Skills for your AI
Coordinates multi-domain IT operations by decomposing tasks, routing them to specialist agents, sequencing and merging their outputs, and enforcing safety review gates. Use when a request spans PowerShell, .NET, Windows, Azure, M365, or security domains, when
Drafts and reviews IT policies, compliance assessments, risk and vulnerability plans, training, incident and disaster plans, vendor and asset procedures, and audit preparation. Use when the user asks to create, review, or improve an IT policy, prepare for an a
Guides IT support staff through security best practices and response planning across passwords, encryption, network security, phishing, patching, incident response, mobile devices, training, audits, backup, and physical security. Use when drafting security gui
Audits JWT-based authentication for bypass and implementation flaws such as algorithm confusion, weak HMAC secrets, header injection, and missing claim validation. Use when testing a web or mobile app that uses JWTs, reviewing captured tokens, or planning auth
Hunts LDAP and XPath injection vulnerabilities in web applications, covering backend confirmation, auth bypass, blind attribute exfiltration, and directory enumeration. Use when testing a login or search feature for LDAP/XPath injection, confirming an injectab
Guides a full local bug bounty workflow — recon, scope verification, pre-hunt learning, vulnerability hunting, AI/LLM testing, bug chaining, bypass testing, code grep, and reporting. Use when starting a hunt, verifying scope, testing a bug class, chaining bugs
Guides malware identification, reverse engineering, behavior and traffic analysis, sandbox setup, signature creation, incident response, forensics, prevention advice, and threat intelligence reporting. Use when an analyst provides a sample, code, PCAP, memory
Statically audit MCP configs for mutable npm/npx package references before approval or CI, without executing discovered MCP servers.
Audits MCP server implementations for authentication, authorization, RBAC, and compliance issues and produces remediation reports. Use when reviewing OAuth 2.1/PKCE setup, checking tool annotations and role least privilege, scanning for OWASP Top 10 and MCP-sp
Audits meme coins and tokens for rug pull vectors and security risks using on-chain data and source code analysis. Use when a user gives a token contract address or mint address and chain and asks whether it is safe, wants a rug pull check, or requests a secur
Tests multi-factor authentication flows for seven bypass patterns and chains confirmed primitives toward account takeover. Use when auditing MFA/2FA enforcement on an authorized target, testing OTP replay, response manipulation, step skip, prefix oracles, brut
Detects and reports security-state changes during authorized red-team engagements, such as WAF rule deployments, concurrent attacker activity, and detection-induced IP blocks. Use when payloads stop reproducing, lockout counts rise, or an IP starts returning 4
Hunts miscellaneous web app vulnerabilities from bug bounty patterns, covering access control, invitation flows, token scope, cross-tenant access, SSRF, SAML, and DNS hygiene. Use when authorized to test a target for privilege bypass, information disclosure, s
Manages and maintains Microsoft SQL Server databases through T-SQL and MS SQL extension tools, covering inspection, query tuning, backup and restore, monitoring, upgrades, security, and disaster recovery. Use when the user asks to connect to a SQL Server insta
Sets up and reviews Stack Auth with Neon database authentication, including schema, user components, query patterns and security checks. Use when a project needs auth setup, a neon_auth schema, user profile or protected pages, user-data joins, or an auth secur
Deploys web projects to Netlify for preview or production by verifying CLI authentication, detecting framework settings, linking a site, installing dependencies, and running the deploy. Use when the user asks to deploy, host, publish, or link a site on Netlify
Guides network engineers through planning, designing, and documenting network compliance measures across access control, encryption, monitoring, vulnerability management, incident response, and disaster recovery. Use when designing NAC or segmentation, selecti
Analyzes enterprise network performance, bandwidth, QoS, latency, security, capacity, and infrastructure data to produce prioritized optimization recommendations. Use when asked to review network metrics, plan QoS or SD-WAN, forecast capacity, assess security
Turns network performance, security, configuration, capacity, and architecture data into analyses, recommendations, and draft optimization plans. Use when asked to analyze network metrics, assess security or vulnerabilities, forecast capacity, standardize conf
Analyzes network traffic, latency, packet loss, device, security, and end-user performance data and recommends optimizations. Use when asked to analyze traffic or bandwidth, diagnose latency or packet loss, review application or server performance, assess netw
Assesses, recommends, documents, and guides implementation of network security measures including audits, MFA, firewall rules, encryption, IDS, incident response, and employee training. Use when a network administrator asks for a security posture review, compl
Provides network security guidance covering fundamentals, firewall hardening, IDS/IPS monitoring, VPNs, secure architecture, incident response, access control, audits, wireless security, encryption and patch management. Use when an IT specialist needs step-by-
Audits network security configurations, logs, and policies and drafts remediation, hardening, and training plans for IT managers. Use when reviewing infrastructure vulnerabilities, firewall rules, IDS logs, access control, device hardening, wireless encryption
Analyzes network logs, traffic, threat intelligence, and scan results to detect intrusions, support incident response, prioritize patches, and produce security reports. Use when the analyst provides log files, pcap or flow data, IOCs, vulnerability scan output
