2.4K skills · sorted by relevance
Operations leadership advisor on business operations, process optimization, and scaling infrastructure. Use when designing operational processes, planning headcount capacity, optimizing vendors, or scaling operations.
The English summary is being prepared. Showing the original description.
Build, run, and improve a Security Operations Center — alert prioritization, runbook authoring, escalation criteria, on-call structure, alert tuning workflow, MTTD / MTTR / fidelity KPIs, analyst tiering, and shift handoffs. Use when the user mentions 'SOC,' 'security operations,' 'SOC analyst,' 'alert triage workflow,' 'runbook,' 'escalation,' 'on-call,' 'SOC tiering,' 'tier 1 / tier 2,' 'MTTD,' 'MTTR,' 'alert fatigue,' 'alert tuning,' 'shift handoff,' 'SOAR,' or wants to design or improve a security operations team.
The English summary is being prepared. Showing the original description.
Expert in running the day-to-day operations of thriving communities. Covers moderation systems, onboarding flows, crisis management, scaling operations, and team management. The engine room that keeps communities healthy and safe. Use when "community operations, community moderation, community management, onboarding flow, crisis management, trust and safety, community team, " mentioned.
The English summary is being prepared. Showing the original description.
红队渗透 / 攻防 — 受授权的红队作业者 + 渗透测试工程师 + 攻击型安全顾问的认知操作系统 (侦察 OSINT / 外网渗透 / 内网 AD 渗透 BloodHound + Kerberoasting + ADCS 利用 + 横向移动 / Web 应用渗透 OWASP WSTG / 移动 OWASP MASTG / 云渗透 AWS Azure GCP IAM 路径 + 容器逃逸 + K8s / C2 操作 Cobalt Strike Sliver Mythic Havoc + OPSEC / 初始访问 + AV EDR 绕过 (仅授权场景) / 无线 RF / 物理社工 / 报告与整改 / 框架 MITRE ATT&CK + D3FEND + PTES + OSSTMM + NIST 800-115 + Kill Chain / 法律伦理 CFAA + 网络安全法 + 刑法 285 286 + 数据安全法 + GDPR + 授权书 + 范围 + 交战规则 — 不含 黑产 / 未授权攻击 / 大规模 exploitation / 供应链投毒 / 未授权 DoS — 这是 重罪 + 行业封杀 + 律师吊销, 本 skill 严守 authorized-only 边界 — 也不含 蓝队 SOC + 恶意软件 即服务 / 僵尸网络 / 勒索软件作者 — 这是 cybercrime 不是 红队) (Cybersecurity Red Team / Offensive Security Operations — the cognitive operating system of authorized red team operators, penetration testers, and offensive security consultants covering (a) reconnaissance & OSINT (passive + active discovery, asset surface mapping), (b) external network pentest (perimeter, exposed services, web), (c) internal network / Active Directory pentest (AD enumeration via BloodHound, Kerberos abuse — Kerberoasting / AS-REP-roasting / Unconstrained delegation / S4U2self, NTLM relay, ADCS abuse, GPO abuse, lateral movement, privilege escalation), (d) web application pentest (OWASP WSTG, authentication, authorization, SSRF, XXE, deserialization, SSTI, prototype pollution, GraphQL, JWT, API), (e) mobile pentest (OWASP MASTG, iOS / Android, instrumentation Frida / Objection, MASVS), (f) cloud pentest (AWS / Azure / GCP — IAM enumeration, privilege escalation paths, container escape, K8s RBAC, serverless), (g) C2 operations & post-exploitation (Cobalt Strike / Sliver / Mythic / Havoc, beacon ops, malleable profiles, OPSEC), (h) initial access & evasion (phishing infrastructure, payload development, AV / EDR evasion, BYOVD, AMSI / ETW bypass — strictly for authorized engagements), (i) wireless / RF (WPA2/3, evil twin, Wi-Fi pivots), (j) physical / social engineering (badge cloning, pretexting, vishing — under engagement letter), (k) reporting & remediation (executive summary, technical findings, CVSS, MITRE ATT&CK mapping, retest), (l) frameworks & methodology (MITRE ATT&CK, MITRE D3FEND, PTES, OSSTMM, NIST SP 800-115, OWASP WSTG / MASTG, Cyber Kill Chain, Unified Kill Chain, Diamond Model), (m) law & ethics (CFAA US, Computer Misuse Act UK, 中国 刑法 285/286 + 网络安全法 + 数据安全法, GDPR for tested EU systems, engagement letter, scope, rules of engagement, safe harbor for bug bounty); NOT criminal hacking / 黑产 / unauthorized targeting / mass exploitation / supply-chain compromise / DoS against unconsented systems (这是 重罪 + 业内开除 + 律师执照吊销, 本 skill 严守 authorized-only 边界), NOT pure defensive blue team / SOC analyst tradecraft (是 平行学科, 仅做 边界标注 + ATT&CK 反推方向), NOT malware-as-a-service development / botnet ops / ransomware authoring (是 cybercrime 不是 红队), NOT 'ethical hacking' 在 'just curious 看看' 自我合理化的灰色操作 (违反 authorization 原则即不是 红队).) Master OS — automated mastery of Cybersecurity Red Team / Offensive Security Operations — the cognitive operating system of authorized red team operators, penetration testers, and offensive security consultants covering (a) reconnaissance & OSINT (passive + active discovery, asset surface mapping), (b) external network pentest (perimeter, exposed services, web), (c) internal network / Active Directory pentest (AD enumeration via BloodHound, Kerberos abuse — Kerberoasting / AS-REP-roasting / Unconstrained delegation / S4U2self, NTLM relay, ADCS abuse, GPO abuse, lateral movement, privilege escalation), (d) web application pentest (OWASP WSTG, authentication, authorization, SSRF, XXE, deserialization, SSTI, prototype pollution, GraphQL, JWT, API), (e) mobile pentest (OWASP MASTG, iOS / Android, instrumentation Frida / Objection, MASVS), (f) cloud pentest (AWS / Azure / GCP — IAM enumeration, privilege escalation paths, container escape, K8s RBAC, serverless), (g) C2 operations & post-exploitation (Cobalt Strike / Sliver / Mythic / Havoc, beacon ops, malleable profiles, OPSEC), (h) initial access & evasi
The English summary is being prepared. Showing the original description.
Operations reconnaissance — audit process documentation, vendor contracts, compliance posture, OKR health, and cross-functional friction points to understand where operations is the bottleneck. Use when asked to "audit our operations", "where are we slow", "what processes are broken", or "before designing a compliance program".
The English summary is being prepared. Showing the original description.
Operationalizing an expungement website — user intake flows, document generation pipelines, court filing integrations, payment processing, state-by-state workflow variations, customer support for sensitive populations, and the handoff between automated systems and human legal review. Activate on 'expungement operations', 'legal tech SaaS', 'court filing integration', 'document automation pipeline', 'expungement business', 'legal service workflow', 'multi-state legal operations'. NOT for expungement law itself (use national-expungement-expert), web design (use legal-tech-web-design), or legal document drafting (use recovery-app-legal-terms).
The English summary is being prepared. Showing the original description.
Manage GitHub repository operations with the gh command-line tool. Classify issues, check pull request readiness, investigate failed automated checks, prepare releases and changelogs, and review dependency or exposed-secret security alerts.
Automate Enginemailer operations through Rube MCP and Composio. The skill discovers tools suited to a task, checks the active connection, and uses current input requirements to execute workflows, including bulk operations.
Automate Emailable operations through Rube MCP, a connection to external tools. The skill guides tool discovery, connection checks, execution with current input formats, bulk operations, and retrieval of results across multiple pages.
Automate Doppler Marketing Automation operations through Rube MCP and Composio. The skill guides tool discovery, connection checks, and execution using current input requirements, with patterns for bulk operations and fetching additional result pages.
Automate Dnsfilter operations through Rube MCP and Composio by discovering available tools, checking the account connection, and executing requests using current input requirements. Includes guidance for bulk operations and retrieving complete results.
Automate Dictionary API operations through Rube MCP, a connection for agent tools. The skill discovers available actions and their required inputs, checks the service connection, and runs the selected tools through Composio.
Automate Draftable operations through Rube MCP, a connector for agent tools. The skill guides tool discovery, connection checks, and execution using current input requirements, with patterns for bulk operations and retrieving paginated results.
Automate Docupilot tasks using Rube MCP, a bridge from an AI agent to external tools. The skill searches for supported operations, checks authentication status, and runs selected actions with inputs matching their current definitions.
Automate Docmosis operations through Rube MCP, a connection to external tools. Search for tools that match a task, inspect their current input requirements, and verify the Docmosis connection before running operations.
Automate Dialpad operations through Rube MCP and Composio. The skill finds tools for the requested task, verifies the service connection, and follows current input requirements when executing individual or combined operations.
Run Docsbot AI operations through Rube MCP, a connection for agent tools. The skill provides a workflow for discovering supported actions, verifying an active connection, and executing operations with current tool inputs, including bulk processing guidance.
Automate Eodhd Apis operations through Rube MCP, a connection to external tools. The skill discovers available actions, checks current input specifications and authentication status, and executes requested operations, with guidance for bulk processing.
Automate Diffbot operations through Rube MCP, a connection for agent tools. The skill discovers available actions and their required inputs, checks the Diffbot connection, and runs selected tools using Composio's toolkit.
Automate Entelligence operations through Rube MCP, a connector for agent tools. The skill guides tool discovery, connection checks, and execution using current input requirements, with patterns for bulk operations and retrieving paginated results.
Automate Dpd2 operations through Rube MCP and Composio. The skill discovers available tools, checks their current input requirements and connection status, then executes the requested workflow, with guidance for bulk operations and retrieving additional result pages.
Automate DigitalOcean operations through Rube MCP, a connection for agent tools. The skill discovers supported actions and current input requirements, checks authentication, and executes the selected tools, with guidance for bulk operations and paginated results.
Automate College Football Data operations through Rube MCP and Composio. Find tools for a requested task, check their input requirements and connection status, then execute operations individually or in batches.
Automate Craftmypdf tasks through Rube MCP, a connection for agent tools. Discover available operations and their input requirements, verify the service connection, and follow workflows for execution, bulk processing, and retrieving results across multiple pages.