647 skills · sorted by relevance
Plan periodic access reviews for AWS IAM, GitHub, Okta, and other identity systems. Provides guidance for identifying unused access, assigning reviewers, documenting approval or removal decisions, and organizing evidence for compliance audits.
Check Binance options for buying or selling crypto with government-issued currencies, such as yen or euros. Look up country-specific payment methods, limits, and reference prices, plus order and payment history when API credentials are available.
Automate page interactions and screenshots with agent-browser running in AWS Bedrock AgentCore cloud browsers. Use standard browser commands, preserve login state across sessions with persistent profiles, and watch active sessions through an AWS Console link.
Trace server-side request forgery, where a server fetches a supplied URL, through internal services and metadata endpoints in a CTF sandbox. Document credential scope and distinguish successful token extraction from access actually accepted by another service.
Examine Windows credential material in a CTF sandbox, including LSASS memory and Kerberos tickets. Distinguish stored secrets from credentials that actually work, and document the evidence linking their source to successful authentication or resulting privileges.
Analyze Windows identity and host evidence in CTF sandboxes. Connect authentication tickets, credentials, mailbox rules, and host activity to explain which services accept access and how movement between hosts occurs.
Trace SSH keys, tokens, and other credentials in Linux CTF environments. Connect each recovered artifact to the service that accepts it, then document the resulting privileges or movement to another host.
Plan and coordinate authorized penetration tests across multiple stages, from reconnaissance to access, privilege escalation, movement between systems, and impact assessment. Assign specialist skills, revise blocked paths, and maintain evidence and progress records for the final report.
Integrate PayPal into online checkout flows with one-time payments, subscriptions, refunds, and payment notifications. Includes client-side buttons, server-side payment handling, and sandbox testing to check the purchase flow before using live credentials.
Manage API keys, passwords, and certificates used in CI/CD, the automated process for testing and deploying software. Connect secret stores, plan credential rotation, restrict access, and prevent sensitive values from appearing in logs.
Read Google Calendar schedules, check availability, and create or update events as requested. Handle time zones, all-day events, and recurring appointments while confirming event details and making invitation notifications clear.
Build and troubleshoot MCP servers, which connect AI agents to external tools, for codewhale. Covers local and remote connections, credential configuration, tool validation, and testing both successful requests and failures.
Search and read Gmail messages, identify items that need attention, and prepare email drafts. Send messages with explicit approval of recipients, subject, and body, using an authorized Gmail connection.
Integrate Microsoft Graph SDK into .NET, TypeScript/JavaScript, or Python applications to access Microsoft 365 data. Covers authentication, permissions, paginated results, incremental synchronization, change notifications, and retries when requests hit service limits.
Manage Namecheap domains and DNS records, which connect domain names to services, through its API. List domains, edit records, switch nameservers, and configure email forwarding, with guidance for initial credentials and allowed IP setup.
Review GitHub Actions workflows for unsafe input handling, excessive token permissions, exposed secrets, and changeable action references. Get findings grouped by issue type, with severity ratings, exact YAML locations, and concrete fixes to review.
Assess potential data breach impact by reviewing sensitive data and its movement through a codebase. Produce an inventory, exposure rankings, financial estimates, and prioritized safeguards, distinguishing legal source figures from planning estimates.
Set up a Python project with AWS CDK, a toolkit for defining cloud infrastructure in code. Follow guidance on prerequisites, AWS credentials, virtual environments, dependencies, template generation, deployment preparation, and reviewing changes before deployment.
Plan and implement connections between Arduino devices and Azure IoT Hub, directly or through an IoT Edge gateway. Define sensor messages, device credentials, offline buffering, remote commands, and implementation tasks for firmware, gateways, and cloud services.
Use the CopilotKit CLI to check app connections, credentials, and agent responses before investigating code. It also guides project creation, integration into existing apps, hosted project selection, typed agent identifier generation, and thread history imports.
Choose financial data sources and tools for price history, financial statements, news, and economic research. The skill maps market coverage, credentials, access limits, and fallback options, and provides rules for checking important figures against independent sources.
Create and publish a DingTalk internal app and bot through a visible browser, then obtain the credentials needed for QwenPaw. The skill guides users through manual connection settings and pauses whenever login requires their action.
Investigate stolen Kerberos tickets, authentication credentials that can be reused without a password, by correlating Windows security events. Build Splunk or Elastic detection rules for cross-host reuse, weaker encryption, and unusual request volumes, and report risk-scored findings.
Detect unauthorized cryptocurrency mining in cloud workloads by combining billing changes, CPU usage, mining pool connections, and process alerts. Follow workflows to preserve evidence, isolate affected resources, and trace how attackers gained access.