1.1K skills · sorted by relevance
Map threat groups’ documented attack techniques in MITRE ATT&CK Navigator. Creates visual layers and heatmaps, compares groups, and highlights techniques missing from existing detection coverage to support security reporting and decisions about detection priorities.
Plan team structure and hiring by defining needed roles, headcount, timing, and costs. Produce text-based org charts and prioritized hiring roadmaps, and identify structural risks such as excessive management overhead or dependence on one person.
Develop and review FastGPT data migration tasks for automatic system upgrades. Define safe reruns, resume points, progress reporting, and failure handling, while checking task order and whether upgrades must block application startup.
Scan repository documentation, tests, and code for small, well-supported problems, then apply minimal fixes on one branch. Verify each fix before committing it separately, and record larger findings for reporting.
Manage complex software and SaaS projects by assessing schedules, budgets, quality, risks, and team capacity. Compare priorities across projects, identify resource constraints, and turn portfolio analysis into executive reports with recommendations for decisions and follow-up.
Guide product strategy for growing companies by assessing customer fit, product investment priorities, and team structure. Produces scorecards, portfolio recommendations, organization proposals, and board reporting materials to support decisions about what to build and fund.
Plan revenue growth for B2B SaaS businesses by analyzing sales opportunities, pricing, customer retention, and sales capacity. Develop scenario forecasts, churn intervention plans, hiring models, and revenue reporting for board discussions.
Plan security programs for growing companies by estimating financial risk and prioritizing controls. Produce compliance roadmaps, budget justifications, incident response plans, vendor assessments, and board reports that connect security decisions to business impact.
Diagnose GKE nodes marked NotReady or Unknown using node conditions, events, logs, and resource metrics. The skill gathers evidence, distinguishes temporary transitions from faults, and proposes fixes for a person to apply.
Set up the official Google Ads MCP Server, a connector that lets AI assistants retrieve campaign data and reporting metrics through natural language. The guide covers installation, credentials, client configuration, and connection checks.
Use the P7 engineering workflow in Codex CLI through a command alias. It guides planning, implementation, and a three-question self-review, then requires command and output evidence before reporting completion.
Organize Jira issues, plan sprints, and define workflows with clear ownership and acceptance criteria. Get help writing JQL, Jira's query language, to find stalled work, review workloads, and support project reporting.
Navigate a smart contract security knowledge base in a suggested reading order. Find guides covering audit preparation, vulnerability patterns, code searches, reproduction tests, reporting, case studies, and AI tools without losing track of the next topic.
Run TVM's TIRx compiler tests alongside tirx-kernels import and correctness checks. It verifies the local build, selects GPUs, runs parallel tests, saves full logs, and guides failure investigation and result reporting.
Check estimated token usage against daily limits before and after each automated loop run. Switch to reporting only, exit early when required, and record run outcomes so repeated agent work stays within configured limits.
Trace a security finding from an attacker’s entry point to its impact using repository evidence. Examine access, permissions, existing defenses, and counterevidence to assess severity and decide whether the finding warrants reporting.
Compare two GEO audits, which assess a site's readiness for AI search visibility, and produce a monthly client report. Summarize score changes, crawler access, completed actions, newly discovered issues, and priorities for the following month.
Add Sentry error reporting and performance monitoring to services, scheduled jobs, and database operations. Follow examples for capturing exceptions with useful context and measuring execution time through spans, which record individual operations for investigation.
Verify work before reporting completion, committing changes, or creating a pull request. Run the checks that support each claim, inspect their output and exit codes, and report the actual results rather than relying on assumptions or agent reports.
Verify development results before reporting success or preparing commits and pull requests. Run checks that support each claim, inspect their actual output, and report remaining gaps instead of relying on assumptions or another agent’s success message.
Create or modify Excel workbooks, then independently check the saved file with Python. Verify required sheets, columns, populated cells, row counts, and sample selections against the requested structure before reporting the work as complete.
Check generated PDFs with PyPDF2 before reporting completion. A Python script verifies that each file can be opened and has the expected page count, helping identify outputs that need regeneration.
Organize authorized phishing exercises from sending infrastructure and email scenarios to landing pages and reporting. Uses GoPhish campaign tracking to review opens, clicks, and submissions while assessing employee awareness and email security controls.
Organize red team exercises that simulate adversaries to assess an organization's detection and response. Covers engagement rules, infrastructure, operational controls, evidence handling, and reports that help security teams review gaps and prioritize improvements.