manage Linux containers on Apple silicon Macs with Apple's container CLI. Run each container in its own lightweight virtual machine, and get guidance on images, networking, storage, and translating familiar Docker workflows to this tool.

• Building container images from a Dockerfile
• Running Linux containers on an Apple silicon Mac
• Managing persistent volumes and container networks

Design recommendation and ranking systems that select the best items for a user or situation. Organize retrieval, enrichment, filtering, scoring, selection, and background actions into six stages, then generate a runnable scaffold for your chosen stack.

• Designing a personalized content feed
• Reranking retrieved passages for RAG
• Prioritizing suggested tasks

Deploy decoy credentials, documents, and URLs with Canarytokens to detect suspicious access. Guides token generation, placement, alert testing, and inventory tracking, with email or webhook notifications when someone interacts with a planted token.

• Add intrusion alerts to shared folders
• Detect use of decoy cloud credentials
• Monitor decoy documents for signs of data theft

Build a central platform for collecting, analyzing, and sharing cyber threat information. Connect MISP, OpenCTI, TheHive, and Cortex to import feeds, add context to suspicious indicators, manage cases, and track platform activity.

• Build a central threat intelligence platform
• Automate threat feed ingestion
• Add context to suspicious IP addresses and domains

Build threat actor profiles from public reports, social media, code repositories, and other intelligence sources. Correlates indicators, maps related infrastructure and attack techniques, and produces structured dossiers with confidence assessments about who may be responsible.

• Consolidating public information about an attacker group
• Comparing aliases, targets, and motivations across sources
• Mapping related domains, IP addresses, and infrastructure

Build automated pipelines that collect threat indicators, such as malicious IP addresses and file hashes, from multiple feeds. Standardize formats, remove duplicates, assess confidence, and distribute indicators to security monitoring systems for matching and alerts.

• Automating threat feed ingestion
• Standardizing and deduplicating threat indicators
• Distributing indicators to multiple monitoring systems

Analyze threat intelligence feeds to extract indicators of compromise, observable clues of possible attacks, and their campaign context. Assess source quality, standardize formats, remove duplicates, and enrich indicators for distribution to security monitoring systems.

• Assessing the quality and relevance of threat intelligence feeds
• Standardizing indicators into STIX 2.1
• Removing duplicates and adding attack campaign context

Use Phoenix to record execution traces, detailed records of an AI application's operations, and investigate problems. Evaluate answers on datasets, compare prompts and models, and set up monitoring through a self-hosted server.

• Investigate AI application problems using execution traces
• Evaluate answer quality across a test dataset
• Compare prompts and models through experiments

Set up Langfuse to record LLM application activity, costs, and response times. Manage prompt versions, organize evaluation datasets, and compare results to investigate failures and guide improvements using recorded evidence.

• Investigating failures in LLM applications
• Comparing prompt versions and evaluation scores
• Monitoring LLM costs and response times

Train smaller language models using knowledge distillation, where a larger model supplies examples or prediction targets. This skill covers training losses, generated training data, parameter choices, and output comparisons to support model compression and specialized student models.

• Training a smaller model from a larger teacher
• Fine-tuning with teacher-generated responses
• Distilling domain knowledge into a specialized model

Build AI agents that inspect screenshots, choose actions, and operate a mouse and keyboard. Covers the observation and action loop, desktop control examples, and isolated environments that restrict access to files, credentials, and networks.

• Build an AI agent that operates desktop screens
• Connect screenshot analysis to mouse and keyboard actions
• Design an isolated environment for automation

Create signed records for consequential agent actions such as deployments, deletions, and payments. Decide which actions need evidence, record the agent, action, target, and policy, then verify the resulting certificate offline to detect later changes.

• Creating signed records for production deployments
• Preserving evidence of deletions and payments
• Recording access grants for later review