418 skills · sorted by relevance
Plan authorized security exercises that simulate attackers reaching important assets. Organize techniques into attack stages, rank effort and detection risk, identify shared points across attack paths, and use findings to assess detection and response coverage.
Checks how company strategy connects to department, team, and individual goals. Identifies disconnected or conflicting goals, missing ownership, departmental silos, and communication gaps, then guides workshops, shared measures, and quarterly reviews to restore alignment.
Assess startup engineering operations across delivery, hiring, team structure, and production practices. Use delivery metrics, hiring conversion rates, and staffing data to identify bottlenecks, estimate candidate needs, and plan management roles and operational improvements.
Build a sprint plan for a short development cycle using team availability and recent delivery history. Select work that fits capacity, sequence dependent tasks, identify owners and risks, and reserve room for unexpected work.
Download YouTube captions and thumbnails from a URL or video ID. Save transcripts as Markdown or SRT subtitle files, select or translate languages, add chapters, and use AI processing to label speakers.
Turn recorded audio and video into text or timestamped subtitles with Whisper. This skill covers transcription across 99 languages, language detection, translation into English, batch processing, and model selection for available computing resources.
Collect consistent intake information for a new litigation matter, including conflict clearance, risk, owners, document preservation, and deadlines. Create a detailed matter record, an initial history entry, and structured data for the matter portfolio.
Inspect website responses with curl, using browser-like request headers and checking file size, content, and format. Identify placeholder pages and choose a browser-based or direct API approach when the expected content is missing.
Write and review YARA-X rules, which identify malware through file patterns. Refine detection strings and conditions, check rule quality with included scripts, test against clean files, improve performance, and migrate rules from legacy YARA.
Assess enterprise Wi-Fi that uses 802.1X, a system for authenticating individual users or devices. Covers identifying authentication methods, testing rogue access points, reviewing certificate trust and storage, and assessing domain access through recovered credentials.
Investigate insecure deserialization, where restoring objects from stored or transmitted data can execute unwanted code. Covers multiple languages, input format recognition, vulnerable processing points, verification methods, and documentation of affected libraries and entry points.
Plan and run fuzz testing, which feeds varied inputs to software to uncover bugs. The skill guides tool selection, test harness creation, input collection, coverage measurement, and crash triage for parsers, protocols, kernels, and other targets.
Assess how applications use encryption, signed tokens, and random values. Identify implementation weaknesses, select relevant testing tools, and document causes and fixes for issues involving encryption modes, RSA parameters, predictable randomness, and key derivation.
Map stakeholders using two grids: power versus interest, and impact versus power. Compare the results to decide how closely to involve each group, identify overlooked voices, and plan concrete actions to increase their participation.
Identify stakeholders before starting outreach or research. Organize supporters, affected groups, and influencers; record resource and approval roles; check overlooked perspectives; and choose two or three people or groups to understand first.
Search EFO, a structured vocabulary, look up individual terms, and retrieve their immediate children or broader descendants through OLS4. Get concise summaries for term identification and hierarchy exploration, with full responses saved when needed.
Analyze business concepts in a codebase to map business areas and suggest service boundaries. Use Domain-Driven Design, an approach organized around business meaning, to classify responsibilities, assess how closely they belong together, and recommend clearer integration points.
Analyze dependencies between software modules using connection strength, distance, and frequency of change. Get a dependency map, code evidence, and prioritized recommendations for relationships that make changes spread across the system.
Find classes left in parent folders or namespaces and identify nested component structures. Compare consolidation, splitting, and shared code extraction, then plan and carry out refactoring with updated references and tests.
Create an evidence-based plan for modernizing an existing system. Analyze code and dependencies, research technology choices, and produce domain-specific migration plans with testing, rollback steps, and a consolidated roadmap for developers to execute.
Create a phased roadmap for splitting a monolithic application into separate services. Assess current progress, prioritize work by risk, value, and dependencies, and produce milestones, estimated effort, acceptance criteria, and progress reports.
Organize existing code components into business areas to prepare for service separation. Produce domain maps, component assignment tables, and refactoring plans that align namespaces, the naming structure used to organize code, with business responsibilities.
Map a codebase into architectural components, logical groups of source files, and compare their sizes using executable statements and file counts. Produce an inventory, identify unusually large or small components, and recommend where to split or consolidate code.
Look up Amazon products using an ASIN, Amazon's unique product identifier. Retrieve structured details such as title, current price, ratings, brand, description, and material to enrich product catalogs or support price and rating comparisons.