989 skills · sorted by relevance
Review source code for MCP, a protocol connecting AI applications to tools. Check authentication, input validation, unsafe execution, and other security risks, then report findings with file and line references and separate manual follow-ups.
Create shareable links that open specific Arize resources, including traces, datasets, and evaluators. Use IDs from logs or exported data, with suitable time ranges, to direct teammates to the relevant view.
Add or verify model support in SGLang's Rust processor so chat requests produce the same prompt text and token IDs as Python. Use reference-generated test cases to find differences in tools, reasoning settings, conversation history, and errors.
Find WMI event subscriptions that let attackers retain access to Windows systems. Correlate Sysmon events with stored subscriptions and Autoruns results, inspect execution triggers and commands, and document risks and recommended remediation.
Set up Zeek to observe network traffic and produce structured logs for security analysis. Create custom detection scripts, investigate suspicious DNS activity and repeated external connections, and forward logs to a central security monitoring system.
Analyze Sysmon logs to investigate process injection, where malicious code hides inside legitimate processes. Correlate remote thread creation, cross-process access, and unusual DLL loading, then organize findings by injection type, risk level, and ATT&CK technique.
Analyze Modbus industrial network traffic to identify unauthorized commands, write operations, and unusual polling intervals. Compare activity with normal traffic patterns and allowed operations, then report anomalies by type and severity.
Investigate Linux intrusions using auditd records. Configure audit rules, search events with ausearch, summarize activity with aureport, reconstruct a timeline of suspicious actions, and forward logs to a central security monitoring system.
Manage a running task list in a gbrain page using stable IDs and four priority levels. Add, complete, defer, remove, or review tasks while recording completion dates and deferral reasons, and clarifying ambiguous task references before changes.
Check active PUA agents and teams from Codex CLI using an alias for the Claude Code status command. Review process IDs and record lifetimes when available, alongside stale records.
Review Doris code changes using project-specific checklists for data correctness, concurrency, memory safety, compatibility, performance, and tests. Trace related code paths and explain findings with concrete failure scenarios, using query plan trees when reviewing optimizer behavior.
Inspect CARLA driving simulation logs without replaying them. Get recording details, find collisions by participant category, and identify vehicles that barely moved, with times and object IDs to locate moments worth reviewing.
Preserve essential information during long agent tasks by extracting URLs, IDs, relevant fields, and conclusions into working notes. It also specifies where to record task handoff details before older tool results leave the agent’s context.
Diagnose paid advertising performance using account evidence, financial constraints, and experiments. Draft ranked changes to budgets, bids, or ad delivery, and apply supported operations only after approval and state checks, retaining a way to reverse them.
Create a horizontally navigated HTML presentation with a magazine and e-paper look. Combine a flowing WebGL cover background, serif headlines, chapter dividers, large numbers, image grids, and quotation pages to present your content.
Map stakeholders using two grids: power versus interest, and impact versus power. Compare the results to decide how closely to involve each group, identify overlooked voices, and plan concrete actions to increase their participation.
Search Rhea, a biochemical reaction database, using reaction IDs, compound names, enzyme classification numbers, or reaction terms. Get concise summaries of focused search results, with raw JSON available when you need machine-readable output.
Create game images, transparent PNGs, textured 3D models, animated humanoids, sound effects, and voice lines using local GPU tools. Paid API options extend production to assets such as music and animated sprites.
Investigate failed or unexpected Stripe payments using exact record IDs, processing states, events, amounts, and currencies. Separate what the customer sees from Stripe's state and integration behavior, then identify the next action without changing payment records during diagnosis.
Compare Stripe payment and payout records with supplied business records for a defined period. Preserve IDs, currencies, and time zones, then produce a reproducible list separating matches, timing differences, fees, refunds, disputes, and missing or ambiguous records.
Create a warm beige light-mode interface with layered neutral surfaces, thin borders, and orderly information grids. Apply a consistent style across page backgrounds, hero sections, cards, buttons, status indicators, and subtle motion.
Extract listing details from a Goofish second-hand item URL or ID, including price, description, images, seller information, attributes, and interest counts. Use the collected data to review individual listings or enrich an existing item list.
Collect product listings from a Taobao or Tmall shop using its shop ID. Results include product IDs, titles, image URLs, and product links, providing a catalog for store research or bulk product ID collection.
Improve interface layouts by reviewing spacing, alignment, content density, and visual hierarchy, the cues that show what matters most. Refine repetitive card grids and crowded sections into compositions with consistent spacing and responsive structure.