← all publishers

autohandai

@autohandai-community-skills source repo

Report this profile Claim this profile

• 628 skills
• 0 followers
• last month last updated

1. ▌
   Deploying Tailscale For Zero Trust Vpn · autohandai-community-skills bundle

   Deploy and configure Tailscale as a WireGuard-based zero trust mesh VPN with identity-aware access controls, ACLs, and exit nodes for secure peer-to-peer connectivity.
   3 installs
2. ▌
   Analyzing Powershell Empire Artifacts · autohandai-community-skills bundle

   Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
   6 installs
3. ▌
   Building Threat Intelligence Platform · autohandai-community-skills bundle

   Building a Threat Intelligence Platform (TIP) involves deploying and integrating multiple CTI tools into a unified system for collecting, analyzing, enriching, and disseminating threat intelligence. T
   5 installs
4. ▌
   Configuring Oauth2 Authorization Flow · autohandai-community-skills bundle

   Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token
   9 installs
5. ▌
   Detecting Cloud Cryptomining Activity · autohandai-community-skills bundle

   Detecting unauthorized cryptocurrency mining activity in cloud environments by analyzing compute usage anomalies, network traffic to mining pools, GuardDuty findings, and container workload behavior using AWS, Azure, and GCP native security services.
   10 installs
6. ▌
   Detecting Credential Dumping With Edr · autohandai-community-skills bundle

   Detect OS credential dumping techniques including LSASS access, SAM extraction, and DCSync using EDR telemetry and Sysmon logs.
   10 installs
7. ▌
   Exploiting Nopac Cve 2021 42278 42287 · autohandai-community-skills bundle

   Exploit the noPac vulnerability chain (CVE-2021-42278 sAMAccountName spoofing and CVE-2021-42287 KDC PAC confusion) to escalate from standard domain user to Domain Admin in Active Directory environments.
   4 installs
8. ▌
   Hardening Docker Daemon Configuration · autohandai-community-skills bundle

   Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.
   10 installs
9. ▌
   Implementing GCP Binary Authorization · autohandai-community-skills bundle

   Implement GCP Binary Authorization to enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.
   5 installs
10. ▌
    Nvidia Deepstream Import Vision Model · autohandai-community-skills bundle

    Use this skill to bring any vision model from HuggingFace or NVIDIA NGC into an NVIDIA DeepStream pipeline with end-to-end automation: ONNX download, SafeTensors export, TRT engine build, custom nvinfer bbox parser, multi-stream benchmark, and PDF report. Object detection models only.
    11 installs
11. ▌
    Nvidia Megatron Bridge Parity Testing · autohandai-community-skills bundle

    Structured framework for verifying numerical parity of HF-to-MCore weight conversions. References existing tools and the add-model-support skill.
    6 installs
12. ▌
    Nvidia Megatron Core Respond To Issue · autohandai-community-skills bundle

    Research and draft a response to a GitHub issue or question from an external contributor.
    6 installs
13. ▌
    Hunting For Webshells In Web Servers · autohandai-community-skills bundle

    Detect webshells planted on web servers by scanning for high-entropy files, suspicious PHP/JSP/ASP patterns (eval, base64_decode, system, passthru), recently modified files in web roots, and anomalous file sizes. Uses Shannon entropy calculation to flag obfuscated payloads and regex pattern matching against known webshell signatures.
    8 installs
14. ▌
    Hunting Living Off The Land Binaries · autohandai-community-skills bundle

    Detects abuse of Living Off The Land Binaries (LOLBAS) such as certutil, wmic, mshta, regsvr32, and rundll32 in Windows event logs and Sysmon telemetry. Builds detection rules by cross-referencing process creation events against the LOLBAS project database. Use when threat hunting for fileless attack techniques or building SIEM detection rules.
    6 installs
15. ▌
    Implementing Pam For Database Access · autohandai-community-skills bundle

    Deploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL. Covers session proxy configuration, credential vaulting, query auditing, dynamic credentia
    4 installs
16. ▌
    Implementing Rsa Key Pair Management · autohandai-community-skills bundle

    RSA (Rivest-Shamir-Adleman) is the most widely deployed asymmetric cryptographic algorithm, used for digital signatures, key exchange, and encryption. This skill covers generating, storing, rotating,
    6 installs
17. ▌
    Nvidia Megatron Core Bump Base Image · autohandai-community-skills bundle

    Bump the NVIDIA PyTorch base image using the nvcr.io/nvidia/pytorch YY.MM py3 tag used by Megatron-LM CI. Covers the two pin sites (GitHub CI in `docker/.ngc_version.dev` and GitLab CI in `.gitlab/stages/01.build.yml`), the post-bump CI loop (re-run functional tests, refresh golden values, mark broken tests), and the gotchas that bit PRs
    3 installs
18. ▌
    Nvidia Nemoclaw User Monitor Sandbox · autohandai-community-skills bundle

    Inspects sandbox health, traces agent behavior, and diagnoses problems. Use when monitoring a running sandbox, debugging agent issues, or checking sandbox logs. Trigger keywords - monitor nemoclaw sandbox, debug nemoclaw agent issues.
    6 installs
19. ▌
    Nvidia Tensorrt LLM Ad Model Onboard · autohandai-community-skills bundle

    Translates a HuggingFace model into a prefill-only AutoDeploy custom model using reference custom ops, validates with hierarchical equivalence tests.
    5 installs
20. ▌
    Performing Cloud Penetration Testing · autohandai-community-skills bundle

    Performs authorized penetration testing of cloud environments across AWS, Azure, and GCP to identify IAM misconfigurations, exposed storage buckets, overly permissive security groups, serverless function vulnerabilities, and cloud-specific attack paths from initial access to account compromise. The tester uses cloud-native tools and specialized frameworks like Pacu and ScoutSuite to enumerate and exploit cloud infrastructure. Activates for requests involving cloud pentest, AWS security assessment, Azure penetration testing, or cloud infrastructure security testing.
    8 installs
21. ▌
    Performing JWT None Algorithm Attack · autohandai-community-skills bundle

    Execute and test the JWT none algorithm attack to bypass signature verification by manipulating the alg header field in JSON Web Tokens.
    8 installs
22. ▌
    Performing Sqlite Database Forensics · autohandai-community-skills bundle

    Perform forensic analysis of SQLite databases to recover deleted records from freelists and WAL files, decode encoded timestamps, and extract evidence from browser history, messaging apps, and mobile device databases.
    10 installs
23. ▌
    Scanning Container Images With Grype · autohandai-community-skills bundle

    Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.
    5 installs
24. ▌
    Tracking Threat Actor Infrastructure · autohandai-community-skills bundle

    Threat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control (C2) servers, phishing domains, exploit kit hosts, bulletproof hosting, a
    4 installs
25. ▌
    Performing Clickjacking Attack Test · autohandai-community-skills bundle

    Testing web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
    6 installs
26. ▌
    Performing Fuzzing With Aflplusplus · autohandai-community-skills bundle

    Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instruments target binaries with afl-cc/afl-clang-fast, manages input corpora with afl-cmin and afl-tmin, runs parallel fuzzing campaigns with afl-fuzz, and triages crashes using CASR or GDB scripts. Activates for requests involving binary fuzzing, crash discovery, coverage-guided testing, or AFL++ fuzzing campaigns.
    4 installs
27. ▌
    Scanning Infrastructure With Nessus · autohandai-community-skills bundle

    Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.
    9 installs
28. ▌
    Analyzing Active Directory Acl Abuse · autohandai-community-skills bundle

    Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
    5 installs
29. ▌
    Analyzing Golang Malware With Ghidra · autohandai-community-skills bundle

    Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.
    5 installs
30. ▌
    Analyzing Malicious Url With Urlscan · autohandai-community-skills bundle

    URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolat
    11 installs
31. ▌
    Analyzing Network Packets With Scapy · autohandai-community-skills bundle

    Craft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security testing
    10 installs
32. ▌
    Analyzing Threat Landscape With Misp · autohandai-community-skills bundle

    Analyze the threat landscape using MISP (Malware Information Sharing Platform) by querying event statistics, attribute distributions, threat actor galaxy clusters, and tag trends over time. Uses PyMISP to pull event data, compute IOC type breakdowns, identify top threat actors and malware families, and generate threat landscape reports with temporal trends.
    8 installs
33. ▌
    Analyzing Windows Shellbag Artifacts · autohandai-community-skills bundle

    Analyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags Explorer.
    10 installs
34. ▌
    Auditing Kubernetes Rbac Permissions · autohandai-community-skills bundle

    Kubernetes Role-Based Access Control (RBAC) auditing systematically reviews roles, cluster roles, bindings, and service account permissions to identify overly permissive access, privilege escalation p
    7 installs
35. ▌
    Detecting Container Drift At Runtime · autohandai-community-skills bundle

    Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.
    7 installs
36. ▌
    Detecting SQL Injection Via Waf Logs · autohandai-community-skills bundle

    Analyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to identify SQLi patterns (UNION SELECT, OR 1=1, SLEEP(), BENCHMARK()), tracks attack sources, correlates multi-stage injection attempts, and generates incident reports with OWASP classification.
    5 installs
37. ▌
    Hunting For Lateral Movement Via Wmi · autohandai-community-skills bundle

    Detect WMI-based lateral movement by analyzing Windows Event ID 4688 process creation and Sysmon Event ID 1 for WmiPrvSE.exe child process patterns, remote process execution, and WMI event subscription persistence.
    9 installs
38. ▌
    Nvidia Nemo Rl Config Conventions · autohandai-community-skills bundle

    Configuration conventions for NeMo-RL. YAML is the single source of truth for defaults. Covers TypedDict usage, exemplar YAML updates, and forbidden default patterns.
    10 installs
39. ▌
    Nvidia Nemoclaw Maintainer Triage · autohandai-community-skills bundle

    AI-assisted label triage for NVIDIA/NemoClaw issues and PRs. Reads triage-instructions.md at runtime for consistent label guidance. Supports single-item mode (give it a number) and batch mode (fetches up to 50 unlabeled open items). On approval, applies labels and an optional triage comment via gh CLI, then logs the session to the daily-rhythm activity folder. Trigger keywords - triage, label issues, suggest labels, batch triage, triage issue, triage PR, label this, what labels.
    5 installs
40. ▌
    Nvidia Tensorrt LLM Ad Conf Check · autohandai-community-skills bundle

    Check whether AutoDeploy YAML configs were actually applied by analyzing server logs and optionally graph dumps (AD_DUMP_GRAPHS_DIR). Use when the user wants to verify config application, debug config issues, or check if AutoDeploy transforms (piecewise CUDA graph, multi-stream, sharding, fusion, etc.) were applied or fell back. Triggers on: "check config", "verify config", "ad-conf-check", "were my configs applied", "config not working", "check if piecewise is enabled", "check log for config", or any request to compare AD YAML settings against runtime behavior.
    8 installs
41. ▌
    Nvidia Tensorrt LLM Ad Graph Dump · autohandai-community-skills bundle

    Enable and interpret TensorRT-LLM AutoDeploy FX graph text dumps via AD_DUMP_GRAPHS_DIR. Use when you need before/after graphs per transform, to locate subgraphs, or to confirm a rewrite ran. Paths and behavior are grounded in tensorrt_llm/_torch/auto_deploy (GraphWriter, BaseTransform). Complements ad-add-fusion-transformation.
    10 installs
42. ▌
    Nvidia Tensorrt LLM Perf Analysis · autohandai-community-skills bundle

    Performance analysis coordination workflow. Guides profiling delegation, bottleneck classification (compute/memory/launch/communication/sync), and structured report generation. Use when the user asks to analyze performance, profile a workload, check MFU/SOL, or diagnose bottlenecks.
    8 installs
43. ▌
    Performing Csrf Attack Simulation · autohandai-community-skills bundle

    Testing web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions during authorized security assessments.
    9 installs
44. ▌
    Performing Malware Ioc Extraction · autohandai-community-skills bundle

    Malware IOC extraction is the process of analyzing malicious software to identify actionable indicators of compromise including file hashes, network indicators (C2 domains, IP addresses, URLs), regist
    5 installs
45. ▌
    Performing Red Team With Covenant · autohandai-community-skills bundle

    Conduct red team operations using the Covenant C2 framework for authorized adversary simulation, including listener setup, grunt deployment, task execution, and lateral movement tracking.
    9 installs
46. ▌
    Scanning Docker Images With Trivy · autohandai-community-skills bundle

    Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati
    11 installs
47. ▌
    Testing For Host Header Injection · autohandai-community-skills bundle

    Test web applications for HTTP Host header injection vulnerabilities to identify password reset poisoning, web cache poisoning, SSRF, and virtual host routing manipulation risks.
    6 installs
48. ▌
    Detecting Attacks On Scada Systems · autohandai-community-skills bundle

    This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.
    7 installs
49. ▌
    Detecting AWS Cloudtrail Anomalies · autohandai-community-skills bundle

    Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized resource access.
    6 installs
50. ▌
    Detecting Email Account Compromise · autohandai-community-skills bundle

    Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.
    9 installs
51. ▌
    Detecting Insider Threat With Ueba · autohandai-community-skills bundle

    Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch to build behavioral baselines, calculate anomaly scores, perform peer group analysis, and detect insider threat indicators such as data exfiltration, privilege abuse, and unauthorized access patterns.
    8 installs
52. ▌
    Nvidia Nemoclaw Maintainer Evening · autohandai-community-skills bundle

    Runs the end-of-day maintainer handoff for NemoClaw. Checks version target progress, bumps stragglers to the next patch version, generates a QA handoff summary, and cuts the release tag. Use at the end of the workday. Trigger keywords - evening, end of day, EOD, wrap up, ship it, cut tag, handoff, done for the day.
    10 installs
53. ▌
    Nvidia Nemoclaw Maintainer Morning · autohandai-community-skills bundle

    Runs the morning maintainer standup for NemoClaw. Triages the backlog, determines the day's target version, labels selected items, surfaces stragglers from previous versions, and outputs the daily plan. Use at the start of the workday. Trigger keywords - morning, standup, start of day, daily plan, what are we shipping today.
    5 installs
54. ▌
    Nvidia Nemoclaw User Deploy Remote · autohandai-community-skills bundle

    Explains how to run NemoClaw on a remote GPU instance, including the deprecated Brev compatibility path and the preferred installer plus onboard flow. Use when deploying NemoClaw to a remote VM, onboarding a Brev instance, or migrating away from the legacy `nemoclaw deploy` wrapper. Trigger keywords - deploy nemoclaw remote gpu, nemoclaw brev cloud deployment, nemoclaw plugins, openclaw plugins, install openclaw plugin, nemoclaw onboard from dockerfile, nemoclaw brev web ui, nemoclaw getting started, brev quickstart, nvidia nemotron agent, nemoclaw sandbox hardening, container security, docker capabilities, process limits.
    10 installs
55. ▌
    Nvidia Nemoclaw User Manage Policy · autohandai-community-skills bundle

    Adds, removes, or modifies allowed endpoints in the sandbox policy. Use when customizing network policy, changing egress rules, or configuring sandbox endpoint access. Trigger keywords - customize nemoclaw network policy, sandbox egress policy configuration, nemoclaw integration policy examples, post-install policy setup, openshell approval workflow, policy preset, nemoclaw approve network requests, sandbox egress approval tui.
    8 installs
56. ▌
    Nvidia Nemotron Voice Agent Deploy · autohandai-community-skills bundle

    Deploy Nemotron Voice Agent on Workstation (x86), Jetson Thor, or Cloud NIMs. Real-time speech-to-speech using NVIDIA ASR, TTS, LLM with WebRTC/WebSocket transport.
    6 installs
57. ▌
    Performing Dns Tunneling Detection · autohandai-community-skills bundle

    Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying high subdomain cardinality. Uses scapy for packet capture analysis and statistical methods to distinguish legitimate DNS from covert channels. Use when hunting for data exfiltration.
    7 installs
58. ▌
    Configuring Ldap Security Hardening · autohandai-community-skills bundle

    Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding, and channel binding bypass. Covers LDAPS enforcement, channel binding, LDAP si
    7 installs
59. ▌
    Detecting Business Email Compromise · autohandai-community-skills bundle

    Business Email Compromise (BEC) is a sophisticated fraud scheme where attackers impersonate executives, vendors, or trusted partners to trick employees into transferring funds, sharing sensitive data,
    10 installs
60. ▌
    Detecting Container Escape Attempts · autohandai-community-skills bundle

    Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
    10 installs
61. ▌
    Hunting Credential Stuffing Attacks · autohandai-community-skills bundle

    Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins. Uses statistical analysis on Splunk or raw log data. Use when investigating account takeover campaigns or building detection rules for auth abuse.
    6 installs
62. ▌
    Implementing Bgp Security With Rpki · autohandai-community-skills bundle

    Implement BGP route origin validation using RPKI with Route Origin Authorizations, RPKI-to-Router protocol, and ROV policies on Cisco and Juniper routers to prevent route hijacking.
    6 installs
63. ▌
    Nvidia Nemo Rl Build And Dependency · autohandai-community-skills bundle

    Build and dependency management for NeMo-RL. Covers Docker image building and running, uv usage, venv setup, and adding dependencies.
    5 installs
64. ▌
    Nvidia Tilegym Adding Cutile Kernel · autohandai-community-skills bundle

    Add a new cuTile GPU kernel operator to TileGym. Covers dispatch registration in ops.py, cuTile backend implementation, __init__.py exports, test creation, and benchmark in tests/benchmark. Use when adding, creating, or implementing a new cuTile operator/kernel in TileGym, or when asking how to register a new cuTile op.
    6 installs
65. ▌
    Containing Active Security Breach · autohandai-community-skills bundle

    Rapidly contain an active security breach by isolating compromised systems, blocking attacker communications, and preserving evidence while minimizing business disruption.
    5 installs
66. ▌
    Detecting API Enumeration Attacks · autohandai-community-skills bundle

    Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.
    9 installs
67. ▌
    Detecting Pass The Ticket Attacks · autohandai-community-skills bundle

    Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEM
    6 installs
68. ▌
    Detecting Rdp Brute Force Attacks · autohandai-community-skills bundle

    Detect RDP brute force attacks by analyzing Windows Security Event Logs for failed authentication patterns (Event ID 4625), successful logons after failures (Event ID 4624), NLA failures, and source IP frequency analysis.
    5 installs
69. ▌
    Hunting For Cobalt Strike Beacons · autohandai-community-skills bundle

    Detect Cobalt Strike beacon network activity using default TLS certificate signatures (serial 8BB00EE), JA3/JA3S/JARM fingerprints, HTTP C2 profile pattern matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.
    9 installs
70. ▌
    Hunting For Dns Based Persistence · autohandai-community-skills bundle

    Hunt for DNS-based persistence mechanisms including DNS hijacking, dangling CNAME records, wildcard DNS abuse, and unauthorized zone modifications using passive DNS databases, SecurityTrails API, and DNS audit log analysis.
    6 installs
71. ▌
    Implementing Siem Use Case Tuning · autohandai-community-skills bundle

    Tune SIEM detection rules to reduce false positives by analyzing alert volumes, creating whitelists, adjusting thresholds, and measuring detection efficacy metrics in Splunk and Elastic
    4 installs
72. ▌
    Legacy Modernization Orchestrator · autohandai-community-skills

    Orchestrate multi-agent legacy modernization assessment, planning, and code-conversion workflows.
    8 installs
73. ▌
    Nvidia Megatron Bridge Resiliency · autohandai-community-skills bundle

    Resiliency features in Megatron Bridge including fault tolerance, straggler detection, in-process restart, preemption, and re-run state machine.
    6 installs
74. ▌
    Nvidia Megatron Core Create Issue · autohandai-community-skills bundle

    Investigate a failing GitHub Actions run or job and create a GitHub issue for the failure.
    10 installs
75. ▌
    Nvidia Megatron Core Nightly Sync · autohandai-community-skills bundle

    Domain knowledge for the nightly main-to-dev sync workflow. Covers merge strategy, CI architecture, failure investigation, and known issues.
    9 installs
76. ▌
    Nvidia Megatron Core Run On Slurm · autohandai-community-skills bundle

    How to launch distributed Megatron-LM training jobs on a SLURM cluster. Covers a minimal sbatch skeleton, environment-variable setup for torch.distributed.run, CUDA_DEVICE_MAX_CONNECTIONS rules across hardware and parallelism modes, container conventions, monitoring, and per-rank failure diagnosis.
    3 installs
77. ▌
    Nvidia Model Optimizer Deployment · autohandai-community-skills bundle

    Serve a quantized or unquantized LLM checkpoint as an OpenAI-compatible API endpoint using vLLM, SGLang, or TRT-LLM. Use when user says "deploy model", "serve model", "start vLLM server", "launch SGLang", "TRT-LLM deploy", "AutoDeploy", "benchmark throughput", "serve checkpoint", or needs an inference endpoint from a HuggingFace or ModelOpt-quantized checkpoint. Do NOT use for quantizing models (use ptq) or evaluating accuracy (use evaluation).
    8 installs
78. ▌
    Nvidia Model Optimizer Evaluation · autohandai-community-skills bundle

    Evaluates accuracy of quantized or unquantized LLMs using NeMo Evaluator Launcher (NEL). Triggers on "evaluate model", "benchmark accuracy", "run MMLU", "evaluate quantized model", "accuracy drop", "run nel". Handles deployment, config generation, and evaluation execution. Not for quantizing models (use ptq) or deploying/serving models (use deployment).
    9 installs
79. ▌
    Analyzing Phishing Email Headers · autohandai-community-skills bundle

    Email headers contain critical metadata that reveals the true origin, routing path, and authentication status of emails. Analyzing these headers is a foundational skill for identifying phishing attemp
    7 installs
80. ▌
    Detecting Azure Lateral Movement · autohandai-community-skills bundle

    Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.
    6 installs
81. ▌
    Executing Diamond Model Analysis · autohandai-community-skills bundle

    Applies the Diamond Model of Intrusion Analysis to structure adversary activity into its four core vertices (adversary, capability, infrastructure, victim) and identifies relationships between them to pivot investigations and attribute campaigns. Use when analyzing a completed intrusion, linking disparate incidents to a common threat actor, or building structured analytic products for threat intelligence dissemination. Activates for requests involving Diamond Model, intrusion analysis, campaign clustering, or adversary attribution methodology.
    9 installs
82. ▌
    Nvidia Cuopt Routing Formulation · autohandai-community-skills bundle

    Vehicle routing (VRP, TSP, PDP) — problem types and data requirements. Domain concepts; no API or interface.
    10 installs
83. ▌
    Nvidia Nemo Gym Reward Profiling · autohandai-community-skills bundle

    Use to help users get started with Nemo Gym reward profiling. Covers the basic ng_run, ng_collect_rollouts, and ng_reward_profile workflow, repeated rollouts, materialized inputs, rollout JSONL artifacts, task and rollout identity, output inspection, partial profiling, and rollout_infos. For failed jobs, prefer nemo-gym-debugging.
    8 installs
84. ▌
    Nvidia Nemoclaw User Get Started · autohandai-community-skills bundle

    Installs NemoClaw, launches a sandbox, and runs the first agent prompt. Use when onboarding, installing, or launching a NemoClaw sandbox for the first time. Trigger keywords - nemoclaw quickstart, install nemoclaw openclaw sandbox, nemohermes quickstart, hermes agent nemoclaw, run hermes openshell sandbox, nemoclaw prerequisites, nemoclaw supported platforms, nemoclaw hardware software, nemoclaw windows wsl2 setup, nemoclaw install windows docker desktop.
    4 installs
85. ▌
    Nvidia Tilegym Cutile Autotuning · autohandai-community-skills bundle

    Use when adding, modifying, optimizing, or debugging CuTile autotuning code. Trigger signals: `exhaustive_search` / `replace_hints` / `hints_fn` / `cuda.tile.tune` in code, `autotune` in filenames, or correctness/performance issues in autotuned CuTile kernels. Covers: tune-once/cache/launch pattern, per-architecture configs (sm80–sm120), parameter space design (tile sizes, occupancy, num_ctas), and 7 common pitfalls with solutions.
    6 installs
86. ▌
    Performing Osint With Spiderfoot · autohandai-community-skills bundle

    Automate OSINT collection using SpiderFoot REST API and CLI for target profiling, module-based reconnaissance, and structured result analysis across 200+ data sources
    9 installs
87. ▌
    Performing Service Account Audit · autohandai-community-skills bundle

    Audit service accounts across enterprise infrastructure to identify orphaned, over-privileged, and non-compliant accounts. This skill covers discovery of service accounts in Active Directory, cloud pl
    10 installs
88. ▌
    Reverse Engineering Rust Malware · autohandai-community-skills bundle

    Reverse engineer Rust-compiled malware using IDA Pro and Ghidra with techniques for handling non-null-terminated strings, crate dependency extraction, and Rust-specific control flow analysis.
    9 installs
89. ▌
    Analyzing API Gateway Access Logs · autohandai-community-skills bundle

    Parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate limit bypass, credential scanning, and injection attempts. Uses pandas for statistical analysis of request patterns and anomaly detection. Use when investigating API abuse or building API-specific threat detection rules.
    4 installs
90. ▌
    Analyzing Heap Spray Exploitation · autohandai-community-skills bundle

    Detect and analyze heap spray attacks in memory dumps using Volatility3 plugins to identify NOP sled patterns, shellcode landing zones, and suspicious large allocations in process virtual address space.
    6 installs
91. ▌
    Conducting Pass The Ticket Attack · autohandai-community-skills bundle

    Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen Kerberos tickets (TGT or TGS) to authenticate to services without knowing the user's password. By extracting Kerberos tickets fro
    13 installs
92. ▌
    Analyzing Kubernetes Audit Logs · autohandai-community-skills bundle

    Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat detection rules from audit event patterns. Use when investigating Kubernetes cluster compromise or building k8s-specific SIEM detection rules.
    7 installs
93. ▌
    Analyzing Linux Kernel Rootkits · autohandai-community-skills bundle

    Detect kernel-level rootkits in Linux memory dumps using Volatility3 linux plugins (check_syscall, lsmod, hidden_modules), rkhunter system scanning, and /proc vs /sys discrepancy analysis to identify hooked syscalls, hidden kernel modules, and tampered system structures.
    9 installs
94. ▌
    Configuring Hsm For Key Storage · autohandai-community-skills bundle

    Hardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and perform cryptographic operations in a hardened environment. Keys stored in an HSM never lea
    5 installs
95. ▌
    Detecting Golden Ticket Attacks · autohandai-community-skills bundle

    Detect Kerberos golden ticket attacks by analyzing Windows Security event logs for anomalous TGT usage patterns. Parses Event IDs 4624, 4672, and 4768 from EVTX files to identify tickets with abnormal lifetimes, domain SID mismatches, and privilege escalation sequences where non-admin accounts receive admin-level privileges without corresponding group membership changes.
    7 installs
96. ▌
    Detecting Golden Ticket Forgery · autohandai-community-skills bundle

    Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM
    10 installs
97. ▌
    Detecting Shadow It Cloud Usage · autohandai-community-skills bundle

    Detect unauthorized SaaS and cloud service usage (shadow IT) by analyzing proxy logs, DNS query logs, and netflow data using Python pandas for traffic pattern analysis and domain classification.
    6 installs
98. ▌
    Implementing Saml Sso With Okta · autohandai-community-skills bundle

    Implement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration of SAML authentication flows, attribute mapping, certificate management, a
    9 installs
99. ▌
    Nvidia Cuopt Routing API Python · autohandai-community-skills bundle

    Vehicle routing (VRP, TSP, PDP) with cuOpt — Python API only. Use when the user is building or solving routing in Python.
    10 installs
100. ▌
     Performing Kerberoasting Attack · autohandai-community-skills bundle

     Kerberoasting is a post-exploitation technique that targets service accounts in Active Directory by requesting Kerberos TGS (Ticket Granting Service) tickets for accounts with Service Principal Names
     9 installs