Implement a structured threat intelligence lifecycle encompassing planning, collection, processing, analysis, — from Undermybelt/hermes-skills
Produces structured threat models for software systems using STRIDE on data flow diagrams. Generates DFDs with trust boundaries, identifies threats per element, scores risks, and…
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction.
Threat modeling with STRIDE methodology, threat model documentation, SDLC integration, and evidence portfolio per Hack23 Secure Development Policy
Threat-model a design with STRIDE: draw the data-flow diagram and trust boundaries, walk STRIDE per element, rank threats by likelihood×impact, and map each to a mitigation or a…
Threat modeling methodologies using STRIDE, attack trees, and risk assessment for proactive security analysis.
Analyze cybersecurity threat intelligence, triage security alerts, classify IOCs, map attacks to MITRE ATT&CK kill chain, reduce false positives, and attribute threat actors.
Threat-intel signal ingest — converts a CVE + affected-asset + claim payload into a queued engagement-scope row for the validation pipeline.
Classify cyber security incidents, CVEs, threat-intelligence reports, red-team write-ups, and vendor advisories using the TLCTC v2.4 taxonomy (10 cause-oriented threat clusters,…
Analyze current Claude Code session token usage via Splunk. Shows per-model, per-tool, and subagent token breakdown with cache efficiency metrics.
Audita cualquier URL web para detectar incumplimientos legales — RGPD, LSSI-CE, cookies (Guía AEPD), accesibilidad WCAG 2.2 / EAA, seguridad HTTP, publicidad engañosa — y genera…
Explica el propósito y uso de cada herramienta comprimida y utilidad del repositorio de fabricante en el contexto del desarrollo de proyectos de domótica.
Tracecat is an open-source, AI-native security automation platform built as a self-hosted alternative to Tines and Splunk SOAR.
Threat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control
Transcribe audios (notas de voz de WhatsApp y otros formatos: .ogg, .opus, .mp3, .m4a, .wav, .webm) a texto en español, y encadena automáticamente con el flujo…
Triage a security alert or case. Use when given an ALERT_ID or CASE_ID to assess if it's a real threat.
Analyze a GitHub pull request for security impact, run targeted vulnerability-investigation skills when Stage 1 finds credible threats, and return a structured verdict instead of…
Defensive triage methodology for classifying and prioritizing bug classes, the blue-team answer to offensive bug identification.
Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events,
Verify an external or AI-generated security report against the actual codebase before acting on it. Use when handed a scanner PDF, automated teardown, audit report, or bug-bounty…
Parse Windows event logs into fast timelines and detection-rich outputs so agents can triage suspicious host activity, search for known patterns, and hand investigators reviewable…
Review Apple text code for correctness, performance, and modernization risk in a single pass with severity-ranked findings.
Handle bidirectional text, right-to-left languages, mixed Arabic/Hebrew/Latin content, writing-direction APIs at every layer, and cursor/selection behavior in bidi text.
Pick text colors that adapt to dark mode, vibrancy, and accessibility settings across UIKit, AppKit, and SwiftUI — semantic label colors, AppKit's textColor vs labelColor split,…
Measure rendered size of strings and attributed strings, size views to fit text content, and read per-line metrics from NSLayoutManager and NSTextLayoutManager.
Integrate Writing Tools into UITextView, NSTextView, custom UITextInput views, or fully custom editors via UIWritingToolsCoordinator.
Maps Tauri application lifecycle security threats across development, build, distribution, and runtime phases, with mitigation strategies and best practices.
Ungewoehnlich niedriges Angebot prüfen: Aufgreifschwelle, Aufklaerung, Kalkulationsrisiken, Sozial-/Umweltpflichten, Zuschlagsverbot und Ruge: Ungewoehnlich niedriges Angebot…
Auf Bieterseite: Ungewöhnlich niedrige Angebote prüfen: Aufgreifschwelle, Aufklärung, Kalkulationsbelege, Sozial-/Umweltpflichten, Zuschlagsrisiko und Rügeantwort.
Ungewöhnlich niedrige Angebote auf Auftraggeberseite prüfen: bestimmt Auffälligkeit ohne starre Prozentautomatik, fordert kalkulationsbezogen auf, bewertet Erfüllbarkeit und…
Prüft die Einhaltung der Preisangabenverordnung 2022 (PAngV) bei Gesamtpreisen, Grundpreisen, Streichpreisen und Versandkosten, insbesondere die 30-Tage-Niedrigstpreisreg — from…
Covers UE5.3–5.5 on Windows: C++ modules, Blueprints vs C++, Gameplay Framework/GAS intro, Enhanced Input, Nanite/Lumen, packaging, and Unreal Insights.
Configura el perfil del usuario y establece reglas de interacción para el agente. USA esta skill cuando el usuario mencione 'configurar', 'setup', 'perfil', 'reglas', o cuando el…
Implements compile-time regex using GeneratedRegexAttribute Source Generator. Use when working with Regex patterns for better performance and AOT compatibility.
HOAI-Fachfrage: Honorarvereinbarung mit Verbrauchern nach § 7 HOAI, Textform, Hinweis auf höhere/niedrigere Honorare, Orientierungswerte und Folgen fehlender oder…
Prüfung und Entwurf einer Verdachtsmeldung an die FIU nach § 43 GwG – niedrige Meldeschwelle ('Tatsachen darauf hindeuten'), Form über goAML, § 46 Stillhaltefrist (3 Werktage), §…
Pruefraster fuer Vergabenachpruefungs-Verfahren bei Vergabekammern (oberhalb der EU-Schwellenwerte). Pruefung Rechtsschutz § 155 ff. GWB Antragsbefugnis § 160 Abs.
Vergaberechtliche Vollprüfung für die Vergabestelle vor Verfahrensfreigabe, Zuschlag oder Vertragsänderung sowie bei Rüge oder Nachprüfung.
Führt zulässige Verhandlungsschritte und die belegte Wertung einer Sektorenvergabe zusammen. Prüft Konzeptqualität, Preisrechnung und ungewöhnlich niedrige Angebote und erstellt…
Audita citas de jurisprudencia, doctrina y normativa en escritos jurídicos españoles y europeos. Activar SIEMPRE que el usuario aporte un escrito procesal, dictamen, informe…
Verifica si una fuente de datos externa (sitio web, API, feed RSS) se puede usar en el pipeline de ingesta — comprueba su robots.txt, si bloquea agentes de IA, si el endpoint…
Use when Pedro invokes `/visual` (with or without flags like `-auto-off`, `-auto-on`, `-status`), asks to "ver isso no HTML", wants a visual presentation of a…
DeFi risk analysis toolkit powered by WACH.AI via x402 payments using AWAL wallet custody. Use when the user asks to check if a token is safe, assess DeFi risk, detect honeypots,…
Generate WaveJSON timing diagrams for digital signals and create HTML viewers to display them. Use when documenting signal timing, creating timing diagrams, analyzing protocol…
Zuschlagsmatrix anwenden: Preis, Qualität, Tempo, Lebenszykluskosten und Konzeptwertung getrennt, transparent und prüffest bewerten.
Genera Flow JSON válido y listo para usar en WhatsApp Business Platform. Úsalo siempre que el usuario pida crear, construir o escribir un WhatsApp Flow, un Flow JSON, un…
Hacer la build (paquete de distribución) de Windows de Brakeza3D, siempre desde master: comprobar el exe, generar ..\build, el zip y el instalador Inno Setup…
General mathematics skill and subsystem for OpenScientist. Use for every type of mathematical work: problem solving, proof generation, proof critique, disproof, theorem…
Internal Witsoc proof-artifact generation subskill. Use inside the Witsoc subsystem to create, repair, structurally check, verifier-context-build, receipt-track, and optionally…
Use when 王建硕 wants to evaluate whether a change to VoiceDrop's 挖矿 system prompt is actually better than the live version — runs the local eval harness (golden fixtures ×…
Use when 王建硕 wants to turn his uploaded VoiceDrop voice memos into 微信公众号 article drafts — pulling the unprocessed recordings sitting on jianshuo.dev/files (the R2 inbox),…
VoiceDrop 的入口。所有能力都在 MCP 里（voicedrop.cn/mcp，32 个工具：文章读写与版本、文风与蒸馏、挖矿与重写、社区与投币、算力、分享/公众号/小红书）。本 skill 只做一件事——把你接上那个 MCP：用它的 login 工具做 6+4 手机配对登录拿到令牌，然后接进客户端。触发词："voicedrop"、"登录…
Use when 王建硕 wants to decide whether a VoiceDrop article should get an AI 题图 (公众号封面), and which style of image prompt to use — before generating any cover.
Führt Produktteam durch Security-by-Design: Bedrohungsmodell, Updatekanal, SBOM, Schwachstellenprozess, Logging und Notfallplan. — from Klotzkette/claude-fuer-deutsches-recht
Triage AEM Workflow issues on AEM 6.5 LTS and AMS by classifying symptoms, gathering the right logs and metrics, and mapping to runbooks or Splunk searches.
WorkIQ - Microsoft 365 tool surface for agents. Use for any workplace question or write action where data lives in M365.
WorkIQ - Microsoft 365 tool surface for agents. Use for any workplace question or write action where data lives in M365.
6-perspective adversarial review for high-stakes turns (architecture decisions, refactor planning, deployment review) — fans out architect, adversary (7-vector attack),…
Deep-dive into Amazon Bedrock AgentCore platform design, service selection, deployment, and production operations.
Recommend curated prompts from a 10,000+ real-world image generation prompt library.\n Works with ANY AI image model — Nano Banana Pro, Nano Banana 2, Seedream 5.0, GPT Image…