autohandai
- 608 skills
- 0 followers
- 3 days ago last updated
- ▌ Implementing AWS Macie For Data Classification · autohandai-community-skills bundleImplement Amazon Macie to automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.
- ▌ Implementing Kubernetes Pod Security Standards · autohandai-community-skills bundlePod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS
- ▌ Implementing Pod Security Admission Controller · autohandai-community-skills bundleImplement Kubernetes Pod Security Admission to enforce baseline and restricted security profiles at namespace level using built-in admission controller.
- ▌ Implementing Proofpoint Email Security Gateway · autohandai-community-skills bundleDeploy and configure Proofpoint Email Protection as a secure email gateway to detect and block phishing, malware, BEC, and spam before messages reach user inboxes.
- ▌ Implementing Vulnerability Sla Breach Alerting · autohandai-community-skills bundleBuild automated alerting for vulnerability remediation SLA breaches with severity-based timelines, escalation workflows, and compliance reporting dashboards.
- ▌ Nvidia Cuopt Numerical Optimization API Python · autohandai-community-skills bundleSolve Linear Programming (LP), Mixed-Integer Linear Programming (MILP), and Quadratic Programming (QP, beta) with the Python API. Use when the user asks about optimization with linear or quadratic objectives, linear constraints, integer variables, scheduling, resource allocation, facility location, production planning, portfolio optimization, or least squares.
- ▌ Nvidia Megatron Bridge Perf Tp Dp Comm Overlap · autohandai-community-skills bundleOperational guide for enabling TP, DP, and PP communication overlap in Megatron-Bridge, including config knobs, code anchors, pitfalls, and verification.
- ▌ Nvidia Megatron Core Onboard Gb200 1node Tests · autohandai-community-skills bundleOnboard 1-node GitHub MR functional tests for GB200 from existing mr-scoped 2-node tests.
- ▌ Nvidia Tensorrt LLM Kernel Tileir Optimization · autohandai-community-skills bundleOptimize existing Triton kernels for NVIDIA TileIR backend on Blackwell GPUs (sm_100+). Adds TileIR-specific autotune configs: occupancy, num_ctas, TMA descriptors. Covers kernel classification (dot-related, norm-like, elementwise, reduction), type-specific transformations, and PTX-vs-TileIR benchmarking. Triggered by: "optimize for TileIR", "add TileIR configs", "Blackwell optimization", "TMA descriptors", "2CTA mode", "occupancy tuning". Kernels use standard `import triton`; TileIR activates via ENABLE_TILE=1 when nvtriton is installed.
- ▌ Vet · autohandai-community-skillsRun vet immediately after ANY logical unit of code changes. Do not batch your changes, do not wait to be asked to run vet, make sure you are proactive.
- ▌ Dotnet · autohandai-community-skillsC# language server (LSP) integration for coding agents and high-level .NET development skills.
- ▌ Azure AI · autohandai-community-skillsUse for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.
- ▌ Nvidia Video Search And Summarization Vss Frag · autohandai-community-skills bundleGenerate video summary reports using the VSS video_search_frag extension with Long Video Summarization (LVS), Enterprise RAG knowledge retrieval, and human-in-the-loop parameter collection. Use when: user wants to generate a video summary, report, or analysis using the frag pipeline.
- ▌ Performing Access Recertification With Saviynt · autohandai-community-skills bundleConfigure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC2, and HIPAA.
- ▌ Performing Asset Criticality Scoring For Vulns · autohandai-community-skills bundleDevelop and apply a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.
- ▌ Performing Cve Prioritization With Kev Catalog · autohandai-community-skills bundleLeverage the CISA Known Exploited Vulnerabilities catalog alongside EPSS and CVSS to prioritize CVE remediation based on real-world exploitation evidence.
- ▌ Performing Kubernetes Etcd Security Assessment · autohandai-community-skills bundleAssess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
- ▌ Performing Service Account Credential Rotation · autohandai-community-skills bundleAutomate credential rotation for service accounts across Active Directory, cloud platforms, and application databases to eliminate stale secrets and reduce compromise risk.
- ▌ Performing Web Application Scanning With Nikto · autohandai-community-skills bundleNikto is an open-source web server and web application scanner that tests against over 7,000 potentially dangerous files/programs, checks for outdated versions of over 1,250 servers, and identifies ve
- ▌ Performing Yara Rule Development For Detection · autohandai-community-skills bundleDevelop precise YARA rules for malware detection by identifying unique byte patterns, strings, and behavioral indicators in executable files while minimizing false positives.
- ▌ Prioritizing Vulnerabilities With Cvss Scoring · autohandai-community-skills bundleThe Common Vulnerability Scoring System (CVSS) is the industry standard framework maintained by FIRST (Forum of Incident Response and Security Teams) for assessing vulnerability severity. CVSS v4.0 (r
- ▌ Analyzing Certificate Transparency For Phishing · autohandai-community-skills bundleMonitor Certificate Transparency logs using crt.sh and Certstream to detect phishing domains, lookalike certificates, and unauthorized certificate issuance targeting your organization.
- ▌ Building Identity Federation With Saml Azure Ad · autohandai-community-skills bundleEstablish SAML 2.0 identity federation between on-premises Active Directory and Azure AD (Microsoft Entra ID) for seamless cross-domain authentication and SSO to cloud applications.
- ▌ Performing Cloud Storage Forensic Acquisition · autohandai-community-skills bundlePerform forensic acquisition and analysis of cloud storage services including Google Drive, OneDrive, Dropbox, and Box by collecting both API-based remote data and local sync client artifacts from endpoint devices.
- ▌ Performing Cryptographic Audit Of Application · autohandai-community-skills bundleA cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco
- ▌ Performing Ip Reputation Analysis With Shodan · autohandai-community-skills bundleAnalyze IP address reputation using the Shodan API to identify open ports, running services, known vulnerabilities, and hosting context for threat intelligence enrichment and incident triage.
- ▌ Performing Network Traffic Analysis With Zeek · autohandai-community-skills bundleDeploy Zeek network security monitor to capture, parse, and analyze network traffic metadata for threat detection, anomaly identification, and forensic investigation.
- ▌ Performing Open Source Intelligence Gathering · autohandai-community-skills bundleOpen Source Intelligence (OSINT) gathering is the first active phase of a red team engagement, where operators collect publicly available information about the target organization to identify attack s
- ▌ Building Automated Malware Submission Pipeline · autohandai-community-skills bundleBuilds an automated malware submission and analysis pipeline that collects suspicious files from endpoints and email gateways, submits them to sandbox environments and multi-engine scanners, and generates verdicts with IOCs for SIEM integration. Use when SOC teams need to scale malware analysis beyond manual sandbox submissions for high-volume alert triage.
- ▌ Building Red Team C2 Infrastructure With Havoc · autohandai-community-skills bundleDeploy and configure the Havoc C2 framework with teamserver, HTTPS listeners, redirectors, and Demon agents for authorized red team operations.
- ▌ Conducting Mobile Application Penetration Test · autohandai-community-skills bundlePerform a mobile application penetration test on Android and iOS apps to identify insecure data storage, certificate pinning bypass, API vulnerabilities, binary protections, and runtime manipulation using Frida, Objection, and MobSF.
- ▌ Conducting Social Engineering Penetration Test · autohandai-community-skills bundleDesign and execute a social engineering penetration test including phishing, vishing, smishing, and physical pretexting campaigns to measure human security resilience and identify training gaps.
- ▌ Configuring Certificate Authority With Openssl · autohandai-community-skills bundleA Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digital certificates. This skill covers building a two-tier CA hierarchy (Root CA +
- ▌ Detecting Network Scanning With Ids Signatures · autohandai-community-skills bundleDetect network reconnaissance and port scanning using Suricata and Snort IDS signatures, threshold-based detection rules, and traffic anomaly analysis to identify Nmap, Masscan, and custom scanning activity.
- ▌ Detecting Qr Code Phishing With Email Security · autohandai-community-skills bundleDetect and prevent QR code phishing (quishing) attacks that bypass traditional email security by embedding malicious URLs in QR code images within emails.
- ▌ Building Threat Intelligence Feed Integration · autohandai-community-skills bundleBuilds automated threat intelligence feed integration pipelines connecting STIX/TAXII feeds, open-source threat intel, and commercial TI platforms into SIEM and security tools for real-time IOC matching and alerting. Use when SOC teams need to operationalize threat intelligence by automating feed ingestion, normalization, scoring, and distribution to detection systems.
- ▌ Building Vulnerability Aging And Sla Tracking · autohandai-community-skills bundleImplement a vulnerability aging dashboard and SLA tracking system to measure remediation performance against severity-based timelines and drive accountability.
- ▌ Configuring Tls 1 3 For Secure Communications · autohandai-community-skills bundleTLS 1.3 (RFC 8446) is the latest version of the Transport Layer Security protocol, providing significant improvements over TLS 1.2 in both security and performance. It reduces handshake latency to 1-R
- ▌ Exploiting Ms17 010 Eternalblue Vulnerability · autohandai-community-skills bundleMS17-010 (EternalBlue) is a critical vulnerability in Microsoft's SMBv1 implementation that allows remote code execution. Originally discovered by the NSA and leaked by the Shadow Brokers in 2017, it
- ▌ Implementing Email Sandboxing With Proofpoint · autohandai-community-skills bundleEmail sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malware and evasive phishing payloads. Proofpoint Targeted Attack Protection (TAP) is an industry
- ▌ Implementing Envelope Encryption With AWS Kms · autohandai-community-skills bundleEnvelope encryption is a strategy where data is encrypted with a data encryption key (DEK), and the DEK itself is encrypted with a master key (KEK) managed by AWS KMS. This approach allows encrypting
- ▌ Implementing Honeytokens For Breach Detection · autohandai-community-skills bundleDeploys canary tokens and honeytokens (fake AWS credentials, DNS canaries, document beacons, database records) that trigger alerts when accessed by attackers. Uses the Canarytokens API and custom webhook integrations for breach detection. Use when building deception-based early warning systems for intrusion detection.
- ▌ Implementing Just In Time Access Provisioning · autohandai-community-skills bundleImplement Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access only when needed. This skill covers JIT architecture design, approval workflo
- ▌ Nvidia Megatron Bridge Linting And Formatting · autohandai-community-skills bundleCode style and quality rules for Megatron Bridge — ruff configuration, naming conventions, type hints, mypy rules, docstrings, copyright headers, logging, and the code review checklist.
- ▌ Nvidia Tensorrt LLM Trtllm Flashinfer Upgrade · autohandai-community-skills bundleUpgrade flashinfer-python version in TensorRT-LLM. Fetches the latest releases from GitHub (stable and nightly), compares with the current pinned version, lets the user pick a target version, and updates all version references across the repo. Use when the user wants to bump or upgrade flashinfer.
- ▌ Nvidia Tensorrt LLM Trtllm Serve Config Guide · autohandai-community-skills bundleGenerate a source-backed starting `trtllm-serve --config` YAML for basic aggregate single-node PyTorch serving, aligned with checked-in TensorRT-LLM configs and deployment docs. Preserves explicit latency / balanced / throughput objectives. Excludes disaggregated, multi-node, and non-MTP speculative configs.
- ▌ Performing Brand Monitoring For Impersonation · autohandai-community-skills bundleMonitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.
- ▌ Performing Active Directory Penetration Test · autohandai-community-skills bundleConduct a focused Active Directory penetration test to enumerate domain objects, discover attack paths with BloodHound, exploit Kerberos weaknesses, escalate privileges via ADCS/DCSync, and demonstrate domain compromise.
- ▌ Performing Cloud Native Forensics With Falco · autohandai-community-skills bundleUses Falco YAML rules for runtime threat detection in containers and Kubernetes, monitoring syscalls for shell spawns, file tampering, network anomalies, and privilege escalation. Manages Falco rules via the Falco gRPC API and parses Falco alert output. Use when building container runtime security or investigating k8s cluster compromises.
- ▌ Performing External Network Penetration Test · autohandai-community-skills bundleConduct a comprehensive external network penetration test to identify vulnerabilities in internet-facing infrastructure using PTES methodology, reconnaissance, scanning, exploitation, and reporting.
- ▌ Performing Linux Log Forensics Investigation · autohandai-community-skills bundlePerform forensic investigation of Linux system logs including syslog, auth.log, systemd journal, kern.log, and application logs to reconstruct user activity, detect unauthorized access, and establish event timelines on compromised Linux systems.
- ▌ Performing Soap Web Service Security Testing · autohandai-community-skills bundlePerform security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.
- ▌ Performing Wireless Network Penetration Test · autohandai-community-skills bundleExecute a wireless network penetration test to assess WiFi security by capturing handshakes, cracking WPA2/WPA3 keys, detecting rogue access points, and testing wireless segmentation using Aircrack-ng and related tools.
- ▌ Triaging Vulnerabilities With Ssvc Framework · autohandai-community-skills bundleTriage and prioritize vulnerabilities using CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree framework to produce actionable remediation priorities.
- ▌ Analyzing Office365 Audit Logs For Compromise · autohandai-community-skills bundleParse Office 365 Unified Audit Logs via Microsoft Graph API to detect email forwarding rule creation, inbox delegation, suspicious OAuth app grants, and other indicators of account compromise.
- ▌ Analyzing Threat Actor Ttps With Mitre Attack · autohandai-community-skills bundleMITRE ATT&CK is a globally-accessible knowledge base of adversary tactics, techniques, and procedures (TTPs) based on real-world observations. This skill covers systematically mapping threat actor beh
- ▌ Analyzing Typosquatting Domains With Dnstwist · autohandai-community-skills bundleDetect typosquatting, homograph phishing, and brand impersonation domains using dnstwist to generate domain permutations and identify registered lookalike domains targeting your organization.
- ▌ Building Ioc Enrichment Pipeline With Opencti · autohandai-community-skills bundleOpenCTI is an open-source platform for managing cyber threat intelligence knowledge, built on STIX 2.1 as its native data model. This skill covers building an automated IOC enrichment pipeline using O
- ▌ Implementing Network Policies For Kubernetes · autohandai-community-skills bundleKubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints. Combined with CNI plu
- ▌ Implementing Osquery For Endpoint Monitoring · autohandai-community-skills bundleDeploy osquery scheduled queries for continuous endpoint monitoring covering process inventory, network connections, file integrity, and persistence mechanisms. Generates osquery.conf with query packs, configures differential result logging, and analyzes query results to detect suspicious processes, unauthorized listeners, and file modifications in system directories.
- ▌ Nvidia Megatron Bridge Perf Moe Comm Overlap · autohandai-community-skills bundleMoE expert-parallel communication overlap in Megatron Bridge. Covers dispatch/combine overlap, flex dispatcher backends, and expert wgrad scheduling.
- ▌ Nvidia Megatron Bridge Perf Moe Long Context · autohandai-community-skills bundleLong-context MoE training guidance for Megatron Bridge. Covers CP sizing, selective recompute, dispatcher choices, and practical patterns from DSV3, Qwen3, and Qwen3-Next long-context experiments.
- ▌ Nvidia Megatron Bridge Perf Moe Vlm Training · autohandai-community-skills bundlePractical guidance for training MoE VLMs in Megatron Bridge. Compares FSDP and 3D-parallel approaches, using rounded lessons from Qwen3-VL, Qwen3-Next, and other multimodal experiments.
- ▌ Nvidia Megatron Bridge Perf Sequence Packing · autohandai-community-skills bundleValidate and use packed sequences and long-context training in Megatron-Bridge, distinguishing offline packed SFT for LLMs from in-batch packing for VLMs, and applying the right CP constraints.
- ▌ Nvidia Nemo Evaluator Launcher Nel Assistant · autohandai-community-skills bundleInteractive config wizard for NeMo Evaluator Launcher (NEL). Use when the user wants to create a new evaluation config from scratch, set up an evaluation from existing configs, or modify a NEL config (deployment, tasks, multi-node, interceptors). ALWAYS triggers on mentions of creating configs, setting up evaluations, configuring models for evaluation, or modifying NEL YAML files. Do NOT use for monitoring, debugging, or analyzing already-running evaluations.
- ▌ Nvidia Nemoclaw Maintainer Cross Issue Sweep · autohandai-community-skills bundleScans other open issues to find ones a given PR may also fix or accidentally break. Outputs adjacent-fix opportunities and contradiction risks with file:line evidence. Use when reviewing a PR to discover bundling opportunities or downstream impact across the issue queue.
- ▌ Nvidia Tensorrt LLM Trtllm Code Contribution · autohandai-community-skills bundleBest practices for contributing code to TensorRT-LLM. Covers the official contribution process (issue tracking, fork workflow, DCO signing), coding guidelines, implementation workflow, common mistakes, testing strategy, commit hygiene, and review readiness. Incorporates rules from CONTRIBUTING.md and CODING_GUIDELINES.md plus lessons distilled from real PR retrospectives. Use when implementing new features, optimizations, or bug fixes in the TensorRT-LLM codebase.
- ▌ Nvidia Video Search And Summarization Alerts · autohandai-community-skills bundleManage and monitor VSS alerts after the alerts profile is deployed. The deployment's mode (CV vs VLM real-time) is fixed at deploy time and determines the workflow — start/stop real-time alerts via the VSS Agent on a VLM deployment, onboard CV alerts by adding RTSP streams to VIOS on a CV deployment, query incidents, customize verifier prompts. Use when asked to start/stop a real-time alert, check or list alerts, add a camera, use a sample video for alerts, customize alert prompts, or view verdicts.
- ▌ Nvidia Video Search And Summarization Deploy · autohandai-community-skills bundleDeploy, debug, or tear down any VSS profile using a compose-centric workflow — config (dry-run) with env overrides, review resolved compose, then compose up. Use this skill when the user says "deploy vss", "deploy `profile`", "debug deploy", "verify deployment", or "why is my vss deploy broken".
- ▌ Nvidia Video Search And Summarization Report · autohandai-community-skills bundleProduce video analysis reports by discovering the deployed VSS agent, querying POST /generate for a timestamped captioned summary of the clip, then formatting the agent reply as the standard Video Analysis Report markdown.
- ▌ Nvidia Video Search And Summarization Rt Vlm · autohandai-community-skills bundleUse this skill when working with the RTVI VLM or RT-VLM microservice API on VSS 3.1. Generate dense captions and alerts for stored video files and live RTSP streams via `/v1/generate_captions_alerts`; upload media via `/v1/files`; add and remove live streams with `/v1/streams/add` and `/v1/streams/delete/{stream_id}`; call OpenAI-compatible `/v1/chat/completions`; consume Kafka caption, incident, and error topics; or debug rtvi-vlm responses. For deployment, read `references/deploy-rt-vlm-service.md` first.
- ▌ Analyzing Cobaltstrike Malleable C2 Profiles · autohandai-community-skills bundleParse and analyze Cobalt Strike Malleable C2 profiles using dissect.cobaltstrike and pyMalleableC2 to extract C2 indicators, detect evasion techniques, and generate network detection signatures.
- ▌ Analyzing Malware Sandbox Evasion Techniques · autohandai-community-skills bundleDetect sandbox evasion techniques in malware samples by analyzing timing checks, VM artifact queries, user interaction detection, and sleep inflation patterns from Cuckoo/AnyRun behavioral reports
- ▌ Analyzing Network Covert Channels In Malware · autohandai-community-skills bundleDetect and analyze covert communication channels used by malware including DNS tunneling, ICMP exfiltration, steganographic HTTP, and protocol abuse for C2 and data exfiltration.
- ▌ Conducting Internal Network Penetration Test · autohandai-community-skills bundleExecute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral movement paths, privilege escalation vectors, and sensitive data exposure within the corporate network.
- ▌ Conducting Spearphishing Simulation Campaign · autohandai-community-skills bundleSpearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access. Unlike broad phishing campaigns, spearphishing uses OSINT-derived intelligence to craf
- ▌ Configuring Microsegmentation For Zero Trust · autohandai-community-skills bundleConfiguring Microsegmentation For Zero Trust
- ▌ Exploiting Prototype Pollution In Javascript · autohandai-community-skills bundleDetect and exploit JavaScript prototype pollution vulnerabilities on both client-side and server-side applications to achieve XSS, RCE, and authentication bypass through property injection.
- ▌ Hunting For Data Staging Before Exfiltration · autohandai-community-skills bundleDetect data staging activity before exfiltration by monitoring for archive creation with 7-Zip/RAR, unusual temp folder access, large file consolidation, and staging directory patterns via EDR and process telemetry
- ▌ Implementing Aes Encryption For Data At REST · autohandai-community-skills bundleAES (Advanced Encryption Standard) is a symmetric block cipher standardized by NIST (FIPS 197) used to protect classified and sensitive data. This skill covers implementing AES-256 encryption in GCM m
- ▌ Implementing API Security Posture Management · autohandai-community-skills bundleImplement API Security Posture Management to continuously discover, classify, and score APIs based on risk while enforcing security policies across the API lifecycle.
- ▌ Implementing Ddos Mitigation With Cloudflare · autohandai-community-skills bundleConfigure Cloudflare DDoS protection with managed rulesets, rate limiting, WAF rules, Bot Management, and origin protection to mitigate volumetric, protocol, and application-layer attacks.
- ▌ Implementing Digital Signatures With Ed25519 · autohandai-community-skills bundleEd25519 is a high-performance digital signature algorithm using the Edwards curve Curve25519. It provides 128-bit security with 64-byte signatures and 32-byte keys, offering significant advantages ove
- ▌ Implementing Memory Protection With Dep Aslr · autohandai-community-skills bundleImplements memory protection mechanisms including DEP (Data Execution Prevention), ASLR (Address Space Layout Randomization), CFG (Control Flow Guard), and other exploit mitigations to prevent memory corruption attacks. Use when hardening endpoints against buffer overflow exploits, ROP chains, and code injection. Activates for requests involving memory protection, exploit mitigation, DEP, ASLR, or CFG configuration.
- ▌ Nvidia Megatron Bridge Build And Dependency · autohandai-community-skills bundleDev environment setup for Megatron Bridge — container-based development, uv package management, lockfile regeneration, adding dependencies, Slurm container usage, and common build pitfalls.
- ▌ Nvidia Megatron Core Linting And Formatting · autohandai-community-skills bundleLinting and formatting for Megatron-LM. Covers running autoformat.sh, tools (ruff, black, isort, pylint, mypy), and code style rules.
- ▌ Nvidia Tensorrt LLM Perf Workload Profiling · autohandai-community-skills bundleCode instrumentation for timing workloads. Two scenarios: (1) Training loop — inject manual timing to report per-iteration latency, throughput (samples/sec), and data load time. (2) Standalone kernel/op — write CUDA event timing code with warmup, per-iteration statistics, and anti-pattern avoidance. Also covers NVTX annotation for labeling profiler timelines. NOT for: running or analyzing profiler tools (nsys, ncu, Nsight Systems, Nsight Compute), writing kernels (Triton, CuTe, CUDA), applying optimizations (CUDA Graphs, gradient checkpointing, fusion), or interpreting roofline/SOL% metrics. Triggers: "measure throughput", "benchmark this function", "time my training loop", "samples per second", "NVTX annotate", "instrument my dataloader", "data load time", "kernel timing", "how do I time".
- ▌ Performing Agentless Vulnerability Scanning · autohandai-community-skills bundleConfigure and execute agentless vulnerability scanning using network protocols, cloud snapshot analysis, and API-based discovery to assess systems without installing endpoint agents.
- ▌ Performing Authenticated Vulnerability Scan · autohandai-community-skills bundleAuthenticated (credentialed) vulnerability scanning uses valid system credentials to log into target hosts and perform deep inspection of installed software, patches, configurations, and security sett
- ▌ Performing Dmarc Policy Enforcement Rollout · autohandai-community-skills bundleExecute a phased DMARC rollout from p=none monitoring through p=quarantine to p=reject enforcement, ensuring all legitimate email sources are authenticated before blocking unauthorized senders.
- ▌ Performing Docker Bench Security Assessment · autohandai-community-skills bundleDocker Bench for Security is an open-source script that checks dozens of common best practices around deploying Docker containers in production. Based on the CIS Docker Benchmark, it audits host confi
- ▌ Performing False Positive Reduction In Siem · autohandai-community-skills bundlePerform systematic SIEM false positive reduction through rule tuning, threshold adjustment, correlation refinement, and threat intelligence enrichment to combat alert fatigue.
- ▌ Performing Phishing Simulation With Gophish · autohandai-community-skills bundleGoPhish is an open-source phishing simulation framework used by security teams to conduct authorized phishing awareness campaigns. It provides campaign management, email template creation, landing pag
- ▌ Performing Privileged Account Access Review · autohandai-community-skills bundleConduct systematic reviews of privileged accounts to validate access rights, identify excessive permissions, and enforce least privilege across PAM infrastructure.
- ▌ Performing Ssl Tls Inspection Configuration · autohandai-community-skills bundleConfigure SSL/TLS inspection on network security devices to decrypt, inspect, and re-encrypt HTTPS traffic for threat detection while managing certificates, exemptions, and privacy compliance.
- ▌ Analyzing Cobalt Strike Beacon Configuration · autohandai-community-skills bundleExtract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure, malleable profiles, and operator tradecraft.
- ▌ Performing Network Packet Capture Analysis · autohandai-community-skills bundlePerform forensic analysis of network packet captures (PCAP/PCAPNG) using Wireshark, tshark, and tcpdump to reconstruct network communications, extract transferred files, identify malicious traffic, and establish evidence of data exfiltration or command-and-control activity.
- ▌ Performing Ssrf Vulnerability Exploitation · autohandai-community-skills bundleTest for Server-Side Request Forgery vulnerabilities by probing cloud metadata endpoints, internal network services, and protocol handlers through user-controllable URL parameters. Tests AWS/GCP/Azure metadata APIs (169.254.169.254), internal port scanning via HTTP, URL scheme bypass techniques, and DNS rebinding detection.
- ▌ Scanning Kubernetes Manifests With Kubesec · autohandai-community-skills bundlePerform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
- ▌ Testing For JSON Web Token Vulnerabilities · autohandai-community-skills bundleTest JWT implementations for critical vulnerabilities including algorithm confusion, none algorithm bypass, kid parameter injection, and weak secret exploitation to achieve authentication bypass and privilege escalation.