Run an office move or reconfiguration without losing a week of work — the dependency-ordered plan (internet lead times rule everything), the workstream owners, the comms that keep…
Design or audit one offline/local-first synchronization and conflict protocol: local storage, queued mutations, idempotency, causality/order, reconnect, tombstones, optimistic…
Runtime security plugin for AI agents. Provides local-first protection against data exfiltration, credential theft, command injection, and sensitive data leakage.
Karpathy 스타일 LLM 위키 스킬 oh-my-wiki(omw) 의 설치 안내. 소스를 수집(ingest)해 구조화된 위키를 만들고, 인용(citation)이 달린 답변으로 질의(query)한다.
Builds and queries a SQLite+FTS5 knowledge graph over an OKF markdown vault (a curated knowledge base of frontmattered concept notes joined by standard markdown links).
Forecast adoption of emerging agentic attack patterns from dated, source-backed signals. Use when prioritizing defensive research or control preparation.
Inventory deployed agents, models, tools, identities, permissions, data access, and trust boundaries.
Define a defensive taxonomy of agentic attack behaviors and observable indicators. Use when normalizing detection cases, threat narratives, or validation plans.
Assess authentication and credential-abuse controls with synthetic identities and approved harnesses.
Assess whether an agent, tool, or configuration change can cross a defined control boundary in a disposable synthetic lab, using non-destructive evidence and no deployable exploit…
Collect and triage dated public or approved threat signals about agentic abuse patterns. Use for an early-warning feed supporting defensive planning.
Measure the economic sustainability of defensive controls against distributed agentic threats. Use when comparing attack effort, defensive effort, expected loss, and recovery…
Define and enforce authorization checkpoints for defensive assessment and response workflows. Use when deciding who may approve tests, containment, sharing, or high-consequence…
OverKill Hill P³ daily oracle workflow. Use when building or reviewing a stable reading that combines a tarot card, optional zodiac horoscope, and an AI message.
OverKill Hill P³ database cartographer. Reverse-engineers and documents the live structure of Postgres, MySQL/MariaDB, MS SQL Server, SQLite, Oracle, and Microsoft Access…
Record decision-relevant evidence for detection, approval, response, and review decisions. Use when an agentic security workflow needs auditability or forensic reconstruction.
Validate emerging agentic threat hypotheses and defensive controls in a disposable synthetic laboratory.
Evaluate a document, report, spreadsheet, hypothesis, decision memo, or Agent Skill with independent evidence review, conditional disruption, and evidence-based adjudication.
Stress-test a draft article, post, essay, or position piece before publication and return a verdict, load-bearing claims table, weakest point, keep-or-fix judgments on rough…
Investigate a suspected agentic security incident and convert evidence into validated defensive learning.
Fingerprint the technology, runtime, dependency, hosting, database, and deployment platform of an undocumented web application so downstream teams can select the correct…
Establish authority, target identity, data boundaries, technique modes, approvals, and stop conditions before reclaiming an undocumented application.
Conduct an authorized, evidence-led security review of an undocumented web application for an assessor or remediation baseline.
Produce evidence-led technical documentation for an undocumented application, including architecture, operations, code tours, data dictionaries, and security findings.
Prepare privacy-preserving, source-traceable threat intelligence for approved peer sharing. Use when converting incident or pattern evidence into a shareable defensive signal.
Extract manually supplied Microsoft Copilot and Microsoft 365 Copilot chats into standalone, actionable Markdown.
Synthesize dated threat signals into coherent defensive narratives and validation priorities. Use when multiple observations need clustering, source comparison, or risk framing.
Validate whether a proposed agentic threat pattern affects a representative synthetic architecture and whether controls respond.
Formuleer team-OKRs die aligned zijn met bedrijfsdoelen. Scherpe Objectives met meetbare Key Results, inclusief kwaliteitscheck en veelgemaakte fouten.
Okta-as-IdP red-team attack chain — tenant discovery, user enumeration (multiple vectors), authentication flow analysis (factors enumeration, push-notification fatigue, SMS…
Okta identity platform detection guidance — System Log event schema (eventType taxonomy, actor/target/outcome structure), session token mechanics, authentication flows (FastPass,…
Expertise in evaluating Okta configurations for compliance — policies, MFA, session management, admin accounts, lifecycle. Maps to FedRAMP/NIST/SOC2/PCI identity controls.
Manage Grid bots (spot/contract/coin-margined) and DCA Martingale bots (Spot DCA 现货马丁 / Contract DCA 合约马丁) on OKX.
Verify that local LLM services, including Ollama, are bound and configured safely before they are exposed or connected.
本地向量记忆系统 - 基于 Ollama + SQLite 的 AI 助手记忆方案。\n 支持：Markdown 记录、向量搜索、本地嵌入、无 API 费用。\n 特点：本地部署、语义搜索、隐私优先。
Drive Vercel's `deepsec` agent-powered vulnerability scanner end-to-end: installing the `.deepsec/` workspace, bootstrapping `INFO.md`, running cost-aware `scan` / `process` /…
Quality assurance specialist for security, performance, accessibility, comprehensive testing, and quality standard alignment.
Scan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates.
Create or update OMA skills in the SSL-lite human-readable format. Use when adding a new `.agents/skills/{skill-name}/SKILL.md`, converting an existing skill to the standardized…
[omh] Technical proposal facing adversarial scrutiny: independent perspectives attack a proposal, then distill into a bundle a separate planner consumes.
[omh] Attack paths into an operated system: turn a system's components and data flows into assets, trust boundaries, attack scenarios, controls, and the security test that proves…
[omh] Hermes CTO Loop workflow: roadmap, PM, technical tradeoffs, risk, delivery, release, and follow-up operating cadence.
[omh] Hermes Production Audit workflow: evaluate release, deploy, security, observability, rollback, docs, and support readiness without claiming production access.
[omh] Security event on the code already shipped -- a CVE in a dependency, a secret committed to the repo, a license question, an advisory: triage reachability and severity,…
[omh] Hermes Security Safety Review workflow: review prompt, tool, secret, dependency, destructive-action, and explicit local plugin risks before agent or code execution.
[omh] Toolbelt readiness - inventory which MCP servers, CLIs, APIs, credentials, and connectors a workflow needs; use external-connector-readiness to assess one named integration…
[omh] Hermes Verification Gate workflow: define and record build, lint, typecheck, test, security, docs, generated-output, and CI evidence before completion or merge.
Trigger system backups, restore from backup files, and manage the SQLite database lifecycle. Supports export, import, and incremental snapshot strategies.
Search, score, scan, and import agent skills from GitHub repositories that contain SKILL.md, CLAUDE.md, .cursorrules, and similar agent skill files.
Use when designing or reviewing OmniStudio security across OmniScripts, Integration Procedures, DataRaptors, custom LWCs, Apex actions, guest-user exposure, and outbound HTTP…
Infrastructure layer for AI agent swarms — 88 MCP tools for mesh control, A2A protocol, OmniMesh VPN, CyberSync, web scraping, firewall management, browser automation, and more.
Place Mac + Hermes Mobile work local-first using Ona/OpenAI Cloud Agent ideas (persist across devices, customer-controlled credentials, reviewable receipts).
CLI for crypto portfolio tracking, market data, CEX history, and transaction lookups. Use when the user asks about crypto prices, wallet balances, portfolio values,…
On-chain data and contract security analysis. Includes Binance API and Bitget API for audit, token info, wallet, and contract analysis.
Binance Onchain Pay enables users to buy cryptocurrency with fiat (e.g., EUR, USD) or send existing crypto from their Binance account directly to any external on-chain wallet…
CLI for crypto portfolio tracking, market data, and CEX history. Use when the user asks about crypto prices, wallet balances, portfolio values, Coinbase/Binance holdings, or…
Automate OneDrive file management, search, uploads, downloads, sharing, permissions, and folder operations via Rube MCP (Composio). Always search tools first for current schemas.
Verified molt swarms - cryptographically prove your identity with Ed25519 signatures and WorldID proof-of-personhood. Register with services and verify unique human operators.
MS OneDrive integration. Manage Accounts. Use when the user wants to interact with MS OneDrive data.
Install and configure OneNote SDK/API authentication with delegated auth (MSAL). Use when setting up a new OneNote integration, configuring Azure AD app registration, or migrating…