DevOps & Infra

wufufu770 Skill

Perform reverse engineering ransomware encryption routine assessment during authorized security testing. Use this skill when indicators of the vulnerability class are present in the target environment.

wufufu770 Skill

Deploy and operate the CAPEv2 malware sandbox (a Cuckoo derivative) to run samples in a monitored Windows guest VM, capturing behavioral sig…

tangledgroup Bundle

GitHub CLI v2.91.0 for managing repositories, pull requests, issues, releases, workflows, codespaces, and more from the terminal. Use when automating GitHub workflows, scripting API calls, managing PRs/issues/releases from the command line, or integrating GitHub into CI/CD pipelines.

tangledgroup Bundle

GitHub CLI v2.92.0 for managing repositories, pull requests, issues, releases, workflows, codespaces, and more from the terminal. Use when automating GitHub workflows, scripting API calls, managing PRs/issues/releases from the command line, or integrating GitHub into CI/CD pipelines.

tangledgroup Bundle

A skill for using yq v4.x, a lightweight and portable command-line YAML, JSON, XML, INI, Properties, CSV/TSV, HCL, TOML, Base64, and Lua processor with jq-like syntax. Use when reading, writing, transforming, or converting data between these formats from the terminal, scripts, CI/CD pipelines, or Docker containers without needing Python or Node.js dependencies.

tangledgroup Bundle

A comprehensive toolkit for the Deno 2.x JavaScript/TypeScript runtime, covering installation, permissions, built-in APIs, development tools (task runner, test runner, lint, fmt), TypeScript support, npm integration, workspaces, and deployment patterns. Use when building applications with Deno, managing Deno projects, working with Deno's standard library (@std on JSR), configuring permissions, or deploying to Deno Deploy.

tangledgroup Bundle

CLI proxy that filters and compresses command outputs before they reach LLM context, reducing token consumption by 60-90%. Supports 100+ commands across git, cargo, JavaScript, Python, Go, Docker, Kubernetes, AWS, and more. Use when working with AI coding assistants (Claude Code, Cursor, Copilot, Gemini, Codex, etc.) to reduce LLM token usage during development workflows.

tangledgroup Bundle

Official CLI for Gitea servers. Manage repositories, issues, pull requests, releases, and admin operations from the terminal. Supports multiple Gitea instances, OAuth2/token auth, and machine-readable output (JSON, YAML, CSV). Use when automating Gitea workflows, managing PRs and issues from the shell, or scripting CI/CD interactions.

tangledgroup Bundle

A comprehensive toolkit for the Deno 2.x JavaScript/TypeScript runtime, covering installation, permissions, built-in APIs, development tools (task runner, test runner, lint, fmt), TypeScript support, npm integration, workspaces, and deployment patterns. Use when building applications with Deno, managing Deno projects, working with Deno's standard library (@std on JSR), configuring permissions, or deploying to Deno Deploy.

tangledgroup Bundle

Lint, format, and configure Python code with Ruff (v0.4+). Use when the user mentions ruff, python linting, python formatting, code quality, replacing flake8/black/isort/pyupgrade, pyproject.toml ruff config, ruff check, ruff format, or needs help setting up Python linting and formatting. Also triggers for import sorting (isort replacement), docstring checks, auto-fixing lint violations, pre-commit hooks with ruff, CI/CD linting pipelines, and migrating from flake8 + black + isort to a single tool.

tangledgroup Bundle

Async ZeroMQ integration for Python asyncio providing transport-level APIs, stream abstraction, and RPC frameworks (request-reply, pipeline, pub-sub). Use when building async Python applications requiring message-oriented middleware, remote procedure calls over ZeroMQ, or event-driven distributed systems with high-performance messaging.

tangledgroup Bundle

Complete toolkit for AWS SDK for Python (Boto3) 1.43.1 providing high-level resource interface and low-level client access to 200+ AWS services with automatic pagination, retries, credential management, and session handling. Use when building Python applications that require AWS service integration including S3, EC2, Lambda, DynamoDB, SQS, SNS, IAM, and all other AWS services.

tangledgroup Bundle

Open-source coding agent that reduces API costs by 64.8% while maintaining 100% accuracy on complex refactoring tasks. Uses hash-anchored parallel edits, AST-native manipulation via tree-sitter, multi-file batching, and high-bandwidth context curation. Available as both VS Code extension and CLI. Fork of Cline. Use when building or configuring Dirac, understanding its edit engine internals, integrating with its tool system, or deploying it as a coding agent in CI/CD.

tangledgroup Bundle

Daemonless container engine with Docker-compatible CLI for managing containers, pods, images, volumes, and networks. Supports rootless operation, Kubernetes integration, systemd management, and remote access. Use when building, running, or managing containers without a daemon, implementing rootless workflows, orchestrating pods, or migrating from Docker.

tangledgroup Bundle

Daemonless container engine with Docker-compatible CLI for managing containers, pods, images, volumes, and networks. Supports rootless operation, Kubernetes integration, systemd management, and remote access. Use when building, running, or managing containers without a daemon, implementing rootless workflows, orchestrating pods, or migrating from Docker.

tangledgroup Bundle

Extremely fast Python linter and code formatter written in Rust with 900+ rules, block-level suppressions, and Markdown code formatting. 10x-100x faster than Flake8/Black. Use when linting Python code for style and correctness, formatting code consistently, configuring rule selection, suppressing violations, or needing fast incremental analysis in CI/CD and editors.

tangledgroup Bundle

Complete toolkit for AWS SDK for Python (Boto3) 1.42.89 providing high-level resource interface and low-level client access to 200+ AWS services with automatic pagination, retries, credential management, and session handling. Use when building Python applications that require AWS service integration including S3, EC2, Lambda, DynamoDB, SQS, SNS, IAM, and all other AWS services.

tangledgroup Bundle

Lightweight Rust-based text chunking library for RAG pipelines providing 10+ chunking strategies, pipeline orchestration, and vector database integrations with Python and JavaScript APIs. Use when building document ingestion pipelines for retrieval-augmented generation, splitting text into meaningful chunks, or constructing CHOMP workflows.

tangledgroup Bundle

Lightweight text chunking library for RAG pipelines providing 12+ chunkers, pipeline API, refineries, vector DB handshakes, and a self-hosted REST API. Use when building document ingestion pipelines for retrieval-augmented generation, splitting text into meaningful chunks, or constructing CHOMP workflows (fetch, clean, chunk, refine, store).

tangledgroup Bundle

Complete toolkit for Polars 0.53.0 providing high-performance DataFrame computing with lazy evaluation, expression-based API, streaming engine, GPU acceleration, and SQL interface. Covers data types, expressions, transformations (joins, pivots, window functions), IO (CSV, Parquet, JSON, Excel, databases, cloud storage), LazyFrame optimization, and streaming. Use when building Python data pipelines, ETL workflows, analytics queries, or migrating from pandas/Spark to Polars.

tangledgroup Bundle

Stanford NLP Group's Python NLP library for 80+ languages providing tokenization, POS tagging, lemmatization, dependency parsing, and NER via a neural pipeline built on PyTorch. Includes a Python wrapper for the Java Stanford CoreNLP server. Use when building multilingual NLP pipelines, performing linguistic analysis across languages, training custom models, or integrating biomedical/clinical NER.

tangledgroup Bundle

AI observability platform built on OpenTelemetry by the Pydantic team. Native SDKs for Python, JavaScript/TypeScript, and Rust. Use when instrumenting applications with distributed tracing, metrics, and logs; configuring auto-instrumentation for FastAPI, OpenAI, LangChain, and databases; querying trace data via SQL; or integrating with the Logfire cloud platform.

netvar1337 Bundle

AWS/Azure/GCP security auditing, container and Kubernetes hardening, Infrastructure as Code scanning, and cloud compliance assessment

netvar1337 Bundle

Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.

wufufu770 Skill

"Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-policy abuse, Jenkins script-console RCE and CVE-2024-23897 file read, GitLab CI runner-token registration, Terraform state file leakage, artifact/log secret leakage, pipeline env-var disclosure. Use when target has a public GitHub/

wufufu770 Skill

Perform cloud iam deep assessment during authorized security testing. Use this skill when indicators of the vulnerability class are present in the tar

wufufu770 Skill

Perform m365 entra attack assessment during authorized security testing. Use this skill when indicators of the vulnerability class are present in the

wufufu770 Skill

App Store search API (no auth, no scraping needed)

wufufu770 Skill

Deploy a Havoc C2 team server with Yaotl malleable profiles, generate evasive Demon agents using indirect syscalls and sleep obfuscation, an…

wufufu770 Skill

<2-5 sentences — issue + attacker impact, not a terse restatement of the title> evidence: url: <where found> timestamp: <UTC ISO8601> sha256: <hash of any downloaded artifact — never an object body, see §5> raw: <truncated to 2 KiB> references: [<advisory URL, vendor doc>] remediation: <action the asset owner can take> ``` UTC timestamps everywhere.

wufufu770 Skill

Run CloudFox's read-only Describe/List/Get enumeration (all-checks, role-trusts, secrets, endpoints, and permissions commands) to map AWS an…

wufufu770 Skill

Scans container images, Infrastructure-as-Code (Terraform, CloudFormation, Kubernetes manifests, Dockerfile, Helm), filesystems, git repos…

wufufu770 Skill

Perform conducting cloud penetration testing assessment during authorized security testing. Use this skill when indicators of the vulnerability class are present in the target environment.

wufufu770 Skill

Perform scanning containers with trivy in cicd assessment during authorized security testing. Use this skill when indicators of the vulnerability class are present in the target environment.

wufufu770 Skill

Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and…

ur-grue Skill

Generate a structured editorial calendar: content mapping across weeks or months, production stage tracking, external event alignment, and workload distribution — for publications planning their coverage pipeline.