← all publishers

autohandai

@autohandai-community-skills source repo

Report this profile Claim this profile

• 608 skills
• 0 followers
• 3 days ago last updated

1. ▌
   Analyzing Malware Persistence With Autoruns · autohandai-community-skills bundle

   Use Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registry keys, scheduled tasks, services, drivers, and startup locations on Windows systems.
   1 install
2. ▌
   Analyzing Ransomware Leak Site Intelligence · autohandai-community-skills bundle

   Monitor and analyze ransomware group data leak sites (DLS) to track victim postings, extract threat intelligence on group tactics, and assess sector-specific ransomware risk for proactive defense.
   1 install
3. ▌
   Analyzing Tls Certificate Transparency Logs · autohandai-community-skills bundle

   Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance. Use for proactive phishing domain detection and certificate monitoring.
   1 install
4. ▌
   Building Ioc Defanging And Sharing Pipeline · autohandai-community-skills bundle

   Build an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.
   0 installs
5. ▌
   Building Phishing Reporting Button Workflow · autohandai-community-skills bundle

   Implement a phishing report button in email clients with automated triage workflow that analyzes user-reported suspicious emails and provides feedback to reporters.
   0 installs
6. ▌
   Deobfuscating Powershell Obfuscated Malware · autohandai-community-skills bundle

   Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden payloads and C2 infrastructure.
   0 installs
7. ▌
   Detecting AWS Guardduty Findings Automation · autohandai-community-skills bundle

   Automate AWS GuardDuty threat detection findings processing using EventBridge and Lambda to enable real-time incident response, automatic quarantine of compromised resources, and security notification workflows.
   0 installs
8. ▌
   Detecting Business Email Compromise With AI · autohandai-community-skills bundle

   Deploy AI and NLP-powered detection systems to identify business email compromise attacks by analyzing writing style, behavioral patterns, and contextual anomalies that evade traditional rule-based filters.
   1 install
9. ▌
   Detecting Container Escape With Falco Rules · autohandai-community-skills bundle

   Detect container escape attempts in real-time using Falco runtime security rules that monitor syscalls, file access, and privilege escalation.
   1 install
10. ▌
    Detecting Insider Data Exfiltration Via Dlp · autohandai-community-skills bundle

    Detects insider data exfiltration by analyzing DLP policy violations, file access patterns, upload volume anomalies, and off-hours activity in endpoint and cloud logs. Uses pandas for behavioral analytics and statistical baselines. Use when investigating insider threats or building user behavior analytics for data loss prevention.
    1 install
11. ▌
    Exploiting Active Directory With Bloodhound · autohandai-community-skills bundle

    BloodHound is a graph-based Active Directory reconnaissance tool that uses graph theory to reveal hidden and unintended relationships within AD environments. Red teams use BloodHound to identify attac
    1 install
12. ▌
    Implementing Anti Phishing Training Program · autohandai-community-skills bundle

    Security awareness training is the human layer of phishing defense. An effective anti-phishing training program combines regular simulations, interactive learning modules, metric tracking, and positiv
    1 install
13. ▌
    Implementing API Schema Validation Security · autohandai-community-skills bundle

    Implement API schema validation using OpenAPI specifications and JSON Schema to enforce input/output contracts and prevent injection, data exposure, and mass assignment attacks.
    1 install
14. ▌
    Implementing Cisa Zero Trust Maturity Model · autohandai-community-skills bundle

    Implement the CISA Zero Trust Maturity Model v2.0 across the five pillars of identity, devices, networks, applications, and data to achieve progressive organizational zero trust maturity.
    1 install
15. ▌
    Implementing Runtime Security With Tetragon · autohandai-community-skills bundle

    Implement eBPF-based runtime security observability and enforcement in Kubernetes clusters using Cilium Tetragon for kernel-level threat detection and policy enforcement.
    1 install
16. ▌
    Implementing Siem Correlation Rules For Apt · autohandai-community-skills bundle

    Write multi-event correlation rules that detect APT lateral movement by chaining Windows authentication events, process execution telemetry, and network connection logs across hosts. Uses Splunk SPL and Sigma rule format to correlate Event IDs 4624, 4648, 4688, and Sysmon Events 1/3 within sliding time windows to surface attack sequences invisible to single-event detections.
    1 install
17. ▌
    Implementing Velociraptor For Ir Collection · autohandai-community-skills bundle

    Deploy and configure Velociraptor for scalable endpoint forensic artifact collection during incident response using VQL queries, hunts, and pre-built artifact packs across Windows, Linux, and macOS environments.
    1 install
18. ▌
    Nvidia Cuopt Numerical Optimization API CLI · autohandai-community-skills bundle

    LP, MILP, and QP (beta) with cuOpt — CLI only (MPS files, cuopt_cli). Use when the user is solving LP, MILP, or QP from MPS via command line.
    1 install
19. ▌
    Nvidia Megatron Bridge Adding Model Support · autohandai-community-skills bundle

    Guide for adding support for new LLM or VLM models in Megatron-Bridge. Covers bridge, provider, recipe, tests, docs, and examples.
    1 install
20. ▌
    Nvidia Megatron Bridge Nemo Rl E2e Testing · autohandai-community-skills bundle

    External NeMo-RL end-to-end validation workflow for Megatron-Bridge model/provider changes, including downstream compatibility checks, external RL lifecycle behavior, Megatron policy setup, HF import/export, checkpoint/resume, non-colocated vLLM refit, delta weight transfer, optional LoRA/generation variants, and questions such as "does this model work in NeMo-RL", "run NeMo-RL e2e", or "external RL loop validation". Covers running NeMo-RL Megatron policy jobs from a Bridge checkout, choosing GRPO/SFT/checkpoint/non-colocated refit variants, setting PYTHONPATH so NeMo-RL imports the local Bridge tree, and reporting pass/fail evidence.
    1 install
21. ▌
    Nvidia Megatron Bridge Perf Cpu Offloading · autohandai-community-skills bundle

    Validate and use CPU offloading in Megatron Bridge, including layer-level activation offloading and fractional optimizer state offloading with HybridDeviceOptimizer.
    0 installs
22. ▌
    Nvidia Model Optimizer Release Cherry Pick · autohandai-community-skills bundle

    Cherry-pick merged PRs labeled for a release branch into that branch, then open a PR and apply the cherry-pick-done label. Use when asked to "cherry-pick PRs for release/X.Y.Z", "pick PRs to release branch", or "cherry-pick labeled PRs".
    1 install
23. ▌
    Nvidia Nemoclaw Maintainer Cut Release Tag · autohandai-community-skills bundle

    Cut a new semver release — bump all version strings via bump-version.ts, open a release PR, and after merge tag main and push. Use when cutting a release, tagging a version, shipping a build, or preparing a deployment. Trigger keywords - cut tag, release tag, new tag, cut release, tag version, ship it.
    1 install
24. ▌
    Nvidia Tensorrt LLM Perf Host Optimization · autohandai-community-skills bundle

    Profiles and optimizes TensorRT-LLM host/CPU overhead using line_profiler (with nsys support planned). Runs iterative profile-analyze-optimize-validate rounds. Use when GPU utilization is low or optimizing PyExecutor throughput.
    1 install
25. ▌
    Nvidia Tensorrt LLM Perf Torch Cuda Graphs · autohandai-community-skills bundle

    Apply CUDA Graphs to PyTorch workloads — API selection (torch.compile, PyTorch make_graphed_callables, TE make_graphed_callables, MCore CudaGraphManager, FullCudaGraphWrapper, manual torch.cuda.graph), code compatibility, capture workflows, dynamic pattern handling, and troubleshooting. Triggers: CUDA graph, torch.cuda.graph, make_graphed_callables, reduce-overhead, graph capture, graph replay, kernel launch overhead, CudaGraphManager, FullCudaGraphWrapper, full-iteration graph, stream capture.
    1 install
26. ▌
    Nvidia Tilegym Converting Cutile To Triton · autohandai-community-skills bundle

    Converts cuTile GPU kernels (@ct.kernel) to Triton (@triton.jit). Handles standard in-repo conversion, debugging (cudaErrorIllegalAddress, shape mismatch, numerical mismatch), and mapping cuTile idioms (ct.load/ct.store, ct.Constant, ct.launch) to Triton equivalents. Covers dual-kernel layout flags (e.g. transpose=True/False + autotune grid via META) per translations/advanced-patterns.md. Use when converting, porting, or translating cuTile kernels to Triton, or debugging existing Triton translations.
    1 install
27. ▌
    Nvidia Video Search And Summarization Vios · autohandai-community-skills bundle

    Query VIOS REST APIs: sensor list, recording timelines, video clip extraction, snapshot capture, add/delete sensors and streams
    1 install
28. ▌
    Performing Access Review And Certification · autohandai-community-skills bundle

    Conduct systematic access reviews and certifications to ensure users have appropriate access rights aligned with their roles. This skill covers review campaign design, reviewer selection, risk-based p
    1 install
29. ▌
    Performing Authenticated Scan With Openvas · autohandai-community-skills bundle

    Configure and execute authenticated vulnerability scans using OpenVAS/Greenbone Vulnerability Management with SSH and SMB credentials for comprehensive host-level assessment.
    1 install
30. ▌
    Performing Dark Web Monitoring For Threats · autohandai-community-skills bundle

    Dark web monitoring involves systematically scanning Tor hidden services, underground forums, paste sites, and dark web marketplaces to identify threats targeting an organization, including leaked cre
    1 install
31. ▌
    Performing HTTP Parameter Pollution Attack · autohandai-community-skills bundle

    Execute HTTP Parameter Pollution attacks to bypass input validation, WAF rules, and security controls by injecting duplicate parameters that are processed differently by front-end and back-end systems.
    1 install
32. ▌
    Hunting For Anomalous Powershell Execution · autohandai-community-skills bundle

    Hunt for malicious PowerShell activity by analyzing Script Block Logging (Event 4104), Module Logging (Event 4103), and process creation events. The analyst parses Windows Event Log EVTX files to detect obfuscated commands, AMSI bypass attempts, encoded payloads, credential dumping keywords, and suspicious download cradles. Activates for requests involving PowerShell threat hunting, script block analysis, encoded command detection, or AMSI bypass identification.
    1 install
33. ▌
    Implementing AWS Iam Permission Boundaries · autohandai-community-skills bundle

    Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.
    1 install
34. ▌
    Implementing Dmarc Dkim Spf Email Security · autohandai-community-skills bundle

    SPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validate message integrity, and define policies for handling unauthenticated mail. Proper im
    1 install
35. ▌
    Implementing Endpoint Detection With Wazuh · autohandai-community-skills bundle

    Deploy and configure Wazuh SIEM/XDR for endpoint detection including agent management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, and automated response actions.
    1 install
36. ▌
    Implementing Gdpr Data Protection Controls · autohandai-community-skills bundle

    The General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing the collection, processing, storage, and transfer of personal data. This skill cover
    1 install
37. ▌
    Implementing Log Integrity With Blockchain · autohandai-community-skills bundle

    Build an append-only log integrity chain using SHA-256 hash chaining for tamper detection. Each log entry is hashed with the previous entry's hash to create a blockchain-like structure where modifying any entry invalidates all subsequent hashes. Implements log ingestion, chain verification, tamper detection with pinpoint identification, and periodic checkpoint anchoring to external timestamping services.
    1 install
38. ▌
    Implementing Mitre Attack Coverage Mapping · autohandai-community-skills bundle

    Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize rule development, and measure SOC detection maturity against adversary techniques.
    1 install
39. ▌
    Implementing Privileged Access Workstation · autohandai-community-skills bundle

    Design and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time access, and integration with CyberArk or BeyondTrust for secure administrative operations.
    1 install
40. ▌
    Implementing Rapid7 Insightvm For Scanning · autohandai-community-skills bundle

    Deploy and configure Rapid7 InsightVM Security Console and Scan Engines for authenticated and unauthenticated vulnerability scanning across enterprise environments.
    1 install
41. ▌
    Implementing Rbac Hardening For Kubernetes · autohandai-community-skills bundle

    Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.
    1 install
42. ▌
    Implementing Vulnerability Remediation Sla · autohandai-community-skills bundle

    Vulnerability remediation SLAs define mandatory timeframes for patching or mitigating identified vulnerabilities based on severity, asset criticality, and exploit availability. Effective SLA programs
    1 install
43. ▌
    Nvidia Megatron Bridge Mlm Bridge Training · autohandai-community-skills bundle

    Run Megatron-LM (MLM) and Megatron Bridge training with mock or real data. Covers correlation testing, available recipes, and multi-GPU examples.
    0 installs
44. ▌
    Analyzing Lnk File And Jump List Artifacts · autohandai-community-skills bundle

    Analyze Windows LNK shortcut files and Jump List artifacts to establish evidence of file access, program execution, and user activity using LECmd, JLECmd, and manual binary parsing of the Shell Link Binary format.
    1 install
45. ▌
    Building Cloud Security Posture Management · autohandai-community-skills bundle

    This skill guides security architects through designing and implementing a cloud security posture management program that continuously monitors infrastructure configurations across AWS, Azure, and GCP. It covers selecting CSPM tooling such as Wiz, Prisma Cloud, or native services, defining policy baselines, automating drift detection, and integrating posture findings into SOC workflows.
    0 installs
46. ▌
    Building Devsecops Pipeline With Gitlab CI · autohandai-community-skills bundle

    Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.
    0 installs
47. ▌
    Building Incident Timeline With Timesketch · autohandai-community-skills bundle

    Build collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-source event data for attack chain reconstruction and investigation documentation.
    0 installs
48. ▌
    Building Role Mining For Rbac Optimization · autohandai-community-skills bundle

    Apply bottom-up and top-down role mining techniques to discover optimal RBAC roles from existing user-permission assignments, reducing role explosion and enforcing least privilege.
    0 installs
49. ▌
    Building Threat Feed Aggregation With Misp · autohandai-community-skills bundle

    Deploy MISP (Malware Information Sharing Platform) to aggregate, correlate, and distribute threat intelligence feeds from multiple sources for centralized IOC management and automated SIEM integration.
    0 installs
50. ▌
    Conducting Social Engineering Pretext Call · autohandai-community-skills bundle

    Plan and execute authorized vishing (voice phishing) pretext calls to assess employee susceptibility to social engineering and evaluate security awareness controls.
    0 installs
51. ▌
    Detecting Arp Poisoning In Network Traffic · autohandai-community-skills bundle

    Detect and prevent ARP spoofing attacks using ARPWatch, Dynamic ARP Inspection, Wireshark analysis, and custom monitoring scripts to protect against man-in-the-middle interception.
    0 installs
52. ▌
    Detecting Spearphishing With Email Gateway · autohandai-community-skills bundle

    Spearphishing targets specific individuals using personalized, researched content that bypasses generic spam filters. Email security gateways (SEGs) like Microsoft Defender for Office 365, Proofpoint,
    1 install
53. ▌
    Exploiting Insecure Data Storage In Mobile · autohandai-community-skills bundle

    Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including unencrypted databases, world-readable files, insecure SharedPreferences, plaintext credential storage, and improper keychain/keystore usage. Use when performing mobile penetration testing focused on OWASP M9 (Insecure Data Storage) or assessing compliance with MASVS-STORAGE requirements. Activates for requests involving mobile data storage security, local storage exploitation, SharedPreferences analysis, or mobile data leakage assessment.
    1 install
54. ▌
    Hardening Docker Containers For Production · autohandai-community-skills bundle

    Hardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce leas
    1 install
55. ▌
    Exploiting Race Condition Vulnerabilities · autohandai-community-skills bundle

    Detect and exploit race condition vulnerabilities in web applications using Turbo Intruder's single-packet attack technique to bypass rate limits, duplicate transactions, and exploit time-of-check-to-time-of-use flaws.
    1 install
56. ▌
    Hunting For Unusual Service Installations · autohandai-community-skills bundle

    Detect suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event logs for Event ID 7045, analyzing service binary paths, and identifying indicators of persistence mechanisms.
    1 install
57. ▌
    Implementing JWT Signing And Verification · autohandai-community-skills bundle

    JSON Web Tokens (JWT) defined in RFC 7519 are compact, URL-safe tokens used for authentication and authorization in web applications. This skill covers implementing secure JWT signing with HMAC-SHA256
    1 install
58. ▌
    Implementing Mtls For Zero Trust Services · autohandai-community-skills bundle

    Configures mutual TLS (mTLS) authentication between microservices using Python cryptography library for certificate generation and ssl module for TLS verification. Validates certificate chains, checks expiration, and audits mTLS deployment status. Use when implementing zero-trust service-to-service authentication.
    1 install
59. ▌
    Implementing Threat Intelligence Platform · autohandai-community-skills bundle

    Build a MISP-backed threat intelligence platform that ingests IOCs from multiple feeds, correlates events with galaxy clusters, and enriches indicators via VirusTotal and AbuseIPDB. Uses PyMISP to create events, add attributes with IDS flags, tag with MITRE ATT&CK techniques, and export STIX 2.1 bundles for downstream SIEM consumption.
    1 install
60. ▌
    Nvidia Cuopt Numerical Optimization API C · autohandai-community-skills bundle

    LP, MILP, and QP (beta) with cuOpt — C API only. Use when the user is embedding LP, MILP, or QP in C/C++.
    1 install
61. ▌
    Nvidia Megatron Bridge Perf Megatron Fsdp · autohandai-community-skills bundle

    Operational guide for enabling Megatron FSDP in Megatron-Bridge, including config knobs, code anchors, pitfalls, and verification.
    0 installs
62. ▌
    Nvidia Megatron Bridge Perf Memory Tuning · autohandai-community-skills bundle

    Techniques for reducing peak GPU memory in Megatron Bridge — expandable segments, parallelism resizing, activation recompute, CPU offloading constraints, and common OOM fixes.
    0 installs
63. ▌
    Nvidia Megatron Bridge Recipe Recommender · autohandai-community-skills bundle

    Recommend and customize Megatron Bridge recipes for a user's model, GPU count, and training goal. Indexes library recipes (pretrain/SFT/PEFT) and performance recipes.
    0 installs
64. ▌
    Nvidia Megatron Core Build And Dependency · autohandai-community-skills bundle

    Container-based dev environment setup and dependency management for Megatron-LM. Covers acquiring and launching the CI container, uv package management, and updating uv.lock.
    0 installs
65. ▌
    Nvidia Megatron Core Update Golden Values · autohandai-community-skills bundle

    Refresh golden values from a GitHub Actions workflow run (failing-only or all jobs), score the change with average normalized relative differences, and produce a PR-ready summary. Use when the user asks to update goldens for a CI run, refresh golden values from a workflow ID, or generate a golden-value diff summary for a PR description.
    0 installs
66. ▌
    Nvidia Nemoclaw Maintainer Find Review Pr · autohandai-community-skills bundle

    Finds open GitHub PRs with security and priority-high labels, links each to its issue, detects duplicates (multiple PRs fixing the same issue), and presents a table of review candidates. Use when looking for the next PR to review. Trigger keywords - find pr, find review, next pr, pr to review, duplicate pr, security pr.
    1 install
67. ▌
    Nvidia Tensorrt LLM Kernel Triton Writing · autohandai-community-skills bundle

    ONLY for OpenAI Triton (@triton.jit) kernel development. NEVER use for CUDA C++ kernels, TileIR, or profiling tools (ncu, nsys). The user's request must involve Triton explicitly. Covers Triton-specific patterns: fused elementwise, reductions (softmax, LayerNorm, RMSNorm), tiled GEMM with triton.autotune, and flash attention. Workflow: design, write, verify (with fast-path for explicit requests).
    1 install
68. ▌
    Nvidia Tilegym Converting Cutile To Julia · autohandai-community-skills bundle

    Converts cuTile Python GPU kernels (@ct.kernel) to cuTile.jl Julia equivalents. Handles kernel syntax translation, 0-indexed to 1-indexed conversion, broadcasting differences, memory layout (row-major to column-major), type system mapping, and launch API differences. Use when converting, porting, or translating cuTile Python kernels to Julia cuTile.jl, or debugging/optimizing existing Julia cuTile translations.
    1 install
69. ▌
    Nvidia Tilegym Improve Cutile Kernel Perf · autohandai-community-skills bundle

    Iteratively optimize cuTile kernel performance through systematic profiling, bottleneck analysis, IR comparison, and targeted tuning. Covers tile sizes, occupancy, autotune configs, TMA, latency hints, persistent scheduling, num_ctas, flush_to_zero, and IR-level debugging. Use when asked to "optimize cutile kernel", "improve kernel perf", "tune cutile performance", "make kernel faster", or iteratively benchmark and refine a cuTile GPU kernel in the TileGym project.
    0 installs
70. ▌
    Performing Alert Triage With Elastic Siem · autohandai-community-skills bundle

    Perform systematic alert triage in Elastic Security SIEM to rapidly classify, prioritize, and investigate security alerts for SOC operations.
    1 install
71. ▌
    Performing Arp Spoofing Attack Simulation · autohandai-community-skills bundle

    Simulates ARP spoofing attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risks, test network detection capabilities, and validate ARP inspection countermeasures.
    1 install
72. ▌
    Performing Credential Access With Lazagne · autohandai-community-skills bundle

    Extract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red team operations.
    2 installs
73. ▌
    Performing Indicator Lifecycle Management · autohandai-community-skills bundle

    Indicator lifecycle management tracks IOCs from initial discovery through validation, enrichment, deployment, monitoring, and eventual retirement. This skill covers implementing systematic processes f
    1 install
74. ▌
    Performing Kubernetes Penetration Testing · autohandai-community-skills bundle

    Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets. Using tools
    1 install
75. ▌
    Performing Red Team Phishing With Gophish · autohandai-community-skills bundle

    Automate GoPhish phishing simulation campaigns using the Python gophish library. Creates email templates with tracking pixels, configures SMTP sending profiles, builds target groups from CSV, launches campaigns, and analyzes results including open rates, click rates, and credential submission statistics for security awareness assessment.
    1 install
76. ▌
    Performing Supply Chain Attack Simulation · autohandai-community-skills bundle

    Simulate and detect software supply chain attacks including typosquatting detection via Levenshtein distance, dependency confusion testing against private registries, package hash verification with pip, and known vulnerability scanning with pip-audit.
    1 install
77. ▌
    Testing For Open Redirect Vulnerabilities · autohandai-community-skills bundle

    Identify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.
    1 install
78. ▌
    Analyzing Browser Forensics With Hindsight · autohandai-community-skills bundle

    Analyze Chromium-based browser artifacts using Hindsight to extract browsing history, downloads, cookies, cached content, autofill data, saved passwords, and browser extensions from Chrome, Edge, Brave, and Opera for forensic investigation.
    1 install
79. ▌
    Analyzing Cobalt Strike Malleable Profiles · autohandai-community-skills bundle

    Parses Cobalt Strike malleable C2 profiles using pyMalleableC2 to extract beacon configuration, HTTP communication patterns, and sleep/jitter settings. Combines with JARM TLS fingerprinting to detect C2 servers on the network. Use when investigating suspected Cobalt Strike infrastructure or building detection signatures for C2 traffic.
    1 install
80. ▌
    Performing Physical Intrusion Assessment · autohandai-community-skills bundle

    Conduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device deployment to evaluate facility security controls.
    1 install
81. ▌
    Performing Privilege Escalation On Linux · autohandai-community-skills bundle

    Linux privilege escalation involves elevating from a low-privilege user account to root access on a compromised system. Red teams exploit misconfigurations, vulnerable services, kernel exploits, and w
    1 install
82. ▌
    Analyzing Azure Activity Logs For Threats · autohandai-community-skills bundle

    Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative operations, impossible travel, privilege escalation, and resource modifications. Builds KQL queries for threat hunting in Azure environments. Use when investigating suspicious Azure tenant activity or building cloud SIEM detections.
    1 install
83. ▌
    Analyzing Outlook Pst For Email Forensics · autohandai-community-skills bundle

    Analyze Microsoft Outlook PST and OST files for email forensic evidence including message content, headers, attachments, deleted items, and metadata using libpff, pst-utils, and forensic email analysis tools for legal investigations and incident response.
    1 install
84. ▌
    Analyzing Persistence Mechanisms In Linux · autohandai-community-skills bundle

    Detect and analyze Linux persistence mechanisms including crontab entries, systemd service units, LD_PRELOAD hijacking, bashrc modifications, and authorized_keys backdoors using auditd and file integrity monitoring
    1 install
85. ▌
    Analyzing Powershell Script Block Logging · autohandai-community-skills bundle

    Parse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encoded payloads, and living-off-the-land techniques. Uses python-evtx to extract and reconstruct multi-block scripts, applies entropy analysis and pattern matching for Base64-encoded commands, Invoke-Expression abuse, download cradles, and AMSI bypass attempts.
    1 install
86. ▌
    Conducting Domain Persistence With Dcsync · autohandai-community-skills bundle

    Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT, Domain Admin, and service account hashes for Golden Ticket creation.
    0 installs
87. ▌
    Conducting Full Scope Red Team Engagement · autohandai-community-skills bundle

    Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using MITRE ATT&CK-aligned TTPs to evaluate an organization's detection and response capabilities.
    0 installs
88. ▌
    Configuring Active Directory Tiered Model · autohandai-community-skills bundle

    Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. Covers Tier 0/1/2 separation, privileged access workstations (PAWs), administrative f
    0 installs
89. ▌
    Detecting Exfiltration Over Dns With Zeek · autohandai-community-skills bundle

    Detect DNS-based data exfiltration by analyzing Zeek dns.log for high-entropy subdomains and anomalous query patterns
    1 install
90. ▌
    Detecting Living Off The Land With Lolbas · autohandai-community-skills bundle

    Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including certutil, regsvr32, mshta, and rundll32 via process telemetry, Sigma rules, and parent-child process analysis
    1 install
91. ▌
    Exploiting Excessive Data Exposure In API · autohandai-community-skills bundle

    Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. The tester intercepts API responses and analyzes them for leaked PII, internal identifiers, debug information, or sensitive business data that the UI does not display but the API transmits. This maps to OWASP API3:2023 Broken Object Property Level Authorization. Activates for requests involving API data leakage testing, excessive data exposure, response filtering bypass, or API over-fetching.
    1 install
92. ▌
    Exploiting JWT Algorithm Confusion Attack · autohandai-community-skills bundle

    Exploits JWT algorithm confusion vulnerabilities where the server's token verification library accepts the algorithm specified in the JWT header rather than enforcing a fixed algorithm. The tester manipulates the alg header to switch from RS256 to HS256 (using the RSA public key as the HMAC secret), sets alg to none to bypass signature verification, or exploits kid/jku/x5u header injection to supply attacker-controlled keys. Activates for requests involving JWT algorithm confusion, alg none attack, key confusion attack, or JWT signature bypass.
    1 install
93. ▌
    Implementing Rbac For Kubernetes Cluster · autohandai-community-skills bundle

    Configure Kubernetes Role-Based Access Control (RBAC) to enforce least-privilege access to cluster resources. This skill covers Role/ClusterRole design, RoleBinding configuration, service account secu
    1 install
94. ▌
    Implementing Scim Provisioning With Okta · autohandai-community-skills bundle

    Implement automated user provisioning and deprovisioning using SCIM 2.0 protocol with Okta as the identity provider.
    1 install
95. ▌
    Implementing Stix Taxii Feed Integration · autohandai-community-skills bundle

    STIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Intelligence Information) are OASIS open standards for representing and transporting cyber threat intelligence.
    1 install
96. ▌
    Implementing Taxii Server With Opentaxii · autohandai-community-skills bundle

    Deploy and configure an OpenTAXII server to share and consume STIX-formatted cyber threat intelligence using the TAXII 2.1 protocol for automated indicator exchange between organizations.
    1 install
97. ▌
    Implementing Zero Trust Dns With Nextdns · autohandai-community-skills bundle

    Implement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.
    1 install
98. ▌
    Nvidia Nemoclaw Maintainer Pr Comparator · autohandai-community-skills bundle

    Compares competing PRs that target the same issue and recommends which one to merge. Runs gate, correctness, and quality checks; outputs a deterministic scorecard with reasoning trace. Use when an issue has two or more open PRs and a maintainer needs to decide which to merge.
    1 install
99. ▌
    Nvidia Nemoclaw User Configure Inference · autohandai-community-skills bundle

    Connects NemoClaw to a local inference server. Use when setting up Ollama, vLLM, TensorRT-LLM, NIM, or any OpenAI-compatible local model server with NemoClaw. Trigger keywords - nemoclaw local inference, ollama nemoclaw, vllm nemoclaw, local model server, openai compatible endpoint, switch nemoclaw inference model, change inference runtime, nemoclaw additional model, nemoclaw sub-agent model, openclaw sub-agent, agents.list, sessions_spawn, vlm-demo, nemoclaw tool calling, ollama tool calls, vllm tool-call-parser, raw json in tui, nemoclaw inference options, nemoclaw onboarding providers, nemoclaw inference routing.
    1 install
100. ▌
     Nvidia Tensorrt LLM Perf Torch Sync Free · autohandai-community-skills bundle

     Identify and eliminate host-device synchronizations in PyTorch code. Detects sync points (.item(), .cpu(), boolean indexing, torch.tensor on CUDA), classifies false vs true dependencies, provides sync-free alternatives. Triggers: sync-free, synchronization, .item(), .cpu(), host-device sync, eliminate syncs, CPU stall, non_blocking, set_sync_debug_mode, cudaStreamSynchronize, cudaEventSynchronize, remove syncs, async GPU.
     1 install