← all publishers

autohandai

@autohandai-community-skills source repo

Report this profile Claim this profile

• 628 skills
• 0 followers
• last month last updated

1. ▌
   Performing Privilege Escalation On Linux · autohandai-community-skills bundle

   Linux privilege escalation involves elevating from a low-privilege user account to root access on a compromised system. Red teams exploit misconfigurations, vulnerable services, kernel exploits, and w
   6 installs
2. ▌
   Analyzing Azure Activity Logs For Threats · autohandai-community-skills bundle

   Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative operations, impossible travel, privilege escalation, and resource modifications. Builds KQL queries for threat hunting in Azure environments. Use when investigating suspicious Azure tenant activity or building cloud SIEM detections.
   8 installs
3. ▌
   Analyzing Outlook Pst For Email Forensics · autohandai-community-skills bundle

   Analyze Microsoft Outlook PST and OST files for email forensic evidence including message content, headers, attachments, deleted items, and metadata using libpff, pst-utils, and forensic email analysis tools for legal investigations and incident response.
   6 installs
4. ▌
   Analyzing Persistence Mechanisms In Linux · autohandai-community-skills bundle

   Detect and analyze Linux persistence mechanisms including crontab entries, systemd service units, LD_PRELOAD hijacking, bashrc modifications, and authorized_keys backdoors using auditd and file integrity monitoring
   10 installs
5. ▌
   Analyzing Powershell Script Block Logging · autohandai-community-skills bundle

   Parse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encoded payloads, and living-off-the-land techniques. Uses python-evtx to extract and reconstruct multi-block scripts, applies entropy analysis and pattern matching for Base64-encoded commands, Invoke-Expression abuse, download cradles, and AMSI bypass attempts.
   8 installs
6. ▌
   Conducting Domain Persistence With Dcsync · autohandai-community-skills bundle

   Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT, Domain Admin, and service account hashes for Golden Ticket creation.
   7 installs
7. ▌
   Conducting Full Scope Red Team Engagement · autohandai-community-skills bundle

   Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using MITRE ATT&CK-aligned TTPs to evaluate an organization's detection and response capabilities.
   3 installs
8. ▌
   Configuring Active Directory Tiered Model · autohandai-community-skills bundle

   Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. Covers Tier 0/1/2 separation, privileged access workstations (PAWs), administrative f
   8 installs
9. ▌
   Detecting Exfiltration Over Dns With Zeek · autohandai-community-skills bundle

   Detect DNS-based data exfiltration by analyzing Zeek dns.log for high-entropy subdomains and anomalous query patterns
   8 installs
10. ▌
    Detecting Living Off The Land With Lolbas · autohandai-community-skills bundle

    Detect Living Off the Land Binaries (LOLBins/LOLBAS) abuse including certutil, regsvr32, mshta, and rundll32 via process telemetry, Sigma rules, and parent-child process analysis
    8 installs
11. ▌
    Exploiting Excessive Data Exposure In API · autohandai-community-skills bundle

    Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying on the frontend to filter sensitive fields. The tester intercepts API responses and analyzes them for leaked PII, internal identifiers, debug information, or sensitive business data that the UI does not display but the API transmits. This maps to OWASP API3:2023 Broken Object Property Level Authorization. Activates for requests involving API data leakage testing, excessive data exposure, response filtering bypass, or API over-fetching.
    4 installs
12. ▌
    Exploiting JWT Algorithm Confusion Attack · autohandai-community-skills bundle

    Exploits JWT algorithm confusion vulnerabilities where the server's token verification library accepts the algorithm specified in the JWT header rather than enforcing a fixed algorithm. The tester manipulates the alg header to switch from RS256 to HS256 (using the RSA public key as the HMAC secret), sets alg to none to bypass signature verification, or exploits kid/jku/x5u header injection to supply attacker-controlled keys. Activates for requests involving JWT algorithm confusion, alg none attack, key confusion attack, or JWT signature bypass.
    4 installs
13. ▌
    Implementing Rbac For Kubernetes Cluster · autohandai-community-skills bundle

    Configure Kubernetes Role-Based Access Control (RBAC) to enforce least-privilege access to cluster resources. This skill covers Role/ClusterRole design, RoleBinding configuration, service account secu
    4 installs
14. ▌
    Implementing Scim Provisioning With Okta · autohandai-community-skills bundle

    Implement automated user provisioning and deprovisioning using SCIM 2.0 protocol with Okta as the identity provider.
    8 installs
15. ▌
    Implementing Stix Taxii Feed Integration · autohandai-community-skills bundle

    STIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Intelligence Information) are OASIS open standards for representing and transporting cyber threat intelligence.
    4 installs
16. ▌
    Implementing Taxii Server With Opentaxii · autohandai-community-skills bundle

    Deploy and configure an OpenTAXII server to share and consume STIX-formatted cyber threat intelligence using the TAXII 2.1 protocol for automated indicator exchange between organizations.
    3 installs
17. ▌
    Implementing Zero Trust Dns With Nextdns · autohandai-community-skills bundle

    Implement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.
    8 installs
18. ▌
    Nvidia Nemoclaw Maintainer Pr Comparator · autohandai-community-skills bundle

    Compares competing PRs that target the same issue and recommends which one to merge. Runs gate, correctness, and quality checks; outputs a deterministic scorecard with reasoning trace. Use when an issue has two or more open PRs and a maintainer needs to decide which to merge.
    8 installs
19. ▌
    Nvidia Nemoclaw User Configure Inference · autohandai-community-skills bundle

    Connects NemoClaw to a local inference server. Use when setting up Ollama, vLLM, TensorRT-LLM, NIM, or any OpenAI-compatible local model server with NemoClaw. Trigger keywords - nemoclaw local inference, ollama nemoclaw, vllm nemoclaw, local model server, openai compatible endpoint, switch nemoclaw inference model, change inference runtime, nemoclaw additional model, nemoclaw sub-agent model, openclaw sub-agent, agents.list, sessions_spawn, vlm-demo, nemoclaw tool calling, ollama tool calls, vllm tool-call-parser, raw json in tui, nemoclaw inference options, nemoclaw onboarding providers, nemoclaw inference routing.
    10 installs
20. ▌
    Nvidia Tensorrt LLM Perf Torch Sync Free · autohandai-community-skills bundle

    Identify and eliminate host-device synchronizations in PyTorch code. Detects sync points (.item(), .cpu(), boolean indexing, torch.tensor on CUDA), classifies false vs true dependencies, provides sync-free alternatives. Triggers: sync-free, synchronization, .item(), .cpu(), host-device sync, eliminate syncs, CPU stall, non_blocking, set_sync_debug_mode, cudaStreamSynchronize, cudaEventSynchronize, remove syncs, async GPU.
    9 installs
21. ▌
    Performing Bluetooth Security Assessment · autohandai-community-skills bundle

    Assess Bluetooth Low Energy device security by scanning, enumerating GATT services, and detecting vulnerabilities
    6 installs
22. ▌
    Performing Initial Access With Evilginx3 · autohandai-community-skills bundle

    Perform authorized initial access using EvilGinx3 adversary-in-the-middle phishing framework to capture session tokens and bypass multi-factor authentication during red team engagements.
    5 installs
23. ▌
    Performing Lateral Movement With Wmiexec · autohandai-community-skills bundle

    Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.
    6 installs
24. ▌
    Performing Log Source Onboarding In Siem · autohandai-community-skills bundle

    Perform structured log source onboarding into SIEM platforms by configuring collectors, parsers, normalization, and validation for complete security visibility.
    9 installs
25. ▌
    Analyzing Apt Group With Mitre Navigator · autohandai-community-skills bundle

    Analyze advanced persistent threat (APT) group techniques using MITRE ATT&CK Navigator to create layered heatmaps of adversary TTPs for detection gap analysis and threat-informed defense.
    10 installs
26. ▌
    Analyzing Network Flow Data With Netflow · autohandai-community-skills bundle

    Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns. Uses the Python netflow library to decode flow records, builds traffic baselines, and applies statistical analysis to identify flows with abnormal byte counts, connection durations, and periodic timing patterns.
    9 installs
27. ▌
    Analyzing Supply Chain Malware Artifacts · autohandai-community-skills bundle

    Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise.
    4 installs
28. ▌
    Building Threat Actor Profile From Osint · autohandai-community-skills bundle

    Build comprehensive threat actor profiles using open-source intelligence (OSINT) techniques to document adversary motivations, capabilities, infrastructure, and TTPs for proactive defense.
    3 installs
29. ▌
    Building Vulnerability Scanning Workflow · autohandai-community-skills bundle

    Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security vulnerabilities across infrastructure. Use when SOC teams need to establish recurring vulnerability assessment processes, integrate scan results with SIEM alerting, and build remediation tracking dashboards.
    8 installs
30. ▌
    Collecting Threat Intelligence With Misp · autohandai-community-skills bundle

    MISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing, storing, and correlating Indicators of Compromise (IOCs) of targeted attacks, threat
    10 installs
31. ▌
    Configuring AWS Verified Access For Ztna · autohandai-community-skills bundle

    Configure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identity and device posture verification with Cedar policy language.
    7 installs
32. ▌
    Exploiting API Injection Vulnerabilities · autohandai-community-skills bundle

    Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF) through API parameters, headers, and request bodies. The tester crafts malicious payloads targeting different backend technologies and injection contexts to extract data, execute commands, or access internal services. Maps to OWASP API8:2023 Security Misconfiguration and API7:2023 SSRF. Activates for requests involving API injection testing, SQLi in APIs, NoSQL injection, SSRF testing, or API input validation assessment.
    7 installs
33. ▌
    Exploiting Type Juggling Vulnerabilities · autohandai-community-skills bundle

    Exploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent hash verification, and manipulate application logic through type coercion attacks.
    5 installs
34. ▌
    Hunting For Process Injection Techniques · autohandai-community-skills bundle

    Detect process injection techniques (T1055) including CreateRemoteThread, process hollowing, and DLL injection via Sysmon Event IDs 8 and 10 and EDR process telemetry
    6 installs
35. ▌
    Hunting For Registry Run Key Persistence · autohandai-community-skills bundle

    Detect MITRE ATT&CK T1547.001 registry Run key persistence by analyzing Sysmon Event ID 13 logs and registry queries to identify malicious auto-start entries.
    8 installs
36. ▌
    Implementing Log Forwarding With Fluentd · autohandai-community-skills bundle

    Configure Fluentd and Fluent Bit for centralized log aggregation, routing, filtering, and enrichment across distributed infrastructure
    6 installs
37. ▌
    Implementing Pci Dss Compliance Controls · autohandai-community-skills bundle

    PCI DSS 4.0.1 establishes 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data. With PCI DSS 3.2.1 retiring April 2024 and 51 new requirements
    9 installs
38. ▌
    Nvidia Model Optimizer Accessing Mlflow · autohandai-community-skills bundle

    Query and browse evaluation results stored in MLflow. Use when the user wants to look up runs by invocation ID, compare metrics across models, fetch artifacts (configs, logs, results), or set up the MLflow MCP server. ALWAYS triggers on mentions of MLflow, experiment results, run comparison, invocation IDs in the context of results, or MLflow MCP setup.
    3 installs
39. ▌
    Nvidia Nemoclaw Contributor Update Docs · autohandai-community-skills bundle

    Scan recent git commits for changes that affect user-facing behavior, then draft or update the corresponding documentation pages and refresh generated user skills for release prep. Use when docs have fallen behind code changes, after a batch of features lands, during daily release prep, or when preparing a release. Trigger keywords - update docs, draft docs, docs from commits, sync docs, catch up docs, doc debt, docs behind, docs drift, release prep docs, refresh user skills.
    8 installs
40. ▌
    Nvidia Nemoclaw User Configure Security · autohandai-community-skills bundle

    Presents a risk framework for every configurable security control in NemoClaw. Use when evaluating security posture, reviewing sandbox security defaults, or assessing control trade-offs. Trigger keywords - nemoclaw security best practices, sandbox security controls risk framework, nemoclaw credential storage, openshell provider, api key security, openclaw security controls, nemoclaw security boundary, prompt injection, tool access control.
    7 installs
41. ▌
    Nvidia Tensorrt LLM Ad Layer Visualizer · autohandai-community-skills bundle

    Visualize a specific transformer decoder layer from an AutoDeploy FX graph text dump as a hierarchical DOT/PNG diagram. Optionally annotate nodes with actual GPU kernel names and durations from an nsys trace. Use when the user wants to visualize, inspect, or debug a layer in an AutoDeploy model graph dump. Triggers on: "visualize layer", "show layer", "graph of layer", "layer visualization", "dump graph layer". Assumes graph dumps already exist in a directory (produced by AD_DUMP_GRAPHS_DIR).
    11 installs
42. ▌
    Nvidia Tensorrt LLM Kernel Cute Writing · autohandai-community-skills bundle

    Write and implement GPU kernels using NVIDIA CuTe DSL (CUTLASS 4.x Python API) — NOT for Triton, CUDA C++, or conceptual explanations. Trigger only when the user wants to write or implement a kernel, not when asking questions about CuTe DSL concepts or layouts. CuTe DSL uses cute.jit/cute.kernel decorators and cutlass.cute imports. Covers element-wise kernels, GEMM patterns, reductions, memory hierarchy (global/shared/register/TMA), MMA tensor core operations, software pipelining, and framework integration.
    7 installs
43. ▌
    Nvidia Tensorrt LLM Perf Nsight Systems · autohandai-community-skills bundle

    Nsight Systems (nsys) CLI for system-level timeline profiling. Use when the user wants to run nsys profile, analyze .nsys-rep reports, use nsys stats/analyze/recipe commands, diagnose GPU idle time from timeline traces, or profile distributed training with NCCL overlap analysis. NOT for kernel-level metrics like SOL%, occupancy, or roofline (use perf-nsight-compute-analysis for ncu). NOT for writing or generating kernels. NOT for applying optimizations like CUDA Graphs.
    11 installs
44. ▌
    Performing GRAPHQL Introspection Attack · autohandai-community-skills bundle

    Performs GraphQL introspection attacks to extract the full API schema including types, queries, mutations, subscriptions, and field definitions from GraphQL endpoints. The tester uses introspection queries to map the attack surface, identifies sensitive fields and mutations, tests for query depth and complexity limits, and exploits GraphQL-specific vulnerabilities including batching attacks, alias-based brute force, and nested query DoS. Activates for requests involving GraphQL security testing, introspection attack, GraphQL enumeration, or GraphQL API penetration testing.
    9 installs
45. ▌
    Performing Privileged Account Discovery · autohandai-community-skills bundle

    Discover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin account
    5 installs
46. ▌
    Performing Ransomware Incident Response · autohandai-community-skills bundle

    Execute a structured ransomware incident response including containment, decryption assessment, recovery from backups, and eradication of ransomware persistence mechanisms.
    6 installs
47. ▌
    Performing Soc 2 Type Ii Audit Preparation · autohandai-community-skills bundle

    SOC 2 Type II audit preparation involves designing, implementing, and demonstrating the operational effectiveness of controls aligned to the AICPA Trust Services Criteria (TSC) over a defined audit pe
    8 installs
48. ▌
    Securing Container Registry With Harbor · autohandai-community-skills bundle

    Harbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies, replicatio
    4 installs
49. ▌
    Building Patch Tuesday Response Process · autohandai-community-skills bundle

    Establish a structured operational process to triage, test, and deploy Microsoft Patch Tuesday security updates within risk-based remediation SLAs.
    3 installs
50. ▌
    Detecting Azure Service Principal Abuse · autohandai-community-skills bundle

    Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.
    5 installs
51. ▌
    Detecting Credential Dumping Techniques · autohandai-community-skills bundle

    Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, Windows Security logs, and SIEM correlation rules
    6 installs
52. ▌
    Detecting Supply Chain Attacks In CI CD · autohandai-community-skills bundle

    Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for automated audit. Use when hardening CI/CD pipelines or investigating compromised build systems.
    7 installs
53. ▌
    Exploiting Constrained Delegation Abuse · autohandai-community-skills bundle

    Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users via S4U2self and S4U2proxy extensions for lateral movement and privilege escalation.
    7 installs
54. ▌
    Exploiting Mass Assignment In REST Apis · autohandai-community-skills bundle

    Discover and exploit mass assignment vulnerabilities in REST APIs to escalate privileges, modify restricted fields, and bypass authorization controls by injecting unexpected parameters in API requests.
    11 installs
55. ▌
    Extracting Memory Artifacts With Rekall · autohandai-community-skills bundle

    Uses Rekall memory forensics framework to analyze memory dumps for process hollowing, injected code via VAD anomalies, hidden processes, and rootkit detection. Applies plugins like pslist, psscan, vadinfo, malfind, and dlllist to extract forensic artifacts from Windows memory images. Use during incident response memory analysis.
    8 installs
56. ▌
    Implementing Network Traffic Baselining · autohandai-community-skills bundle

    Build network traffic baselines from NetFlow/IPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly/daily traffic pattern profiling
    7 installs
57. ▌
    Implementing Security Chaos Engineering · autohandai-community-skills bundle

    Implements security chaos engineering experiments that deliberately disable or degrade security controls to verify detection and response capabilities. Tests WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement scenarios using boto3 and subprocess. Use when validating SOC detection coverage and resilience.
    7 installs
58. ▌
    Implementing Soar Playbook For Phishing · autohandai-community-skills bundle

    Automate phishing incident response using Splunk SOAR REST API to create containers, add artifacts, and trigger playbooks
    12 installs
59. ▌
    Implementing Zero Trust With Beyondcorp · autohandai-community-skills bundle

    Deploy Google BeyondCorp Enterprise zero trust access controls using Identity-Aware Proxy (IAP), context-aware access policies, device trust validation, and Access Context Manager to enforce identity and posture-based access to GCP resources and internal applications.
    4 installs
60. ▌
    Nvidia Megatron Bridge Multi Node Slurm · autohandai-community-skills bundle

    Convert single-node scripts to multi-node Slurm sbatch jobs and debug common multi-node failures. Covers srun-native vs uv run torch.distributed approaches, container setup, NCCL timeouts, OOM sizing for MoE models, and interactive allocation.
    7 installs
61. ▌
    Nvidia Megatron Bridge Perf Cuda Graphs · autohandai-community-skills bundle

    Validate and use CUDA graph capture in Megatron Bridge, including local full-iteration graphs and Transformer Engine scoped graphs for attention, MLP, and MoE modules.
    5 installs
62. ▌
    Nvidia Megatron Bridge Verl E2e Testing · autohandai-community-skills bundle

    External verl end-to-end validation workflow for Megatron-Bridge model/provider changes. Covers running a small verl Megatron backend job from a Bridge checkout, choosing LoRA/DDP plus optional save/resume and parallelism variants, setting PYTHONPATH so verl imports the local Bridge tree, and reporting pass/fail evidence.
    7 installs
63. ▌
    Nvidia Tensorrt LLM Exec Local Compile · autohandai-community-skills bundle

    Compile TensorRT-LLM on a compute node inside a Docker container. Use this when already on a compute node with GPUs visible.
    2 installs
64. ▌
    Nvidia Tensorrt LLM Exec Slurm Compile · autohandai-community-skills bundle

    Compile TensorRT-LLM on a SLURM cluster. Covers submitting a batch job with a container image, monitoring the job, and verifying the build. Use when the user wants to compile TRT-LLM remotely via SLURM rather than on a local compute node.
    9 installs
65. ▌
    Nvidia Tensorrt LLM Perf Host Analysis · autohandai-community-skills bundle

    Analyze host/CPU overhead in TensorRT-LLM inference from nsys traces. Detect whether host overhead is the bottleneck using GPU idle ratio, host prep exposed ratio, and per-phase evidence. For regressions, isolate forward steps via allreduce/NVTX patterns, compare host operation breakdowns across versions, and identify scheduling or request-management overhead. Supports optional inter-kernel gap, eager-vs-graph, pattern mapping, and multi-rank straggler drill-down. Use standalone or within perf-analysis. Triggers: host overhead, inter-step gap, scheduling overhead, forward step isolation, nsys iteration analysis, NVTX breakdown, request management overhead, GPU idle, host bottleneck, host prep exposed, inter-kernel gap, bubble analysis, graph coverage, eager kernel, rank imbalance, straggler detection.
    6 installs
66. ▌
    Nvidia Tensorrt LLM Trtllm Moe Develop · autohandai-community-skills bundle

    Review, design, and refactor TensorRT-LLM PyTorch MoE code for architecture fit, clean code, maintainability, and testability. Always use for any modification, review, refactor, or design planning that touches MoE modules, including tensorrt_llm/_torch/modules/fused_moe, ConfigurableMoE, MoE backends, MoEScheduler/moe_scheduler.py, forward execution/chunking, communication strategies, EPLB, quantization/weight handling, routing, factories, MoE docs, or MoE tests. Also use when the user asks whether a MoE design follows the current architecture or whether a MoE refactor is reasonable.
    9 installs
67. ▌
    Performing API Inventory And Discovery · autohandai-community-skills bundle

    Performs API inventory and discovery to identify all API endpoints in an organization's environment including documented, undocumented, shadow, zombie, and deprecated APIs. The tester uses passive traffic analysis, active scanning, DNS enumeration, JavaScript analysis, and cloud resource inventory to build a comprehensive API catalog. Maps to OWASP API9:2023 Improper Inventory Management. Activates for requests involving API discovery, shadow API detection, API inventory audit, or attack surface mapping.
    4 installs
68. ▌
    Performing Ssl Tls Security Assessment · autohandai-community-skills bundle

    Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.
    8 installs
69. ▌
    Analyzing Campaign Attribution Evidence · autohandai-community-skills bundle

    Campaign attribution analysis involves systematically evaluating evidence to determine which threat actor or group is responsible for a cyber operation. This skill covers collecting and weighting attr
    4 installs
70. ▌
    Analyzing Cloud Storage Access Patterns · autohandai-community-skills bundle

    Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics. Identifies after-hours bulk downloads, access from new IP addresses, unusual API calls (GetObject spikes), and potential data exfiltration using statistical baselines and time-series anomaly detection.
    4 installs
71. ▌
    Analyzing Mft For Deleted File Recovery · autohandai-community-skills bundle

    Analyze the NTFS Master File Table ($MFT) to recover metadata and content of deleted files by examining MFT record entries, $LogFile, $UsnJrnl, and MFT slack space using MFTECmd, analyzeMFT, and X-Ways Forensics.
    9 installs
72. ▌
    Analyzing Ransomware Network Indicators · autohandai-community-skills bundle

    Identify ransomware network indicators including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange via Zeek conn.log and NetFlow analysis
    7 installs
73. ▌
    Analyzing Web Server Logs For Intrusion · autohandai-community-skills bundle

    Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal, web scanner fingerprints, and brute-force patterns. Uses regex-based pattern matching against OWASP attack signatures, GeoIP enrichment for source attribution, and statistical anomaly detection for request frequency and response size outliers.
    7 installs
74. ▌
    Building Detection Rule With Splunk Spl · autohandai-community-skills bundle

    Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.
    8 installs
75. ▌
    Detecting AWS Iam Privilege Escalation · autohandai-community-skills bundle

    Detect AWS IAM privilege escalation paths using boto3 and Cloudsplaining policy analysis to identify overly permissive policies, dangerous permission combinations, and least-privilege violations
    5 installs
76. ▌
    Detecting Beaconing Patterns With Zeek · autohandai-community-skills bundle

    Performs statistical analysis of Zeek conn.log connection intervals to detect C2 beaconing patterns. Uses the ZAT library to load Zeek logs into Pandas DataFrames, calculates inter-arrival time standard deviation, and flags periodic connections with low jitter. Use when hunting for command-and-control callbacks in network data.
    5 installs
77. ▌
    Executing Red Team Engagement Planning · autohandai-community-skills bundle

    Red team engagement planning is the foundational phase that defines scope, objectives, rules of engagement (ROE), threat model selection, and operational timelines before any offensive testing begins.
    12 installs
78. ▌
    Exploiting Kerberoasting With Impacket · autohandai-community-skills bundle

    Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.
    7 installs
79. ▌
    Extracting Config From Agent Tesla Rat · autohandai-community-skills bundle

    Extract embedded configuration from Agent Tesla RAT samples including SMTP/FTP/Telegram exfiltration credentials, keylogger settings, and C2 endpoints using .NET decompilation and memory analysis.
    4 installs
80. ▌
    Hunting For Domain Fronting C2 Traffic · autohandai-community-skills bundle

    Detect domain fronting C2 traffic by analyzing SNI vs HTTP Host header mismatches in proxy logs and TLS certificate discrepancies using pyOpenSSL for certificate inspection
    10 installs
81. ▌
    Hunting For Startup Folder Persistence · autohandai-community-skills bundle

    Detect T1547.001 startup folder persistence by monitoring Windows startup directories for suspicious file creation, analyzing autoruns entries, and using Python watchdog for real-time filesystem monitoring.
    7 installs
82. ▌
    Hunting For T1098 Account Manipulation · autohandai-community-skills bundle

    Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin creation, SID history injection, group membership changes, and credential modifications using Windows Security Event Logs.
    7 installs
83. ▌
    Implementing Cloud Workload Protection · autohandai-community-skills bundle

    Implements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process anomaly detection, and file integrity checking on EC2/GCE instances. Scans for cryptomining, reverse shells, and unauthorized binaries. Use when building runtime security controls for cloud compute workloads.
    8 installs
84. ▌
    Implementing Patch Management Workflow · autohandai-community-skills bundle

    Patch management is the systematic process of identifying, testing, deploying, and verifying software updates to remediate vulnerabilities across an organization's IT infrastructure. An effective patc
    9 installs
85. ▌
    Implementing Secrets Scanning In CI CD · autohandai-community-skills bundle

    Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment
    4 installs
86. ▌
    Nvidia Megatron Bridge Bump Dependency · autohandai-community-skills bundle

    Bump a pinned dependency (TransformerEngine, Megatron-LM, NRX, etc.), regenerate the lockfile, open a PR, and drive it to green by attaching a watchdog to the "CICD NeMo" workflow and quarantining failing functional tests as flaky until the run is green.
    4 installs
87. ▌
    Nvidia Model Optimizer Launching Evals · autohandai-community-skills bundle

    Run, monitor, analyze, and debug LLM evaluations via nemo-evaluator-launcher. Covers running evaluations, checking status and live progress, debugging failed runs, exporting artifacts and logs, and analyzing results. ALWAYS triggers on mentions of running evaluations, checking progress, debugging failed evals, analyzing or analysing runs or results, run directories or artifact paths on clusters, Slurm job issues, invocation IDs, or inspecting logs (client logs, server logs, SSH to cluster, tail logs, grep logs). Do NOT use for creating or modifying evaluation configs.
    6 installs
88. ▌
    Nvidia Nemo Rl Linting And Formatting · autohandai-community-skills bundle

    Code style guidelines for NeMo-RL (Python and shell). Covers naming, indentation, comments, docstrings, reflection avoidance, and uv usage.
    8 installs
89. ▌
    Nvidia Nemoclaw Contributor Create Pr · autohandai-community-skills bundle

    Create GitHub pull requests that follow the NemoClaw PR template. Use when the user wants to create a new PR, submit code for review, open a pull request, or push changes for review. Trigger keywords - create PR, pull request, new PR, submit for review, open PR, push for review.
    4 installs
90. ▌
    Nvidia Nemoclaw User Manage Sandboxes · autohandai-community-skills bundle

    Explains operational tasks after the quickstart: listing sandboxes, status and health checks, logs, diagnostics, port forwards, multiple sandboxes, credential reset, rebuilds, network presets, upgrades, and uninstall. Trigger keywords - manage nemoclaw sandboxes, nemoclaw status, nemoclaw list, nemoclaw dashboard port, nemoclaw rebuild, nemoclaw upgrade sandboxes, nemoclaw uninstall, sandbox mutability, sandbox runtime configuration, sandbox rebuild, nemoclaw backup, nemoclaw restore, workspace backup, openshell sandbox download upload, nemoclaw messaging channels, nemoclaw telegram, nemoclaw discord, nemoclaw slack, nemoclaw whatsapp, openshell channel messaging, nemoclaw workspace files, soul.md, user.md, identity.md, agents.md, sandbox persistence.
    9 installs
91. ▌
    Nvidia Tensorrt LLM Ad Accuracy Debug · autohandai-community-skills bundle

    Debug AutoDeploy accuracy regressions vs a reference score (PyTorch backend or published baseline). Use when an AutoDeploy model's eval score is significantly below the reference and the root cause is unknown.
    8 installs
92. ▌
    Nvidia Tensorrt LLM Perf Optimization · autohandai-community-skills bundle

    Performance optimization coordination playbook. Contains specialist routing table, TileIR two-step pipeline, kernel generation specialist selection, prioritization criteria, and safe modification workflow. Use when the user asks to apply optimizations, write kernels, or improve performance. Covers both user-specified optimization and autopilot-driven iterative optimization.
    8 installs
93. ▌
    Performing Container Escape Detection · autohandai-community-skills bundle

    Detects container escape attempts by analyzing namespace configurations, privileged container checks, dangerous capability assignments, and host path mounts using the kubernetes Python client. Identifies CVE-2022-0492 style escapes via cgroup abuse. Use when auditing container security posture or investigating escape attempts.
    5 installs
94. ▌
    Performing GRAPHQL Depth Limit Attack · autohandai-community-skills bundle

    Execute and test GraphQL depth limit attacks using deeply nested recursive queries to identify denial-of-service vulnerabilities in GraphQL APIs.
    8 installs
95. ▌
    Performing Hash Cracking With Hashcat · autohandai-community-skills bundle

    Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w
    8 installs
96. ▌
    Performing Web Cache Deception Attack · autohandai-community-skills bundle

    Execute web cache deception attacks by exploiting path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve sensitive authenticated content.
    8 installs
97. ▌
    Performing Web Cache Poisoning Attack · autohandai-community-skills bundle

    Exploiting web cache mechanisms to serve malicious content to other users by poisoning cached responses through unkeyed headers and parameters during authorized security tests.
    8 installs
98. ▌
    Analyzing Android Malware With Apktool · autohandai-community-skills bundle

    Perform static analysis of Android APK malware samples using apktool for decompilation, jadx for Java source recovery, and androguard for permission analysis, manifest inspection, and suspicious API call detection.
    8 installs
99. ▌
    Analyzing Windows Prefetch With Python · autohandai-community-skills bundle

    Parse Windows Prefetch files using the windowsprefetch Python library to reconstruct application execution history, detect renamed or masquerading binaries, and identify suspicious program execution patterns.
    10 installs
100. ▌
     Conducting Mobile App Penetration Test · autohandai-community-skills bundle

     Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities in data storage, network communication, authentication, cryptography, and platform-specific security controls. The tester performs static analysis of application binaries, dynamic analysis at runtime, and API security testing to evaluate the complete mobile attack surface. Activates for requests involving mobile app pentest, iOS security assessment, Android security testing, or OWASP MASTG assessment.
     9 installs