← all publishers

autohandai

@autohandai-community-skills source repo

Report this profile Claim this profile

• 608 skills
• 0 followers
• 3 days ago last updated

1. ▌
   Performing Bluetooth Security Assessment · autohandai-community-skills bundle

   Assess Bluetooth Low Energy device security by scanning, enumerating GATT services, and detecting vulnerabilities
   1 install
2. ▌
   Performing Initial Access With Evilginx3 · autohandai-community-skills bundle

   Perform authorized initial access using EvilGinx3 adversary-in-the-middle phishing framework to capture session tokens and bypass multi-factor authentication during red team engagements.
   1 install
3. ▌
   Performing Lateral Movement With Wmiexec · autohandai-community-skills bundle

   Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.
   1 install
4. ▌
   Performing Log Source Onboarding In Siem · autohandai-community-skills bundle

   Perform structured log source onboarding into SIEM platforms by configuring collectors, parsers, normalization, and validation for complete security visibility.
   1 install
5. ▌
   Analyzing Apt Group With Mitre Navigator · autohandai-community-skills bundle

   Analyze advanced persistent threat (APT) group techniques using MITRE ATT&CK Navigator to create layered heatmaps of adversary TTPs for detection gap analysis and threat-informed defense.
   1 install
6. ▌
   Analyzing Network Flow Data With Netflow · autohandai-community-skills bundle

   Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns. Uses the Python netflow library to decode flow records, builds traffic baselines, and applies statistical analysis to identify flows with abnormal byte counts, connection durations, and periodic timing patterns.
   1 install
7. ▌
   Analyzing Supply Chain Malware Artifacts · autohandai-community-skills bundle

   Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise.
   1 install
8. ▌
   Building Threat Actor Profile From Osint · autohandai-community-skills bundle

   Build comprehensive threat actor profiles using open-source intelligence (OSINT) techniques to document adversary motivations, capabilities, infrastructure, and TTPs for proactive defense.
   0 installs
9. ▌
   Building Vulnerability Scanning Workflow · autohandai-community-skills bundle

   Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security vulnerabilities across infrastructure. Use when SOC teams need to establish recurring vulnerability assessment processes, integrate scan results with SIEM alerting, and build remediation tracking dashboards.
   0 installs
10. ▌
    Collecting Threat Intelligence With Misp · autohandai-community-skills bundle

    MISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing, storing, and correlating Indicators of Compromise (IOCs) of targeted attacks, threat
    0 installs
11. ▌
    Configuring AWS Verified Access For Ztna · autohandai-community-skills bundle

    Configure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identity and device posture verification with Cedar policy language.
    0 installs
12. ▌
    Exploiting API Injection Vulnerabilities · autohandai-community-skills bundle

    Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF) through API parameters, headers, and request bodies. The tester crafts malicious payloads targeting different backend technologies and injection contexts to extract data, execute commands, or access internal services. Maps to OWASP API8:2023 Security Misconfiguration and API7:2023 SSRF. Activates for requests involving API injection testing, SQLi in APIs, NoSQL injection, SSRF testing, or API input validation assessment.
    1 install
13. ▌
    Exploiting Type Juggling Vulnerabilities · autohandai-community-skills bundle

    Exploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent hash verification, and manipulate application logic through type coercion attacks.
    1 install
14. ▌
    Hunting For Process Injection Techniques · autohandai-community-skills bundle

    Detect process injection techniques (T1055) including CreateRemoteThread, process hollowing, and DLL injection via Sysmon Event IDs 8 and 10 and EDR process telemetry
    1 install
15. ▌
    Hunting For Registry Run Key Persistence · autohandai-community-skills bundle

    Detect MITRE ATT&CK T1547.001 registry Run key persistence by analyzing Sysmon Event ID 13 logs and registry queries to identify malicious auto-start entries.
    1 install
16. ▌
    Implementing Log Forwarding With Fluentd · autohandai-community-skills bundle

    Configure Fluentd and Fluent Bit for centralized log aggregation, routing, filtering, and enrichment across distributed infrastructure
    1 install
17. ▌
    Implementing Pci Dss Compliance Controls · autohandai-community-skills bundle

    PCI DSS 4.0.1 establishes 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data. With PCI DSS 3.2.1 retiring April 2024 and 51 new requirements
    1 install
18. ▌
    Nvidia Model Optimizer Accessing Mlflow · autohandai-community-skills bundle

    Query and browse evaluation results stored in MLflow. Use when the user wants to look up runs by invocation ID, compare metrics across models, fetch artifacts (configs, logs, results), or set up the MLflow MCP server. ALWAYS triggers on mentions of MLflow, experiment results, run comparison, invocation IDs in the context of results, or MLflow MCP setup.
    0 installs
19. ▌
    Nvidia Nemoclaw Contributor Update Docs · autohandai-community-skills bundle

    Scan recent git commits for changes that affect user-facing behavior, then draft or update the corresponding documentation pages and refresh generated user skills for release prep. Use when docs have fallen behind code changes, after a batch of features lands, during daily release prep, or when preparing a release. Trigger keywords - update docs, draft docs, docs from commits, sync docs, catch up docs, doc debt, docs behind, docs drift, release prep docs, refresh user skills.
    1 install
20. ▌
    Nvidia Nemoclaw User Configure Security · autohandai-community-skills bundle

    Presents a risk framework for every configurable security control in NemoClaw. Use when evaluating security posture, reviewing sandbox security defaults, or assessing control trade-offs. Trigger keywords - nemoclaw security best practices, sandbox security controls risk framework, nemoclaw credential storage, openshell provider, api key security, openclaw security controls, nemoclaw security boundary, prompt injection, tool access control.
    1 install
21. ▌
    Nvidia Tensorrt LLM Ad Layer Visualizer · autohandai-community-skills bundle

    Visualize a specific transformer decoder layer from an AutoDeploy FX graph text dump as a hierarchical DOT/PNG diagram. Optionally annotate nodes with actual GPU kernel names and durations from an nsys trace. Use when the user wants to visualize, inspect, or debug a layer in an AutoDeploy model graph dump. Triggers on: "visualize layer", "show layer", "graph of layer", "layer visualization", "dump graph layer". Assumes graph dumps already exist in a directory (produced by AD_DUMP_GRAPHS_DIR).
    1 install
22. ▌
    Nvidia Tensorrt LLM Kernel Cute Writing · autohandai-community-skills bundle

    Write and implement GPU kernels using NVIDIA CuTe DSL (CUTLASS 4.x Python API) — NOT for Triton, CUDA C++, or conceptual explanations. Trigger only when the user wants to write or implement a kernel, not when asking questions about CuTe DSL concepts or layouts. CuTe DSL uses cute.jit/cute.kernel decorators and cutlass.cute imports. Covers element-wise kernels, GEMM patterns, reductions, memory hierarchy (global/shared/register/TMA), MMA tensor core operations, software pipelining, and framework integration.
    1 install
23. ▌
    Nvidia Tensorrt LLM Perf Nsight Systems · autohandai-community-skills bundle

    Nsight Systems (nsys) CLI for system-level timeline profiling. Use when the user wants to run nsys profile, analyze .nsys-rep reports, use nsys stats/analyze/recipe commands, diagnose GPU idle time from timeline traces, or profile distributed training with NCCL overlap analysis. NOT for kernel-level metrics like SOL%, occupancy, or roofline (use perf-nsight-compute-analysis for ncu). NOT for writing or generating kernels. NOT for applying optimizations like CUDA Graphs.
    1 install
24. ▌
    Performing GRAPHQL Introspection Attack · autohandai-community-skills bundle

    Performs GraphQL introspection attacks to extract the full API schema including types, queries, mutations, subscriptions, and field definitions from GraphQL endpoints. The tester uses introspection queries to map the attack surface, identifies sensitive fields and mutations, tests for query depth and complexity limits, and exploits GraphQL-specific vulnerabilities including batching attacks, alias-based brute force, and nested query DoS. Activates for requests involving GraphQL security testing, introspection attack, GraphQL enumeration, or GraphQL API penetration testing.
    1 install
25. ▌
    Performing Privileged Account Discovery · autohandai-community-skills bundle

    Discover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin account
    1 install
26. ▌
    Performing Ransomware Incident Response · autohandai-community-skills bundle

    Execute a structured ransomware incident response including containment, decryption assessment, recovery from backups, and eradication of ransomware persistence mechanisms.
    1 install
27. ▌
    Performing Soc 2 Type Ii Audit Preparation · autohandai-community-skills bundle

    SOC 2 Type II audit preparation involves designing, implementing, and demonstrating the operational effectiveness of controls aligned to the AICPA Trust Services Criteria (TSC) over a defined audit pe
    1 install
28. ▌
    Securing Container Registry With Harbor · autohandai-community-skills bundle

    Harbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies, replicatio
    1 install
29. ▌
    Building Patch Tuesday Response Process · autohandai-community-skills bundle

    Establish a structured operational process to triage, test, and deploy Microsoft Patch Tuesday security updates within risk-based remediation SLAs.
    0 installs
30. ▌
    Detecting Azure Service Principal Abuse · autohandai-community-skills bundle

    Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.
    0 installs
31. ▌
    Detecting Credential Dumping Techniques · autohandai-community-skills bundle

    Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, Windows Security logs, and SIEM correlation rules
    1 install
32. ▌
    Detecting Supply Chain Attacks In CI CD · autohandai-community-skills bundle

    Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for automated audit. Use when hardening CI/CD pipelines or investigating compromised build systems.
    1 install
33. ▌
    Exploiting Constrained Delegation Abuse · autohandai-community-skills bundle

    Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users via S4U2self and S4U2proxy extensions for lateral movement and privilege escalation.
    1 install
34. ▌
    Exploiting Mass Assignment In REST Apis · autohandai-community-skills bundle

    Discover and exploit mass assignment vulnerabilities in REST APIs to escalate privileges, modify restricted fields, and bypass authorization controls by injecting unexpected parameters in API requests.
    1 install
35. ▌
    Extracting Memory Artifacts With Rekall · autohandai-community-skills bundle

    Uses Rekall memory forensics framework to analyze memory dumps for process hollowing, injected code via VAD anomalies, hidden processes, and rootkit detection. Applies plugins like pslist, psscan, vadinfo, malfind, and dlllist to extract forensic artifacts from Windows memory images. Use during incident response memory analysis.
    1 install
36. ▌
    Implementing Network Traffic Baselining · autohandai-community-skills bundle

    Build network traffic baselines from NetFlow/IPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly/daily traffic pattern profiling
    1 install
37. ▌
    Implementing Security Chaos Engineering · autohandai-community-skills bundle

    Implements security chaos engineering experiments that deliberately disable or degrade security controls to verify detection and response capabilities. Tests WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement scenarios using boto3 and subprocess. Use when validating SOC detection coverage and resilience.
    1 install
38. ▌
    Implementing Soar Playbook For Phishing · autohandai-community-skills bundle

    Automate phishing incident response using Splunk SOAR REST API to create containers, add artifacts, and trigger playbooks
    1 install
39. ▌
    Implementing Zero Trust With Beyondcorp · autohandai-community-skills bundle

    Deploy Google BeyondCorp Enterprise zero trust access controls using Identity-Aware Proxy (IAP), context-aware access policies, device trust validation, and Access Context Manager to enforce identity and posture-based access to GCP resources and internal applications.
    1 install
40. ▌
    Nvidia Megatron Bridge Multi Node Slurm · autohandai-community-skills bundle

    Convert single-node scripts to multi-node Slurm sbatch jobs and debug common multi-node failures. Covers srun-native vs uv run torch.distributed approaches, container setup, NCCL timeouts, OOM sizing for MoE models, and interactive allocation.
    1 install
41. ▌
    Nvidia Megatron Bridge Perf Cuda Graphs · autohandai-community-skills bundle

    Validate and use CUDA graph capture in Megatron Bridge, including local full-iteration graphs and Transformer Engine scoped graphs for attention, MLP, and MoE modules.
    0 installs
42. ▌
    Nvidia Megatron Bridge Verl E2e Testing · autohandai-community-skills bundle

    External verl end-to-end validation workflow for Megatron-Bridge model/provider changes. Covers running a small verl Megatron backend job from a Bridge checkout, choosing LoRA/DDP plus optional save/resume and parallelism variants, setting PYTHONPATH so verl imports the local Bridge tree, and reporting pass/fail evidence.
    0 installs
43. ▌
    Nvidia Tensorrt LLM Exec Local Compile · autohandai-community-skills bundle

    Compile TensorRT-LLM on a compute node inside a Docker container. Use this when already on a compute node with GPUs visible.
    1 install
44. ▌
    Nvidia Tensorrt LLM Exec Slurm Compile · autohandai-community-skills bundle

    Compile TensorRT-LLM on a SLURM cluster. Covers submitting a batch job with a container image, monitoring the job, and verifying the build. Use when the user wants to compile TRT-LLM remotely via SLURM rather than on a local compute node.
    1 install
45. ▌
    Nvidia Tensorrt LLM Perf Host Analysis · autohandai-community-skills bundle

    Analyze host/CPU overhead in TensorRT-LLM inference from nsys traces. Detect whether host overhead is the bottleneck using GPU idle ratio, host prep exposed ratio, and per-phase evidence. For regressions, isolate forward steps via allreduce/NVTX patterns, compare host operation breakdowns across versions, and identify scheduling or request-management overhead. Supports optional inter-kernel gap, eager-vs-graph, pattern mapping, and multi-rank straggler drill-down. Use standalone or within perf-analysis. Triggers: host overhead, inter-step gap, scheduling overhead, forward step isolation, nsys iteration analysis, NVTX breakdown, request management overhead, GPU idle, host bottleneck, host prep exposed, inter-kernel gap, bubble analysis, graph coverage, eager kernel, rank imbalance, straggler detection.
    1 install
46. ▌
    Nvidia Tensorrt LLM Trtllm Moe Develop · autohandai-community-skills bundle

    Review, design, and refactor TensorRT-LLM PyTorch MoE code for architecture fit, clean code, maintainability, and testability. Always use for any modification, review, refactor, or design planning that touches MoE modules, including tensorrt_llm/_torch/modules/fused_moe, ConfigurableMoE, MoE backends, MoEScheduler/moe_scheduler.py, forward execution/chunking, communication strategies, EPLB, quantization/weight handling, routing, factories, MoE docs, or MoE tests. Also use when the user asks whether a MoE design follows the current architecture or whether a MoE refactor is reasonable.
    1 install
47. ▌
    Performing API Inventory And Discovery · autohandai-community-skills bundle

    Performs API inventory and discovery to identify all API endpoints in an organization's environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS enumeration, JavaScript analysis, and cloud resource inventory to build a comprehensive API catalog. Maps to OWASP API9:2023 Improper Inventory Management. Activates for requests involving API discovery, shadow API detection, API inventory audit, or attack surface mapping.
    1 install
48. ▌
    Performing Ssl Tls Security Assessment · autohandai-community-skills bundle

    Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.
    1 install
49. ▌
    Analyzing Campaign Attribution Evidence · autohandai-community-skills bundle

    Campaign attribution analysis involves systematically evaluating evidence to determine which threat actor or group is responsible for a cyber operation. This skill covers collecting and weighting attr
    1 install
50. ▌
    Analyzing Cloud Storage Access Patterns · autohandai-community-skills bundle

    Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics. Identifies after-hours bulk downloads, access from new IP addresses, unusual API calls (GetObject spikes), and potential data exfiltration using statistical baselines and time-series anomaly detection.
    1 install
51. ▌
    Analyzing Mft For Deleted File Recovery · autohandai-community-skills bundle

    Analyze the NTFS Master File Table ($MFT) to recover metadata and content of deleted files by examining MFT record entries, $LogFile, $UsnJrnl, and MFT slack space using MFTECmd, analyzeMFT, and X-Ways Forensics.
    1 install
52. ▌
    Analyzing Ransomware Network Indicators · autohandai-community-skills bundle

    Identify ransomware network indicators including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange via Zeek conn.log and NetFlow analysis
    1 install
53. ▌
    Analyzing Web Server Logs For Intrusion · autohandai-community-skills bundle

    Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal, web scanner fingerprints, and brute-force patterns. Uses regex-based pattern matching against OWASP attack signatures, GeoIP enrichment for source attribution, and statistical anomaly detection for request frequency and response size outliers.
    1 install
54. ▌
    Building Detection Rule With Splunk Spl · autohandai-community-skills bundle

    Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.
    0 installs
55. ▌
    Detecting AWS Iam Privilege Escalation · autohandai-community-skills bundle

    Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations
    0 installs
56. ▌
    Detecting Beaconing Patterns With Zeek · autohandai-community-skills bundle

    Performs statistical analysis of Zeek conn.log connection intervals to detect C2 beaconing patterns. Uses the ZAT library to load Zeek logs into Pandas DataFrames, calculates inter-arrival time standard deviation, and flags periodic connections with low jitter. Use when hunting for command-and-control callbacks in network data.
    0 installs
57. ▌
    Executing Red Team Engagement Planning · autohandai-community-skills bundle

    Red team engagement planning is the foundational phase that defines scope, objectives, rules of engagement (ROE), threat model selection, and operational timelines before any offensive testing begins.
    1 install
58. ▌
    Exploiting Kerberoasting With Impacket · autohandai-community-skills bundle

    Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.
    1 install
59. ▌
    Extracting Config From Agent Tesla Rat · autohandai-community-skills bundle

    Extract embedded configuration from Agent Tesla RAT samples including SMTP/FTP/Telegram exfiltration credentials, keylogger settings, and C2 endpoints using .NET decompilation and memory analysis.
    1 install
60. ▌
    Hunting For Domain Fronting C2 Traffic · autohandai-community-skills bundle

    Detect domain fronting C2 traffic by analyzing SNI vs HTTP Host header mismatches in proxy logs and TLS certificate discrepancies using pyOpenSSL for certificate inspection
    1 install
61. ▌
    Hunting For Startup Folder Persistence · autohandai-community-skills bundle

    Detect T1547.001 startup folder persistence by monitoring Windows startup directories for suspicious file creation, analyzing autoruns entries, and using Python watchdog for real-time filesystem monitoring.
    1 install
62. ▌
    Hunting For T1098 Account Manipulation · autohandai-community-skills bundle

    Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin creation, SID history injection, group membership changes, and credential modifications using Windows Security Event Logs.
    1 install
63. ▌
    Implementing Cloud Workload Protection · autohandai-community-skills bundle

    Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process anomaly detection, and file integrity checking on EC2/GCE instances. Scans for cryptomining, reverse shells, and unauthorized binaries. Use when building runtime security controls for cloud compute workloads.
    1 install
64. ▌
    Implementing Patch Management Workflow · autohandai-community-skills bundle

    Patch management is the systematic process of identifying, testing, deploying, and verifying software updates to remediate vulnerabilities across an organization's IT infrastructure. An effective patc
    1 install
65. ▌
    Implementing Secrets Scanning In CI CD · autohandai-community-skills bundle

    Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment
    1 install
66. ▌
    Nvidia Megatron Bridge Bump Dependency · autohandai-community-skills bundle

    Bump a pinned dependency (TransformerEngine, Megatron-LM, NRX, etc.), regenerate the lockfile, open a PR, and drive it to green by attaching a watchdog to the "CICD NeMo" workflow and quarantining failing functional tests as flaky until the run is green.
    1 install
67. ▌
    Nvidia Model Optimizer Launching Evals · autohandai-community-skills bundle

    Run, monitor, analyze, and debug LLM evaluations via nemo-evaluator-launcher. Covers running evaluations, checking status and live progress, debugging failed runs, exporting artifacts and logs, and analyzing results. ALWAYS triggers on mentions of running evaluations, checking progress, debugging failed evals, analyzing or analysing runs or results, run directories or artifact paths on clusters, Slurm job issues, invocation IDs, or inspecting logs (client logs, server logs, SSH to cluster, tail logs, grep logs). Do NOT use for creating or modifying evaluation configs.
    1 install
68. ▌
    Nvidia Nemo Rl Linting And Formatting · autohandai-community-skills bundle

    Code style guidelines for NeMo-RL (Python and shell). Covers naming, indentation, comments, docstrings, reflection avoidance, and uv usage.
    1 install
69. ▌
    Nvidia Nemoclaw Contributor Create Pr · autohandai-community-skills bundle

    Create GitHub pull requests that follow the NemoClaw PR template. Use when the user wants to create a new PR, submit code for review, open a pull request, or push changes for review. Trigger keywords - create PR, pull request, new PR, submit for review, open PR, push for review.
    1 install
70. ▌
    Nvidia Nemoclaw User Manage Sandboxes · autohandai-community-skills bundle

    Explains operational tasks after the quickstart: listing sandboxes, status and health checks, logs, diagnostics, port forwards, multiple sandboxes, credential reset, rebuilds, network presets, upgrades, and uninstall. Trigger keywords - manage nemoclaw sandboxes, nemoclaw status, nemoclaw list, nemoclaw dashboard port, nemoclaw rebuild, nemoclaw upgrade sandboxes, nemoclaw uninstall, sandbox mutability, sandbox runtime configuration, sandbox rebuild, nemoclaw backup, nemoclaw restore, workspace backup, openshell sandbox download upload, nemoclaw messaging channels, nemoclaw telegram, nemoclaw discord, nemoclaw slack, nemoclaw whatsapp, openshell channel messaging, nemoclaw workspace files, soul.md, user.md, identity.md, agents.md, sandbox persistence.
    1 install
71. ▌
    Nvidia Tensorrt LLM Ad Accuracy Debug · autohandai-community-skills bundle

    Debug AutoDeploy accuracy regressions vs a reference score (PyTorch backend or published baseline). Use when an AutoDeploy model's eval score is significantly below the reference and the root cause is unknown.
    1 install
72. ▌
    Nvidia Tensorrt LLM Perf Optimization · autohandai-community-skills bundle

    Performance optimization coordination playbook. Contains specialist routing table, TileIR two-step pipeline, kernel generation specialist selection, prioritization criteria, and safe modification workflow. Use when the user asks to apply optimizations, write kernels, or improve performance. Covers both user-specified optimization and autopilot-driven iterative optimization.
    1 install
73. ▌
    Performing Container Escape Detection · autohandai-community-skills bundle

    Detects container escape attempts by analyzing namespace configurations, privileged container checks, dangerous capability assignments, and host path mounts using the kubernetes Python client. Identifies CVE-2022-0492 style escapes via cgroup abuse. Use when auditing container security posture or investigating escape attempts.
    1 install
74. ▌
    Performing GRAPHQL Depth Limit Attack · autohandai-community-skills bundle

    Execute and test GraphQL depth limit attacks using deeply nested recursive queries to identify denial-of-service vulnerabilities in GraphQL APIs.
    1 install
75. ▌
    Performing Hash Cracking With Hashcat · autohandai-community-skills bundle

    Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w
    1 install
76. ▌
    Performing Web Cache Deception Attack · autohandai-community-skills bundle

    Execute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.
    1 install
77. ▌
    Performing Web Cache Poisoning Attack · autohandai-community-skills bundle

    Exploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.
    1 install
78. ▌
    Analyzing Android Malware With Apktool · autohandai-community-skills bundle

    Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, and androguard for permission analysis, manifest inspection, and suspicious API call detection.
    1 install
79. ▌
    Analyzing Windows Prefetch With Python · autohandai-community-skills bundle

    Parse Windows Prefetch files using the windowsprefetch Python library to reconstruct application execution history, detect renamed or masquerading binaries, and identify suspicious program execution patterns.
    1 install
80. ▌
    Conducting Mobile App Penetration Test · autohandai-community-skills bundle

    Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities in data storage, network communication, authentication, cryptography, and platform-specific security controls. The tester performs static analysis of application binaries, dynamic analysis at runtime, and API security testing to evaluate the complete mobile attack surface. Activates for requests involving mobile app pentest, iOS security assessment, Android security testing, or OWASP MASTG assessment.
    0 installs
81. ▌
    Deploying Tailscale For Zero Trust Vpn · autohandai-community-skills bundle

    Deploy and configure Tailscale as a WireGuard-based zero trust mesh VPN with identity-aware access controls, ACLs, and exit nodes for secure peer-to-peer connectivity.
    0 installs
82. ▌
    Analyzing Powershell Empire Artifacts · autohandai-community-skills bundle

    Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
    1 install
83. ▌
    Building Threat Intelligence Platform · autohandai-community-skills bundle

    Building a Threat Intelligence Platform (TIP) involves deploying and integrating multiple CTI tools into a unified system for collecting, analyzing, enriching, and disseminating threat intelligence. T
    0 installs
84. ▌
    Configuring Oauth2 Authorization Flow · autohandai-community-skills bundle

    Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token
    0 installs
85. ▌
    Detecting Cloud Cryptomining Activity · autohandai-community-skills bundle

    Detecting unauthorized cryptocurrency mining activity in cloud environments by analyzing compute usage anomalies, network traffic to mining pools, GuardDuty findings, and container workload behavior using AWS, Azure, and GCP native security services.
    1 install
86. ▌
    Detecting Credential Dumping With Edr · autohandai-community-skills bundle

    Detect OS credential dumping techniques including LSASS access, SAM extraction, and DCSync using EDR telemetry and Sysmon logs.
    1 install
87. ▌
    Exploiting Nopac Cve 2021 42278 42287 · autohandai-community-skills bundle

    Exploit the noPac vulnerability chain (CVE-2021-42278 sAMAccountName spoofing and CVE-2021-42287 KDC PAC confusion) to escalate from standard domain user to Domain Admin in Active Directory environments.
    1 install
88. ▌
    Hardening Docker Daemon Configuration · autohandai-community-skills bundle

    Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.
    1 install
89. ▌
    Implementing GCP Binary Authorization · autohandai-community-skills bundle

    Implement GCP Binary Authorization to enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.
    1 install
90. ▌
    Nvidia Deepstream Import Vision Model · autohandai-community-skills bundle

    Use this skill to bring any vision model from HuggingFace or NVIDIA NGC into an NVIDIA DeepStream pipeline with end-to-end automation: ONNX download, SafeTensors export, TRT engine build, custom nvinfer bbox parser, multi-stream benchmark, and PDF report. Object detection models only.
    1 install
91. ▌
    Nvidia Megatron Bridge Parity Testing · autohandai-community-skills bundle

    Structured framework for verifying numerical parity of HF-to-MCore weight conversions. References existing tools and the add-model-support skill.
    0 installs
92. ▌
    Nvidia Megatron Core Respond To Issue · autohandai-community-skills bundle

    Research and draft a response to a GitHub issue or question from an external contributor.
    1 install
93. ▌
    Hunting For Webshells In Web Servers · autohandai-community-skills bundle

    Detect webshells planted on web servers by scanning for high-entropy files, suspicious PHP/JSP/ASP patterns (eval, base64_decode, system, passthru), recently modified files in web roots, and anomalous file sizes. Uses Shannon entropy calculation to flag obfuscated payloads and regex pattern matching against known webshell signatures.
    1 install
94. ▌
    Hunting Living Off The Land Binaries · autohandai-community-skills bundle

    Detects abuse of Living Off The Land Binaries (LOLBAS) such as certutil, wmic, mshta, regsvr32, and rundll32 in Windows event logs and Sysmon telemetry. Builds detection rules by cross-referencing process creation events against the LOLBAS project database. Use when threat hunting for fileless attack techniques or building SIEM detection rules.
    1 install
95. ▌
    Implementing Pam For Database Access · autohandai-community-skills bundle

    Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL. Covers session proxy configuration, credential vaulting, query auditing, dynamic credentia
    1 install
96. ▌
    Implementing Rsa Key Pair Management · autohandai-community-skills bundle

    RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating,
    1 install
97. ▌
    Nvidia Megatron Core Bump Base Image · autohandai-community-skills bundle

    Bump the NVIDIA PyTorch base image using the nvcr.io/nvidia/pytorch YY.MM py3 tag used by Megatron-LM CI. Covers the two pin sites (GitHub CI in `docker/.ngc_version.dev` and GitLab CI in `.gitlab/stages/01.build.yml`), the post-bump CI loop (re-run functional tests, refresh golden values, mark broken tests), and the gotchas that bit PRs
    0 installs
98. ▌
    Nvidia Nemoclaw User Monitor Sandbox · autohandai-community-skills bundle

    Inspects sandbox health, traces agent behavior, and diagnoses problems. Use when monitoring a running sandbox, debugging agent issues, or checking sandbox logs. Trigger keywords - monitor nemoclaw sandbox, debug nemoclaw agent issues.
    1 install
99. ▌
    Nvidia Tensorrt LLM Ad Model Onboard · autohandai-community-skills bundle

    Translates a HuggingFace model into a prefill-only AutoDeploy custom model using reference custom ops, validates with hierarchical equivalence tests.
    1 install
100. ▌
     Performing Cloud Penetration Testing · autohandai-community-skills bundle

     Performs authorized penetration testing of cloud environments across AWS, Azure, and GCP to identify IAM misconfigurations, exposed storage buckets, overly permissive security groups, serverless function vulnerabilities, and cloud-specific attack paths from initial access to account compromise. The tester uses cloud-native tools and specialized frameworks like Pacu and ScoutSuite to enumerate and exploit cloud infrastructure. Activates for requests involving cloud pentest, AWS security assessment, Azure penetration testing, or cloud infrastructure security testing.
     1 install