Data & Analytics

openclaw-commons Skill

Minimax Xlsx

openclaw-commons Skill

Csv Stringify

mouadja02 Skill

Use when rendering data in Streamlit — dataframes, tables, metrics, and charts. Covers choosing between st.dataframe, st.table, st.metric, and the built-in chart elements versus Plotly, Altair, or Matplotlib.

killvxk Bundle

执行用户和实体行为分析（UEBA），通过基于 SIEM 的行为基线和统计分析， 检测异常用户活动，包括不可能旅行、异常访问模式、权限滥用和内部威胁。 适用于 SOC 团队通过偏离既定行为规范来识别被攻陷账户或内部威胁。

killvxk Bundle

在授权渗透测试中使用 sqlmap 检测并利用 SQL 注入漏洞以提取数据库内容。

killvxk Bundle

为数据库系统（包括 Oracle、SQL Server、PostgreSQL 和 MySQL）部署特权访问管理。涵盖会话代理配置、凭据保管、查询审计、动态凭据生成和最小权限数据库角色。

openaccountants Skill

> Integration skill for Revolut Business statement CSV exports. Activate when the user uploads a Revolut Business CSV, Revolut statement, or mentions Revolut Business transactions.

openclaw-commons Skill

Csv Parse

openclaw-commons Skill

Xlsx Node

mouadja02 Bundle

Build institutional-quality DCF valuation models in Excel — revenue projections, FCF build, WACC, terminal value, Bear/Base/Bull scenarios, 5x5 sensitivity tables. Pairs with excel-author. Use for intrinsic-value equity analysis.

mouadja02 Skill

Build leveraged buyout models in Excel — sources & uses, debt schedule, cash sweep, exit multiple, IRR/MOIC sensitivity. Pairs with excel-author. Use for PE screening, sponsor-case valuation, or illustrative LBO in a pitch.

vincentchuwaichow Bundle

Review Microsoft Copilot Studio agent governance and application lifecycle management health including authentication configuration, DLP policies for connectors and actions, environment strategy, solution-based ALM across dev/test/prod, content moderation, analytics and telemetry, human-handoff and approval boundaries, sharing and publishing controls, and compliance posture via Microsoft Purview. Use to detect ungoverned agent publishing, overly permissive connector grants, absent DLP enforcement, and missing ALM discipline. Static review only; broad publishing and connector grants are live-guard gated.

vincentchuwaichow Bundle

Use this skill to diagnose Snowflake query and workload performance from evidence: Query Profile interpretation, partition pruning, local and remote spilling, queue versus execution time, warehouse sizing and multi-cluster scaling, caching, clustering, materialized views, search optimization, query acceleration, and benchmark design. Trigger on any slow query, queueing, or throughput question. Static review only: it never runs a query, never resizes a warehouse, and never proposes a size change before establishing the mechanism.

vincentchuwaichow Bundle

Use this skill to review analytical correctness and business semantics in Snowflake: join grain and fan-out, window and null semantics, semantic views and their declared relationships, metric and KPI contracts, BI workload design, the Cortex Analyst semantic boundary, and conflicting business definitions. Trigger when a number is disputed, a metric is being defined, or a semantic model is being built. Static review only: it never executes a query, and it never settles a business-definition conflict in SQL.

vincentchuwaichow Bundle

Approval-gated live guard for exactly one Snowflake warehouse or cost-governance change: a size, auto-suspend, auto-resume, scaling or concurrency setting, a resource-monitor assignment or threshold, or a supported budget operation. Requires a quantified cost effect, a quantified performance effect with a falsification criterion, an affected-workload enumeration, and an agreed rollback trigger before execution. Treats a suspend-capable monitor as an availability control. Runs as a custom role scoped to the single target; never ACCOUNTADMIN.

vincentchuwaichow Bundle

Review Microsoft 365 and Copilot value realization — license-to-value, adoption measurement, and ROI. Covers Copilot Control System measurement and reporting, Copilot Analytics and the Copilot Dashboard, Adoption Score and AI adoption score, the Microsoft 365 Copilot readiness/usage reports, license assignment optimization, and FastTrack adoption guidance. Use to turn license spend into measurable productivity and business outcomes. Advisory only; never makes licensing purchase commitments.

mouadja02 Bundle

Spaced-repetition flashcard system. Create cards from facts or text, chat with flashcards using free-text answers graded by the agent, generate quizzes from YouTube transcripts, review due cards with adaptive scheduling, and export/import decks as CSV.

killvxk Bundle

检测并利用二阶 SQL 注入漏洞，其中恶意输入存储在数据库中，并在不同应用程序操作期间在不安全的 SQL 查询中执行。

killvxk Bundle

对 Zeek conn.log 连接间隔进行统计分析，检测 C2 信标（Beaconing）模式。使用 ZAT 库将 Zeek 日志加载到 Pandas DataFrame，计算到达时间间隔标准差，标记具有低抖动（Low Jitter）的周期性连接。适用于在网络数据中狩猎命令与控制（C2）回调行为。

killvxk Bundle

解析 Apache 和 Nginx 访问日志，检测 SQL 注入（SQL Injection）尝试、本地文件包含（Local File Inclusion）、 目录遍历（Directory Traversal）、Web 扫描器指纹及暴力破解（Brute Force）模式。 使用基于正则表达式的模式匹配对照 OWASP 攻击签名、GeoIP 富化进行来源溯源， 以及针对请求频率和响应大小异常值的统计异常检测。

killvxk Bundle

使用 Python pandas 从 NetFlow/IPFIX 数据构建网络流量基线，实现统计分析、Z-Score 异常检测以及按小时/按天的流量模式分析。

killvxk Bundle

通过 API 参数、请求头和请求体，测试 API 的注入漏洞，包括 SQL 注入、NoSQL 注入、操作系统命令注入、LDAP 注入和服务端请求伪造（SSRF）。测试人员针对不同的后端技术和注入上下文构造恶意载荷，以提取数据、执行命令或访问内部服务。对应 OWASP API8:2023 安全错误配置和 API7:2023 SSRF。适用于 API 注入测试、API 中的 SQL 注入、NoSQL 注入、SSRF 测试或 API 输入验证评估等请求场景。

killvxk Bundle

在授权渗透测试中，使用手动技术和 sqlmap 等自动化工具识别并利用 Web 应用程序中的 SQL 注入漏洞。测试人员通过基于错误、基于联合、布尔盲注和时间盲注技术，在所有主要数据库引擎（MySQL、PostgreSQL、MSSQL、Oracle）中检测注入点，以演示数据提取、认证绕过和潜在的远程代码执行。

killvxk Bundle

部署和配置 osquery，使用基于 SQL 的查询对运行进程、开放端口、已安装软件和系统配置进行实时端点监控。 适用于构建端点状态可见性、跨部署范围进行威胁狩猎或实施合规监控的场景。

killvxk Bundle

使用 Python gophish 库自动化 GoPhish 钓鱼模拟活动。创建含追踪像素的邮件模板、 配置 SMTP 发送配置文件、从 CSV 构建目标组、发起活动，并分析结果， 包括打开率、点击率和凭据提交统计数据，用于安全意识评估。

killvxk Bundle

使用编码技术、HTTP 方法操控、参数污染和载荷混淆绕过 Web 应用防火墙保护，将 SQL 注入、XSS 及其他攻击载荷穿透 WAF 检测规则。

killvxk Bundle

分析嵌入在 Microsoft Office 文档（Word、Excel、PowerPoint）中的恶意 VBA 宏， 识别下载摇篮、载荷执行、持久化机制和反分析技术。 使用 olevba、oledump 和 VBA 去混淆提取攻击链。 适用于 Office 宏分析、VBA 恶意软件调查、恶意文档分析或基于文档的威胁检查相关请求。

killvxk Bundle

通过分析 DLP 策略违规、文件访问模式、上传量异常和非工作时间活动，检测内部数据渗出（Insider Data Exfiltration）行为。 使用 pandas 进行行为分析和统计基线建立。适用于内部威胁调查或为数据防丢失构建用户行为分析体系。

killvxk Bundle

本技能涵盖在OT环境中加固和保护过程历史数据服务器（OSIsoft PI、Honeywell PHD、GE Proficy、AVEVA Historian）。涉及跨Purdue模型各层级的网络部署、历史数据服务器接口的访问控制、通过数据二极管或PI-to-PI连接器在DMZ中进行数据复制、历史数据查询中的SQL注入防护，以及用于安全分析、法规报告和过程优化的过程数据完整性保护。

mouadja02 Skill

Build PowerPoint decks headless with python-pptx. Pairs with excel-author for model-backed decks where every number traces to a workbook cell. Use for pitch decks, IC memos, earnings notes.

mouadja02 Skill

ETL/ELT → dbt migration — Informatica/PowerBI mappings, transformation logic, YAML

mouadja02 Bundle

Build auditable Excel workbooks headless with openpyxl — blue/black/green cell conventions, formulas over hardcodes, named ranges, balance checks, sensitivity tables. Use for financial models, audit outputs, reconciliations.

mouadja02 Skill

Build accretion/dilution (merger) models in Excel — pro-forma P&L, synergies, financing mix, EPS impact. Pairs with excel-author. Use for M&A pitches, board materials, or deal evaluation.

mouadja02 Skill

Build comparable company analysis in Excel — operating metrics, valuation multiples, statistical benchmarking vs peer sets. Pairs with excel-author. Use for public-company valuation, IPO pricing, sector benchmarking, or outlier detection.

mouadja02 Skill

Snowflake SQL — QUALIFY, FLATTEN, VARIANT/OBJECT/ARRAY, tasks, streams, stages

mouadja02 Bundle

Build fully-integrated 3-statement models (IS, BS, CF) in Excel with working capital schedules, D&A roll-forwards, debt schedule, and the plugs that make cash and retained earnings tie. Pairs with excel-author.