← all publishers

autohandai

@autohandai-community-skills source repo

Report this profile Claim this profile

• 608 skills
• 0 followers
• 3 days ago last updated

1. ▌
   Performing JWT None Algorithm Attack · autohandai-community-skills bundle

   Execute and test the JWT none algorithm attack to bypass signature verification by manipulating the alg header field in JSON Web Tokens.
   1 install
2. ▌
   Performing Sqlite Database Forensics · autohandai-community-skills bundle

   Perform forensic analysis of SQLite databases to recover deleted records from freelists and WAL files, decode encoded timestamps, and extract evidence from browser history, messaging apps, and mobile device databases.
   1 install
3. ▌
   Scanning Container Images With Grype · autohandai-community-skills bundle

   Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.
   1 install
4. ▌
   Tracking Threat Actor Infrastructure · autohandai-community-skills bundle

   Threat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control (C2) servers, phishing domains, exploit kit hosts, bulletproof hosting, a
   1 install
5. ▌
   Performing Clickjacking Attack Test · autohandai-community-skills bundle

   Testing web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
   1 install
6. ▌
   Performing Fuzzing With Aflplusplus · autohandai-community-skills bundle

   Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instruments target binaries with afl-cc/afl-clang-fast, manages input corpora with afl-cmin and afl-tmin, runs parallel fuzzing campaigns with afl-fuzz, and triages crashes using CASR or GDB scripts. Activates for requests involving binary fuzzing, crash discovery, coverage-guided testing, or AFL++ fuzzing campaigns.
   1 install
7. ▌
   Scanning Infrastructure With Nessus · autohandai-community-skills bundle

   Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.
   1 install
8. ▌
   Analyzing Active Directory Acl Abuse · autohandai-community-skills bundle

   Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
   1 install
9. ▌
   Analyzing Golang Malware With Ghidra · autohandai-community-skills bundle

   Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.
   1 install
10. ▌
    Analyzing Malicious Url With Urlscan · autohandai-community-skills bundle

    URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolat
    1 install
11. ▌
    Analyzing Network Packets With Scapy · autohandai-community-skills bundle

    Craft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security testing
    1 install
12. ▌
    Analyzing Threat Landscape With Misp · autohandai-community-skills bundle

    Analyze the threat landscape using MISP (Malware Information Sharing Platform) by querying event statistics, attribute distributions, threat actor galaxy clusters, and tag trends over time. Uses PyMISP to pull event data, compute IOC type breakdowns, identify top threat actors and malware families, and generate threat landscape reports with temporal trends.
    1 install
13. ▌
    Analyzing Windows Shellbag Artifacts · autohandai-community-skills bundle

    Analyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags Explorer.
    1 install
14. ▌
    Auditing Kubernetes Rbac Permissions · autohandai-community-skills bundle

    Kubernetes Role-Based Access Control (RBAC) auditing systematically reviews roles, cluster roles, bindings, and service account permissions to identify overly permissive access, privilege escalation p
    0 installs
15. ▌
    Detecting Container Drift At Runtime · autohandai-community-skills bundle

    Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.
    1 install
16. ▌
    Detecting SQL Injection Via Waf Logs · autohandai-community-skills bundle

    Analyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to identify SQLi patterns (UNION SELECT, OR 1=1, SLEEP(), BENCHMARK()), tracks attack sources, correlates multi-stage injection attempts, and generates incident reports with OWASP classification.
    1 install
17. ▌
    Hunting For Lateral Movement Via Wmi · autohandai-community-skills bundle

    Detect WMI-based lateral movement by analyzing Windows Event ID 4688 process creation and Sysmon Event ID 1 for WmiPrvSE.exe child process patterns, remote process execution, and WMI event subscription persistence.
    1 install
18. ▌
    Nvidia Nemo Rl Config Conventions · autohandai-community-skills bundle

    Configuration conventions for NeMo-RL. YAML is the single source of truth for defaults. Covers TypedDict usage, exemplar YAML updates, and forbidden default patterns.
    1 install
19. ▌
    Nvidia Nemoclaw Maintainer Triage · autohandai-community-skills bundle

    AI-assisted label triage for NVIDIA/NemoClaw issues and PRs. Reads triage-instructions.md at runtime for consistent label guidance. Supports single-item mode (give it a number) and batch mode (fetches up to 50 unlabeled open items). On approval, applies labels and an optional triage comment via gh CLI, then logs the session to the daily-rhythm activity folder. Trigger keywords - triage, label issues, suggest labels, batch triage, triage issue, triage PR, label this, what labels.
    1 install
20. ▌
    Nvidia Tensorrt LLM Ad Conf Check · autohandai-community-skills bundle

    Check whether AutoDeploy YAML configs were actually applied by analyzing server logs and optionally graph dumps (AD_DUMP_GRAPHS_DIR). Use when the user wants to verify config application, debug config issues, or check if AutoDeploy transforms (piecewise CUDA graph, multi-stream, sharding, fusion, etc.) were applied or fell back. Triggers on: "check config", "verify config", "ad-conf-check", "were my configs applied", "config not working", "check if piecewise is enabled", "check log for config", or any request to compare AD YAML settings against runtime behavior.
    1 install
21. ▌
    Nvidia Tensorrt LLM Ad Graph Dump · autohandai-community-skills bundle

    Enable and interpret TensorRT-LLM AutoDeploy FX graph text dumps via AD_DUMP_GRAPHS_DIR. Use when you need before/after graphs per transform, to locate subgraphs, or to confirm a rewrite ran. Paths and behavior are grounded in tensorrt_llm/_torch/auto_deploy (GraphWriter, BaseTransform). Complements ad-add-fusion-transformation.
    1 install
22. ▌
    Nvidia Tensorrt LLM Perf Analysis · autohandai-community-skills bundle

    Performance analysis coordination workflow. Guides profiling delegation, bottleneck classification (compute/memory/launch/communication/sync), and structured report generation. Use when the user asks to analyze performance, profile a workload, check MFU/SOL, or diagnose bottlenecks.
    1 install
23. ▌
    Performing Csrf Attack Simulation · autohandai-community-skills bundle

    Testing web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.
    1 install
24. ▌
    Performing Malware Ioc Extraction · autohandai-community-skills bundle

    Malware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise including file hashes, network indicators (C2 domains, IP addresses, URLs), regist
    1 install
25. ▌
    Performing Red Team With Covenant · autohandai-community-skills bundle

    Conduct red team operations using the Covenant C2 framework for authorized adversary simulation, including listener setup, grunt deployment, task execution, and lateral movement tracking.
    1 install
26. ▌
    Scanning Docker Images With Trivy · autohandai-community-skills bundle

    Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati
    1 install
27. ▌
    Testing For Host Header Injection · autohandai-community-skills bundle

    Test web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.
    3 installs
28. ▌
    Detecting Attacks On Scada Systems · autohandai-community-skills bundle

    This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.
    0 installs
29. ▌
    Detecting AWS Cloudtrail Anomalies · autohandai-community-skills bundle

    Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized resource access.
    0 installs
30. ▌
    Detecting Email Account Compromise · autohandai-community-skills bundle

    Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.
    1 install
31. ▌
    Detecting Insider Threat With Ueba · autohandai-community-skills bundle

    Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch to build behavioral baselines, calculate anomaly scores, perform peer group analysis, and detect insider threat indicators such as data exfiltration, privilege abuse, and unauthorized access patterns.
    1 install
32. ▌
    Nvidia Nemoclaw Maintainer Evening · autohandai-community-skills bundle

    Runs the end-of-day maintainer handoff for NemoClaw. Checks version target progress, bumps stragglers to the next patch version, generates a QA handoff summary, and cuts the release tag. Use at the end of the workday. Trigger keywords - evening, end of day, EOD, wrap up, ship it, cut tag, handoff, done for the day.
    1 install
33. ▌
    Nvidia Nemoclaw Maintainer Morning · autohandai-community-skills bundle

    Runs the morning maintainer standup for NemoClaw. Triages the backlog, determines the day's target version, labels selected items, surfaces stragglers from previous versions, and outputs the daily plan. Use at the start of the workday. Trigger keywords - morning, standup, start of day, daily plan, what are we shipping today.
    1 install
34. ▌
    Nvidia Nemoclaw User Deploy Remote · autohandai-community-skills bundle

    Explains how to run NemoClaw on a remote GPU instance, including the deprecated Brev compatibility path and the preferred installer plus onboard flow. Use when deploying NemoClaw to a remote VM, onboarding a Brev instance, or migrating away from the legacy `nemoclaw deploy` wrapper. Trigger keywords - deploy nemoclaw remote gpu, nemoclaw brev cloud deployment, nemoclaw plugins, openclaw plugins, install openclaw plugin, nemoclaw onboard from dockerfile, nemoclaw brev web ui, nemoclaw getting started, brev quickstart, nvidia nemotron agent, nemoclaw sandbox hardening, container security, docker capabilities, process limits.
    1 install
35. ▌
    Nvidia Nemoclaw User Manage Policy · autohandai-community-skills bundle

    Adds, removes, or modifies allowed endpoints in the sandbox policy. Use when customizing network policy, changing egress rules, or configuring sandbox endpoint access. Trigger keywords - customize nemoclaw network policy, sandbox egress policy configuration, nemoclaw integration policy examples, post-install policy setup, openshell approval workflow, policy preset, nemoclaw approve network requests, sandbox egress approval tui.
    1 install
36. ▌
    Nvidia Nemotron Voice Agent Deploy · autohandai-community-skills bundle

    Deploy Nemotron Voice Agent on Workstation (x86), Jetson Thor, or Cloud NIMs. Real-time speech-to-speech using NVIDIA ASR, TTS, LLM with WebRTC/WebSocket transport.
    1 install
37. ▌
    Performing Dns Tunneling Detection · autohandai-community-skills bundle

    Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying high subdomain cardinality. Uses scapy for packet capture analysis and statistical methods to distinguish legitimate DNS from covert channels. Use when hunting for data exfiltration.
    1 install
38. ▌
    Configuring Ldap Security Hardening · autohandai-community-skills bundle

    Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding, and channel binding bypass. Covers LDAPS enforcement, channel binding, LDAP si
    0 installs
39. ▌
    Detecting Business Email Compromise · autohandai-community-skills bundle

    Business Email Compromise (BEC) is a sophisticated fraud scheme where attackers impersonate executives, vendors, or trusted partners to trick employees into transferring funds, sharing sensitive data,
    1 install
40. ▌
    Detecting Container Escape Attempts · autohandai-community-skills bundle

    Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
    1 install
41. ▌
    Hunting Credential Stuffing Attacks · autohandai-community-skills bundle

    Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins. Uses statistical analysis on Splunk or raw log data. Use when investigating account takeover campaigns or building detection rules for auth abuse.
    1 install
42. ▌
    Implementing Bgp Security With Rpki · autohandai-community-skills bundle

    Implement BGP route origin validation using RPKI with Route Origin Authorizations, RPKI-to-Router protocol, and ROV policies on Cisco and Juniper routers to prevent route hijacking.
    1 install
43. ▌
    Nvidia Nemo Rl Build And Dependency · autohandai-community-skills bundle

    Build and dependency management for NeMo-RL. Covers Docker image building and running, uv usage, venv setup, and adding dependencies.
    1 install
44. ▌
    Nvidia Tilegym Adding Cutile Kernel · autohandai-community-skills bundle

    Add a new cuTile GPU kernel operator to TileGym. Covers dispatch registration in ops.py, cuTile backend implementation, __init__.py exports, test creation, and benchmark in tests/benchmark. Use when adding, creating, or implementing a new cuTile operator/kernel in TileGym, or when asking how to register a new cuTile op.
    1 install
45. ▌
    Containing Active Security Breach · autohandai-community-skills bundle

    Rapidly contain an active security breach by isolating compromised systems, blocking attacker communications, and preserving evidence while minimizing business disruption.
    0 installs
46. ▌
    Detecting API Enumeration Attacks · autohandai-community-skills bundle

    Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.
    0 installs
47. ▌
    Detecting Pass The Ticket Attacks · autohandai-community-skills bundle

    Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEM
    3 installs
48. ▌
    Detecting Rdp Brute Force Attacks · autohandai-community-skills bundle

    Detect RDP brute force attacks by analyzing Windows Security Event Logs for failed authentication patterns (Event ID 4625), successful logons after failures (Event ID 4624), NLA failures, and source IP frequency analysis.
    1 install
49. ▌
    Hunting For Cobalt Strike Beacons · autohandai-community-skills bundle

    Detect Cobalt Strike beacon network activity using default TLS certificate signatures (serial 8BB00EE), JA3/JA3S/JARM fingerprints, HTTP C2 profile pattern matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.
    1 install
50. ▌
    Hunting For Dns Based Persistence · autohandai-community-skills bundle

    Hunt for DNS-based persistence mechanisms including DNS hijacking, dangling CNAME records, wildcard DNS abuse, and unauthorized zone modifications using passive DNS databases, SecurityTrails API, and DNS audit log analysis.
    1 install
51. ▌
    Implementing Siem Use Case Tuning · autohandai-community-skills bundle

    Tune SIEM detection rules to reduce false positives by analyzing alert volumes, creating whitelists, adjusting thresholds, and measuring detection efficacy metrics in Splunk and Elastic
    1 install
52. ▌
    Legacy Modernization Orchestrator · autohandai-community-skills

    Orchestrate multi-agent legacy modernization assessment, planning, and code-conversion workflows.
    1 install
53. ▌
    Nvidia Megatron Bridge Resiliency · autohandai-community-skills bundle

    Resiliency features in Megatron Bridge including fault tolerance, straggler detection, in-process restart, preemption, and re-run state machine.
    0 installs
54. ▌
    Nvidia Megatron Core Create Issue · autohandai-community-skills bundle

    Investigate a failing GitHub Actions run or job and create a GitHub issue for the failure.
    0 installs
55. ▌
    Nvidia Megatron Core Nightly Sync · autohandai-community-skills bundle

    Domain knowledge for the nightly main-to-dev sync workflow. Covers merge strategy, CI architecture, failure investigation, and known issues.
    0 installs
56. ▌
    Nvidia Megatron Core Run On Slurm · autohandai-community-skills bundle

    How to launch distributed Megatron-LM training jobs on a SLURM cluster. Covers a minimal sbatch skeleton, environment-variable setup for torch.distributed.run, CUDA_DEVICE_MAX_CONNECTIONS rules across hardware and parallelism modes, container conventions, monitoring, and per-rank failure diagnosis.
    0 installs
57. ▌
    Nvidia Model Optimizer Deployment · autohandai-community-skills bundle

    Serve a quantized or unquantized LLM checkpoint as an OpenAI-compatible API endpoint using vLLM, SGLang, or TRT-LLM. Use when user says "deploy model", "serve model", "start vLLM server", "launch SGLang", "TRT-LLM deploy", "AutoDeploy", "benchmark throughput", "serve checkpoint", or needs an inference endpoint from a HuggingFace or ModelOpt-quantized checkpoint. Do NOT use for quantizing models (use ptq) or evaluating accuracy (use evaluation).
    0 installs
58. ▌
    Nvidia Model Optimizer Evaluation · autohandai-community-skills bundle

    Evaluates accuracy of quantized or unquantized LLMs using NeMo Evaluator Launcher (NEL). Triggers on "evaluate model", "benchmark accuracy", "run MMLU", "evaluate quantized model", "accuracy drop", "run nel". Handles deployment, config generation, and evaluation execution. Not for quantizing models (use ptq) or deploying/serving models (use deployment).
    1 install
59. ▌
    Analyzing Phishing Email Headers · autohandai-community-skills bundle

    Email headers contain critical metadata that reveals the true origin, routing path, and authentication status of emails. Analyzing these headers is a foundational skill for identifying phishing attemp
    2 installs
60. ▌
    Detecting Azure Lateral Movement · autohandai-community-skills bundle

    Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.
    0 installs
61. ▌
    Executing Diamond Model Analysis · autohandai-community-skills bundle

    Applies the Diamond Model of Intrusion Analysis to structure adversary activity into its four core vertices (adversary, capability, infrastructure, victim) and identifies relationships between them to pivot investigations and attribute campaigns. Use when analyzing a completed intrusion, linking disparate incidents to a common threat actor, or building structured analytic products for threat intelligence dissemination. Activates for requests involving Diamond Model, intrusion analysis, campaign clustering, or adversary attribution methodology.
    1 install
62. ▌
    Nvidia Cuopt Routing Formulation · autohandai-community-skills bundle

    Vehicle routing (VRP, TSP, PDP) — problem types and data requirements. Domain concepts; no API or interface.
    1 install
63. ▌
    Nvidia Nemo Gym Reward Profiling · autohandai-community-skills bundle

    Use to help users get started with Nemo Gym reward profiling. Covers the basic ng_run, ng_collect_rollouts, and ng_reward_profile workflow, repeated rollouts, materialized inputs, rollout JSONL artifacts, task and rollout identity, output inspection, partial profiling, and rollout_infos. For failed jobs, prefer nemo-gym-debugging.
    1 install
64. ▌
    Nvidia Nemoclaw User Get Started · autohandai-community-skills bundle

    Installs NemoClaw, launches a sandbox, and runs the first agent prompt. Use when onboarding, installing, or launching a NemoClaw sandbox for the first time. Trigger keywords - nemoclaw quickstart, install nemoclaw openclaw sandbox, nemohermes quickstart, hermes agent nemoclaw, run hermes openshell sandbox, nemoclaw prerequisites, nemoclaw supported platforms, nemoclaw hardware software, nemoclaw windows wsl2 setup, nemoclaw install windows docker desktop.
    1 install
65. ▌
    Nvidia Tilegym Cutile Autotuning · autohandai-community-skills bundle

    Use when adding, modifying, optimizing, or debugging CuTile autotuning code. Trigger signals: `exhaustive_search` / `replace_hints` / `hints_fn` / `cuda.tile.tune` in code, `autotune` in filenames, or correctness/performance issues in autotuned CuTile kernels. Covers: tune-once/cache/launch pattern, per-architecture configs (sm80–sm120), parameter space design (tile sizes, occupancy, num_ctas), and 7 common pitfalls with solutions.
    1 install
66. ▌
    Performing Osint With Spiderfoot · autohandai-community-skills bundle

    Automate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance, and structured result analysis across 200+ data sources
    1 install
67. ▌
    Performing Service Account Audit · autohandai-community-skills bundle

    Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts. This skill covers discovery of service accounts in Active Directory, cloud pl
    1 install
68. ▌
    Reverse Engineering Rust Malware · autohandai-community-skills bundle

    Reverse engineer Rust-compiled malware using IDA Pro and Ghidra with techniques for handling non-null-terminated strings, crate dependency extraction, and Rust-specific control flow analysis.
    1 install
69. ▌
    Analyzing API Gateway Access Logs · autohandai-community-skills bundle

    Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate limit bypass, credential scanning, and injection attempts. Uses pandas for statistical analysis of request patterns and anomaly detection. Use when investigating API abuse or building API-specific threat detection rules.
    1 install
70. ▌
    Analyzing Heap Spray Exploitation · autohandai-community-skills bundle

    Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns, shellcode landing zones, and suspicious large allocations in process virtual address space.
    1 install
71. ▌
    Conducting Pass The Ticket Attack · autohandai-community-skills bundle

    Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen Kerberos tickets (TGT or TGS) to authenticate to services without knowing the user's password. By extracting Kerberos tickets fro
    0 installs
72. ▌
    Analyzing Kubernetes Audit Logs · autohandai-community-skills bundle

    Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat detection rules from audit event patterns. Use when investigating Kubernetes cluster compromise or building k8s-specific SIEM detection rules.
    1 install
73. ▌
    Analyzing Linux Kernel Rootkits · autohandai-community-skills bundle

    Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, and tampered system structures.
    1 install
74. ▌
    Configuring Hsm For Key Storage · autohandai-community-skills bundle

    Hardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and perform cryptographic operations in a hardened environment. Keys stored in an HSM never lea
    0 installs
75. ▌
    Detecting Golden Ticket Attacks · autohandai-community-skills bundle

    Detect Kerberos golden ticket attacks by analyzing Windows Security event logs for anomalous TGT usage patterns. Parses Event IDs 4624, 4672, and 4768 from EVTX files to identify tickets with abnormal lifetimes, domain SID mismatches, and privilege escalation sequences where non-admin accounts receive admin-level privileges without corresponding group membership changes.
    1 install
76. ▌
    Detecting Golden Ticket Forgery · autohandai-community-skills bundle

    Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM
    1 install
77. ▌
    Detecting Shadow It Cloud Usage · autohandai-community-skills bundle

    Detect unauthorized SaaS and cloud service usage (shadow IT) by analyzing proxy logs, DNS query logs, and netflow data using Python pandas for traffic pattern analysis and domain classification.
    1 install
78. ▌
    Implementing Saml Sso With Okta · autohandai-community-skills bundle

    Implement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration of SAML authentication flows, attribute mapping, certificate management, a
    1 install
79. ▌
    Nvidia Cuopt Routing API Python · autohandai-community-skills bundle

    Vehicle routing (VRP, TSP, PDP) with cuOpt — Python API only. Use when the user is building or solving routing in Python.
    1 install
80. ▌
    Performing Kerberoasting Attack · autohandai-community-skills bundle

    Kerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requesting Kerberos TGS (Ticket Granting Service) tickets for accounts with Service Principal Names
    1 install
81. ▌
    Performing Ssl Stripping Attack · autohandai-community-skills bundle

    Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy in authorized environments to test HSTS enforcement, certificate validation, and HTTPS upgrade mechanisms that protect users from downgrade attacks on encrypted connections.
    1 install
82. ▌
    Securing Helm Chart Deployments · autohandai-community-skills bundle

    Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.
    1 install
83. ▌
    Testing For Xss Vulnerabilities · autohandai-community-skills bundle

    Tests web applications for Cross-Site Scripting (XSS) vulnerabilities by injecting JavaScript payloads into reflected, stored, and DOM-based contexts to demonstrate client-side code execution, session hijacking, and user impersonation. The tester identifies all injection points and output contexts, crafts context-appropriate payloads, and bypasses sanitization and CSP protections. Activates for requests involving XSS testing, cross-site scripting assessment, client-side injection testing, or JavaScript injection vulnerability testing.
    1 install
84. ▌
    Agentic Development Principles · autohandai-community-skills

    Universal principles for agentic development when collaborating with AI agents. Defines divide-and-conquer, context management, abstraction level selection, and an automation philosophy. Applicable to all AI coding tools.
    1 install
85. ▌
    Building Soc Escalation Matrix · autohandai-community-skills bundle

    Build a structured SOC escalation matrix defining severity tiers, response SLAs, escalation paths, and notification procedures for security incidents.
    0 installs
86. ▌
    Detecting Shadow API Endpoints · autohandai-community-skills bundle

    Discover and inventory shadow API endpoints that operate outside documented specifications using traffic analysis, code scanning, and API discovery platforms.
    1 install
87. ▌
    Hunting For Ntlm Relay Attacks · autohandai-community-skills bundle

    Detect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying IP-to-hostname mismatches, Responder traffic signatures, SMB signing status, and suspicious authentication patterns across the domain.
    1 install
88. ▌
    Nvidia Cuopt Server API Python · autohandai-community-skills bundle

    cuOpt REST server — start server, endpoints, Python/curl client examples. Use when the user is deploying or calling the REST API.
    1 install
89. ▌
    Nvidia Megatron Bridge Testing · autohandai-community-skills bundle

    Testing reference for Megatron Bridge — unit and functional test layout, tier semantics (L0/L1/L2/flaky), script conventions, running tests locally, adding/moving/disabling tests, and pytest conventions.
    0 installs
90. ▌
    Nvidia Model Optimizer Monitor · autohandai-community-skills bundle

    Monitor submitted jobs (PTQ, evaluation, deployment) on SLURM clusters. Use when the user asks "check job status", "is my job done", "monitor my evaluation", "what's the status of the PTQ", "check on a SLURM job id", or after any skill submits a long-running job. Also triggers on "nel status", "squeue", or any request to check progress of a previously submitted job.
    1 install
91. ▌
    Nvidia Nemo Gym Pivot Datasets · autohandai-community-skills bundle

    Use when creating, validating, or documenting Nemo Gym pivot datasets from rollout, trajectory, chat-completion, Responses API, or tool-call artifacts. Covers Gym Responses-style row conversion, pivot selection, single-step tool-use configs, agent_ref alignment, verifier knobs, expected-action row contracts, and train/eval usage.
    1 install
92. ▌
    Nvidia Nemoclaw Maintainer Day · autohandai-community-skills bundle

    Runs the daytime maintainer loop for NemoClaw, prioritizing items labeled with the current version target. Picks the highest-value item, executes the right workflow (merge gate, salvage, security sweep, test gaps, hotspot cooling, or sequencing), and reports progress. Use during the workday to land PRs and close issues. Designed for /loop (e.g. /loop 10m /nemoclaw-maintainer-day). Trigger keywords - maintainer day, work on PRs, land PRs, make progress, what's next, keep going, maintainer loop.
    1 install
93. ▌
    Nvidia Nemoclaw User Reference · autohandai-community-skills bundle

    Describes the NemoClaw plugin and blueprint architecture and how they orchestrate the OpenClaw sandbox. Use when looking up architecture, plugin structure, or blueprint design. Trigger keywords - nemoclaw architecture, nemoclaw plugin blueprint structure, nemoclaw vs openshell, which cli, nemoclaw cli, openshell cli, sandbox commands, nemoclaw cli commands, nemoclaw command reference, nemoclaw network policy, sandbox egress control operator approval, nemoclaw troubleshooting, nemoclaw debug sandbox issues.
    1 install
94. ▌
    Performing Vlan Hopping Attack · autohandai-community-skills bundle

    Simulates VLAN hopping attacks using switch spoofing and double tagging techniques in authorized environments to test VLAN segmentation effectiveness and validate switch port security configurations against Layer 2 bypass attacks.
    1 install
95. ▌
    Nvidia Nemo Rl Contributing · autohandai-community-skills bundle

    Contribution conventions for NeMo-RL. Covers PR title format, commit sign-off, and CI triggering.
    1 install
96. ▌
    Implementing Cloud Waf Rules · autohandai-community-skills bundle

    This skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare to protect cloud-hosted applications against OWASP Top 10 attacks. It details configuring managed rule sets, creating custom rules for business logic protection, implementing rate limiting, deploying bot management, and reducing false positives through rule tuning and logging analysis.
    1 install
97. ▌
    Nvidia Cuopt Skill Evolution · autohandai-community-skills bundle

    After solving a non-trivial problem, detect generalizable learnings and propose skill updates so future interactions benefit automatically. Always active — applies to every interaction.
    1 install
98. ▌
    Nvidia Megatron Core Testing · autohandai-community-skills bundle

    Test system for Megatron-LM. Covers test layout, recipe YAML structure, adding and running unit and functional tests, golden values, marker filters, and CI parity.
    0 installs
99. ▌
    Nvidia Model Optimizer Debug · autohandai-community-skills bundle

    Run commands inside a remote Docker container via the file-based command relay (tools/debugger). Use when the user says "run in Docker", "run on GPU", "debug remotely", "run test in container", "check nvidia-smi", "run pytest in Docker", or needs to execute any command inside a Docker container that shares the repo filesystem. Requires the user to have started server.sh inside the container first.
    0 installs
100. ▌
     Nvidia Nemo Rl Auto Research · autohandai-community-skills bundle

     Autonomous NeMo-RL research agent workflow for directed hypothesis testing and open-ended discovery. Guides agents through the full experiment lifecycle: understanding recipes and environments, wiring RL or NeMo-gym runs, launching reproducible baselines and iterations, analyzing results, preserving human oversight, and using git plus TSV logs as the research ledger.
     1 install