daemon-blockint-tech

@daemon-blockint-tech source repo

211 skills
0 followers
6 hours ago last updated

▌
Solana Dev · daemon-blockint-tech bundle
Use when user asks to "build a Solana dapp", "write an Anchor program", "create a token", "debug Solana errors", "set up wallet connection", "test my Solana program", "deploy to devnet", or "explain Solana concepts" (rent, accounts, PDAs, CPIs, etc.). Also use for quick on-chain lookups via public RPC + curl — "what's the balance of <wallet>", "look up transaction <sig>", "token balance for <account>", "check this address on mainnet/devnet". End-to-end Solana development playbook covering wallet connection, Anchor/Pinocchio programs, Codama client generation, Surfpool/LiteSVM/Mollusk testing, security checklists, and JSON-RPC curl lookups against public clusters. Prefers @solana/kit v7 plugin clients (createClient + .use()), wallet connection via @solana/kit-plugin-wallet + @solana/react, web3.js v3 (Kit internals, RC) as the migration target for legacy codebases, and Surfpool for local networks and integration testing.

0
installs
▌
Compress · daemon-blockint-tech bundle
Compress natural language memory files (CLAUDE.md, todos, preferences) into caveman format to save input tokens. Preserves all technical substance, code, URLs, and structure. Compressed version overwrites the original file. Human-readable backup saved as FILE.original.md. Trigger: /caveman:compress FILEPATH or "compress memory file"

0
installs
▌
Caveman Compress · daemon-blockint-tech bundle
Compress natural language memory files (CLAUDE.md, todos, preferences) into caveman format to save input tokens. Preserves all technical substance, code, URLs, and structure. Compressed version overwrites the original file. Human-readable backup saved as FILE.original.md. Trigger: /caveman:compress FILEPATH or "compress memory file"

0
installs
▌
Raven Zero Day Hunter · daemon-blockint-tech
Run Project Raven's MDASH (Multi-Model Agentic Security Harness) pipeline against a target codebase or runtime. Use when the user says "hunt 0-days", "look for zero-days", "ARES scan", "variant analysis", "memory corruption hunt", "kernel/driver hunt", "smart-contract 0-day", or asks Raven to anticipate kill chains, generate exploit hypotheses, or validate LLM-claimed vulnerabilities. Every finding ends in a tool-oracle (𝒯), classical-ML detector (𝓜), or scored hypothesis (𝓛) — never raw LLM speculation — and ships with D3FEND defensive techniques, ATT&CK offensive context, and real-world exposure scoring.

0
installs
▌
Raven Zero Day Defend · daemon-blockint-tech
Stand up Raven's defensive posture against an in-the-wild 0-day campaign. Use when the user says "defend against `<CVE>` / `<campaign>`", "harden us against this 0-day", "deploy mitigations for the new exploit", "isolate exposure", or asks to compose D3FEND Harden + Isolate + Deceive techniques into an active defensive plan. Every action terminates at a tool oracle (𝒯) or approval-gated mitigation module, never raw LLM speculation, and every recommendation is bound to a real D3FEND technique id from the 271-entry MITRE catalog plus ATT&CK offensive context and exposure scoring. Built for production DevSecOps at enterprise scale.

0
installs
▌
Raven Zero Day Fixing · daemon-blockint-tech
Generate, verify, and apply patches for a confirmed 0-day finding. Use when the user says "fix this 0-day", "patch this CVE", "generate the fix", "virtual-patch this", "rollback unsafe change", "apply remediation", or hands over a confirmed root cause from `raven-zero-day-investigator`. Every patch terminates at a tool oracle (𝒯) — static verifier, test suite, formal check, or restore primitive — never raw LLM speculation, and every fix is tagged with a D3FEND Harden / Restore technique id.

0
installs
▌
Raven Zero Day Detection · daemon-blockint-tech
Run Raven's online 0-day detection stack against live telemetry, files, binaries, or network flows. Use when the user says "detect 0-days", "scan for novel threats", "run anomaly detection", "screen this artifact for unknown malware", "novelty detection", or asks for a continuous monitor against unknown-bad. Every detection terminates at a classical-ML detector (𝓜) or a tool-oracle rule (𝒯) — LLM verdicts alone are never accepted — and every alert ships with a D3FEND Detect-tactic technique id, ATT&CK offensive context, and exposure scoring. Built for production DevSecOps at enterprise scale on private codebases.

0
installs
▌
Devsec Mythos Class · daemon-blockint-tech
Raven — DevSec (Mythos-class)

0
installs
▌
Raven Zero Day Auto Prevent · daemon-blockint-tech
Automatically enforce defensive policy against an in-progress 0-day signal, end-to-end, with strict approval gating. Use when the user says "auto-prevent", "auto-block", "auto-quarantine", "policy-driven response", "stop this 0-day now without me clicking through", or asks Raven to execute the Defend plan automatically when criteria are met. Every automatic action terminates at a tool oracle (𝒯) with mandatory approval-gate verification, references a real D3FEND Isolate / Evict / Harden technique id, and emits a tamper-evident audit trail.

0
installs
▌
Zero Day Investigator · daemon-blockint-tech
Raven — 0-Day Investigator

0
installs
▌
Raven Multi Agent Orchestrator · daemon-blockint-tech
Orchestrate 100+ specialized AI agents across an ensemble of frontier and distilled models to discover, debate, validate, prove, enrich, and triage exploitable bugs end-to-end. Use when the user wants to run the full MDASH pipeline with multi-model ensemble, dynamic agent spawning, or production-scale vulnerability discovery. Every finding terminates at a tool oracle (𝒯), classical-ML detector (𝓜), or scored hypothesis (𝓛), and ships with D3FEND defensive techniques, ATT&CK offensive context, exposure scoring, and DevSecOps routing.

0
installs
▌
Raven Zero Day Threat Patterns · daemon-blockint-tech
Curate, query, and emit Raven's catalog of 0-day threat patterns. Use when the user says "0-day pattern", "exploit pattern library", "threat fingerprint", "variant template", "bug-class taxonomy", "match this finding against known patterns", or asks to extend the YARA / Semgrep / ARES rule packs with a new 0-day archetype. Every pattern record terminates at a tool oracle (𝒯) or a classical-ML detector (𝓜) — never raw LLM speculation — and ships with the CWE plus D3FEND Harden / Detect technique ids it counters.

0
installs
▌
Raven Research Looped Reasoning Eval · daemon-blockint-tech
Scaffold a research-grade experiment that tests whether a Looped / Recurrent-Depth Transformer (RDT) is better than a parameter-matched vanilla transformer at vulnerability discovery, when both are continued-pretrained on a security corpus. Use when the user says "test the looped-transformer hypothesis", "run the OpenMythos RDT experiment", "compare loop count to trial budget", "does inference-time loops help security reasoning", or asks for a reproducible research pipeline around the Mythos architecture hypothesis. The skill scaffolds the experiment — it does NOT make claims about Mythos itself, and it explicitly bins OpenMythos as a community speculative reconstruction, not Anthropic's actual model.

0
installs
▌
Ifrs · daemon-blockint-tech bundle
This skill should be used when the user asks about IFRS, International Financial Reporting Standards, IFRS 15 revenue, IFRS 16 leases, IFRS 9 financial instruments, IFRS 10 consolidation, IAS 36 impairment, IFRS 13 fair value, IFRS disclosure notes, IFRS recognition, first-time adoption IFRS, or IFRS vs GAAP. Guides application and explanation of IFRS financial reporting—recognition and measurement by standard, presentation and disclosure (IAS 1, IFRS 7), fair value hierarchy, going concern and materiality, significant judgments and estimates, first-time adoption (IFRS 1), consolidation and business combinations, local GAAP convergence context, and audit-ready note disclosure structure—not US GAAP-only ASC deep dives (note high-level differences only), tax law advice, legal entity structuring, full external audit execution (auditor), ERP configuration (senior-software-engineer), or management accounting without a reporting-standards lens.

0
installs
▌
Devops · daemon-blockint-tech bundle
Guides DevOps—CI/CD pipelines, GitOps, release management, container delivery, observability, and SRE practices for build/deploy systems. Use when building or fixing pipelines, implementing GitOps, tuning alerts and SLOs, or managing on-call/incidents for delivery infrastructure—not for IDP/golden paths/developer portals (platform-engineer), raw VPC/IaC design (infrastructure-engineer), rollout cutover planning (deployment-strategist), security gates (devsecops), app features (senior-fullstack-developer), multi-team program coordination (technical-program-manager), or incident program design (severity, on-call, postmortems, paging integrations—incident-management-engineer). For Kubernetes cluster bootstrap, Helm releases, add-ons, and cluster-level debugging, use cluster-deployment-engineer. App latency profiling and load testing: performance-engineer. ML safeguard serving: ml-infrastructure-engineer-safeguards. RL training platform jobs: ml-systems-engineer-rl-engineering.

0
installs
▌
Actuary · daemon-blockint-tech bundle
Guides actuarial work for insurance and reinsurance—pricing and rate adequacy, reserving and IBNR, loss development and triangles, mortality/morbidity and lapse assumptions, experience studies and credibility, capital and risk metrics at overview level, product design tradeoffs (life, health, P&C, annuity), and regulatory reporting concepts (NAIC, IFRS 17, Solvency II overview—not legal advice). Use when the user mentions actuary, actuarial, IBNR, loss development, reserve analysis, mortality table, pricing insurance, experience study, IFRS 17, loss ratio, combined ratio, credibility, or asks for assumption documentation and model governance for insurance products—not generic FP&A (financial-analyst), investment banking valuation (comps-analysis, dcf-model), legal policy interpretation (commercial-counsel), clinical trials, software-only implementation (senior-software-engineer), or broad GRC without actuarial models (compliance-engineer).

0
installs
▌
Aml Cft · daemon-blockint-tech bundle
This skill should be used when the user asks about AML/CFT, counter-terrorist financing, CFT, terrorist financing, proliferation financing, PF, targeted financial sanctions, asset freeze, TF typology, charitable NPO due diligence, MVTS, FATF Recommendation 6, or STR terrorist financing. Guides CFT/PF risk—TF typologies (self-funding, charitable fronts, MVTS, trade-based TF), PF and dual-use red flags, TFS and asset-freeze workflows (conceptual), CFT STR/SAR narrative structure, NPO due diligence, correspondent and cross-border TF risks, FATF R6–R8 alignment, sanctions screening integration, CFT training and independent review, exam readiness—not full AML program (KYC, CDD, TM, MLRO) → aml-compliance; sanctions vendor config only; law enforcement tactics; legal determinations. Peers: aml-compliance, compliance-engineer, auditor, commercial-counsel, information-security-engineer.

0
installs
▌
Auditor · daemon-blockint-tech bundle
This skill should be used when the user asks to plan or execute internal audit, IT audit, risk-based audit planning, control testing, audit evidence, workpaper documentation, SOC 2 audit support, SOX ITGC testing, walkthroughs, operating effectiveness, deficiency or finding write-ups, remediation retest, or audit report summaries for management or the audit committee. Guides assurance engagements—scoping, framework mapping (COSO, COBIT concepts, SOC 2 trust criteria), design vs operating effectiveness, sampling, ITGC themes (access, change, operations), vendor audit coordination, and governance reporting—not penetration testing (security-engineer, ai-redteam), building controls from scratch (compliance-engineer), legal interpretation (commercial-counsel), PCAOB financial statement audit detail, or blockchain investigation.

0
installs
▌
Devsecops · daemon-blockint-tech bundle
Guides DevSecOps practices that embed security into software delivery—shift-left scanning, CI/CD security gates, supply-chain integrity, cloud/container runtime controls, threat modeling, and vulnerability management with audit evidence. Use when designing or hardening delivery pipelines, adding SAST/SCA/secrets/IaC/container scans, implementing SBOMs or artifact signing, configuring OIDC and least-privilege CI/CD, writing OPA/Kyverno policies, triaging CVEs, mapping controls to SOC 2/ISO 27001/SSDF, securing GitHub Actions or agentic CI workflows, or running pre-release security reviews—not for general cloud provisioning without a security lens (use infrastructure-engineer), LLM prompt guardrails (prompt-engineer), or cluster Helm/add-on operations without security policy focus (cluster-deployment-engineer), or authorized manual web/API pentest (web-pentester), or binary/firmware RE (reverse-engineer).

0
installs
▌
AI Redteam · daemon-blockint-tech bundle
Guides adversarial testing of AI systems—prompt injection, jailbreaks, tool abuse, data exfiltration, bias and harmful output probes, multi-turn attacks, and automated red-team harnesses for LLM applications. Use when red-teaming chatbots, agents, RAG systems, or copilots before launch, designing safety eval suites, reproducing reported vulnerabilities, or validating mitigations after incidents—not for writing corporate AI policy (ai-risk-governance), building production features (ai-engineer), or general network or app penetration testing (penetration-tester, network-pentester), enterprise adversary simulation or purple-team campaigns (red-team-specialist), authorized web/API OWASP testing (web-pentester), or binary/firmware RE (reverse-engineer). Production safeguard serving and gateways: ml-infrastructure-engineer-safeguards. Safety classifier R&D and benchmarks: ml-research-engineer-safeguards.

0
installs
▌
Bi Analyst · daemon-blockint-tech bundle
Design dashboards, write analytical SQL, define KPIs, and manage stakeholder analytics requirements. Cover chart selection, data storytelling, cohort/funnel analysis, metric definitions, and BI tool patterns (Tableau, Looker, Power BI). Triggers on "build dashboard", "design dashboard", "write analytical SQL", "cohort analysis", "funnel analysis", "define KPI", "define metric", "reporting requirements", "data storytelling", "stakeholder analytics", "retention analysis", or "BI report". For business model canvas, TAM/SAM/SOM, and competitor monetization research, use business-model-researcher—not bi-analyst. For building warehouse marts, dbt models, tests, and lineage—not dashboards—use analytics-data-engineer.

0
installs
▌
Str Report · daemon-blockint-tech bundle
This skill should be used when the user asks to draft or structure STR reports, suspicious transaction reports, SAR, suspicious activity reports, draft STR, STR narrative, file suspicious activity, AML STR, goAML, FinCEN SAR, suspicion narrative, or MLRO report. Guides jurisdiction-agnostic STR/SAR drafting—narrative structure (who, what, when, where, why suspicious), red flags and typologies, transaction aggregation and chronology, subject identification fields, supporting documentation checklists, quality review before filing, and escalation to MLRO/compliance—not TM rule building (aml-compliance), full LE case management, legal filing duty determination (commercial-counsel), or deep blockchain tracing (blockint skills). Complements aml-compliance, aml-cft, auditor, compliance-engineer, and commercial-counsel.

0
installs
▌
AI Engineer · daemon-blockint-tech bundle
Guides production AI engineering—LLM apps, RAG, agents, eval harnesses, observability, cost/latency, and safe deployment. Use when building chatbots, copilots, retrieval, agent workflows, model routing, or LLM API integration—not research synthesis (ai-researcher), AI policy (ai-risk-governance), red-team (ai-redteam), prompt-only work (prompt-engineer), non-AI ADRs (senior-system-architecture), token programs (ai-token-improvement-plan-engineer), solution architecture (applied-ai-architect-commercial-enterprise), skills portfolio (ai-skill-manager), or vertical AI engineering management (engineering-manager-vertical-ai-products). Agent prompt authoring and eval harness design: prompt-engineer-agent-prompts-evals. Safeguard inference gateways and moderation infra: ml-infrastructure-engineer-safeguards. Safeguard classifier research: ml-research-engineer-safeguards.

0
installs
▌
AI Lead Ops · daemon-blockint-tech bundle
Guides AI ops leadership—LLM SRE, model/prompt releases, eval/incidents, cost/capacity, vendors, and cross-functional cadence. Use for AI platform ops, LLM SLAs, incidents, rollout governance, unit economics, red-team/eval gates, and team rituals—not memory (ai-memory-developer), context code (ai-context-engineer), security programs (cybersecurity), token roadmaps (ai-token-improvement-plan-engineer), solution architecture (applied-ai-architect-commercial-enterprise), skills portfolio (ai-skill-manager), or vertical AI product eng management (engineering-manager-vertical-ai-products). Prompt/eval team management and golden-set release policy: engineering-manager-agent-prompts-evals. Safeguard inference platform: ml-infrastructure-engineer-safeguards. Safeguard model research: ml-research-engineer-safeguards.

0
installs
▌
Cti Analyst · daemon-blockint-tech bundle
Guides cyber threat intelligence (CTI)—collection and vetting of intel from OSINT, commercial feeds, and ISACs; threat actor and campaign analysis; IOC/TTP production with MITRE ATT&CK mapping; STIX/TAXII and sharing concepts; strategic, tactical, and operational intel briefs; fusion with hunts and incident response; confidence scoring and source handling. Use for CTI, threat intelligence, threat actor profiling, IOC production, TTP analysis, intel briefs, STIX, ISAC reporting, campaign analysis, APT reporting—not proactive hunt execution (threat-hunter), SOC alert triage (soc-analyst), adversary simulation ops (red-team-specialist), incident command (incident-responder), or legal conclusions.

0
installs
▌
Soc Analyst · daemon-blockint-tech bundle
Guides SOC operations—alert triage, SIEM/EDR investigation, enrichment, playbook execution, false-positive closure, escalation decisions, and detection tuning feedback. Use when working SOC queues, investigating suspicious alerts, correlating events, documenting analyst notes, or deciding escalate vs close—not for declared incident command, timelines, evidence preservation, or regulatory comms (incident-responder), incident program design (incident-management-engineer), binary/firmware RE (reverse-engineer), red team operations (red-team-specialist), or enterprise security strategy (cybersecurity).

0
installs
▌
Vp Of Cloud · daemon-blockint-tech bundle
Guides VP-level cloud program leadership—multi-year cloud strategy and migration/modernization portfolio, landing zone and CCoE operating model at org scale, hyperscaler enterprise agreement and commit governance, hybrid/multi-cloud posture, cloud center of excellence and talent, and board/CFO/CTO cloud narratives. Use when setting cloud direction, prioritizing migration waves, governing EA/MACC and cloud spend envelope, designing federated cloud org model, steering CCoE and standards adoption, preparing executive or board cloud updates, or adjudicating product vs platform vs security cloud trade-offs—not for Terraform/K8s implementation (cloud-engineer, infrastructure-engineer), landing zone technical design (enterprise-cloud-architect, cloud-architect), monthly CUR FinOps (finops-analyst), TCO/NPV modeling (cloud-economist), full infra portfolio including DC capex (vp-of-infrastructure), or GL close (compute-accounting-manager).

0
installs
▌
D3fend Evict · daemon-blockint-tech bundle
Guides cybersecurity eviction and incident response using MITRE D3FEND—credential revocation, account locking, process termination, file removal, and system recovery. Covers containment actions during incidents: killing malicious processes, revoking compromised credentials, removing persistent files, and restoring systems. Use during active incident response, containment, eradication—not for detection (d3fend-detect), hardening (d3fend-harden), or forensic investigation (incident-management-engineer).

0
installs
▌
D3fend Model · daemon-blockint-tech bundle
Guides cybersecurity asset modeling, inventory, and vulnerability assessment using MITRE D3FEND. Covers asset inventory (hardware, software, network, data, containers), network mapping, vulnerability enumeration, dependency mapping, and operational risk assessment. Use when building CMDBs, running asset discovery, mapping network topology, assessing vulnerabilities, or modeling organizational cyber posture—not for hardening controls (d3fend-harden), detection engineering (d3fend-detect), or incident response (d3fend-evict).

0
installs
▌
Data Manager · daemon-blockint-tech bundle
Manage data programs, governance operations, and data reliability. Cover data roadmaps, stakeholder coordination, metadata stewardship, lifecycle management, monitoring, incident response, capacity planning, and SLA frameworks. Triggers on "manage data team", "data roadmap", "governance review", "data incident", "SLA framework", "data ops", "stewardship", "data product delivery", or "data KPIs". Human annotation/labeling platform PM: product-management-human-data-platform.

0
installs
▌
Edi Engineer · daemon-blockint-tech bundle
Guides design, implementation, and operation of B2B electronic data interchange—X12 and EDIFACT, transaction mapping (850/855/856/810/997, ORDERS/DESADV/INVOIC/APERAK), canonical-to-segment translation, partner implementation guides, syntax and SNIP validation, functional acks and exceptions, transport (AS2, SFTP, VAN), healthcare variants (834/835/837) without PHI in outputs, certification testing, production monitoring, idempotency and reconciliation. Use when the user mentions EDI engineer, electronic data interchange, X12, EDIFACT, 850 purchase order, 856 ASN, 810 invoice, 997 acknowledgment, EDI mapping, AS2, partner onboarding, implementation guide, EDI validation, or VAN—not generic API integration without EDI (senior-software-engineer), WMS warehouse workflows (wms-developer), supply chain strategy without EDI build (supply-chain-manager), healthcare compliance program only (compliance-engineer), or OR routing and solver math (operations-research-algorithm-developer).

0
installs
▌
Sdk Engineer · daemon-blockint-tech bundle
Designs, builds, and maintains client SDKs for HTTP/REST, GraphQL, gRPC, and RPC-style APIs— OpenAPI-first contract alignment, resource modeling, authentication (API keys, OAuth, signing), retries/timeouts/idempotency, pagination and streaming, error taxonomy, versioning and deprecation, multi-language packaging and naming, developer experience (quickstarts, examples), and SDK testing (contract and integration) with documentation aligned to API reference. Use when the user says SDK engineer, client SDK, build an SDK, API client library, OpenAPI SDK, SDK design, SDK versioning, retry policy SDK, pagination client, SDK authentication, or developer SDK—not backend API design only (api-development), end-user app UI (senior-frontend-software-engineer), generic integration platform patterns (platform-engineer), technical writing without SDK implementation (tech-writer-researcher), or pre-flight architecture go/no-go without SDK work (build-validator).

0
installs
▌
Storytelling · daemon-blockint-tech bundle
Guides organizational and business storytelling—narrative structure (setup, tension, resolution), audience-tailored stories for executives, customers, boards, and teams, honest data and metrics framing, product and strategy narratives, incident and postmortem storytelling, and actuarial or insurance risk narratives for non-technical audiences. Covers story spine, key messages, and visual or slide narrative outlines. Use when the user says "tell the story", "storytelling", "narrative for executives", "data story", "board presentation narrative", "explain with a story", "story arc", "key message", "compelling narrative", "pitch story", or "incident story"—not cross-department reframing only (cross-department-translation), company-wide comms cadence and crisis wording packs (communication-lead), long-form creative fiction or screenwriting, brand copy without strategy context, or technical documentation and API reference (tech-writer-researcher).

0
installs
▌
AI Researcher · daemon-blockint-tech bundle
Guides AI research work—literature reviews, hypothesis formation, experiment design, benchmarking, reproducibility, and synthesis of papers and empirical results for technical decisions. Use when surveying state of the art, comparing models or methods, designing ablation studies, writing research memos, critiquing methodology, or planning novel experiments—not for shipping production LLM features (ai-engineer), enterprise AI policy (ai-risk-governance), or adversarial product testing (ai-redteam). Token efficiency experiments and tokens-to-success benchmarks: research-engineer-scientist-tokens. Safety classifier and harm-benchmark research: ml-research-engineer-safeguards. RL training systems engineering: ml-systems-engineer-rl-engineering.

0
installs
▌
Cicd Engineer · daemon-blockint-tech bundle
Guides CI/CD for agent skills repositories and skill packages—pipeline design (build, test, validate, package), GitHub Actions for PR checks and release promotion, environment gates, secrets hygiene (no secrets in repo), skill-creator integration (quick_validate.py, package_skill.py), .skill artifact strategy, rollback, and operational runbooks for skill releases. Use when the user mentions CI/CD, CI/CD engineer, pipeline design, GitHub Actions, skill validation CI, package skills, release pipeline, deploy skills, PR checks, continuous integration, or skill release workflow—not application-only CI without skill packaging (devops), pre-flight plan go/no-go (build-validator), IDP or golden paths (platform-engineer), org-wide SLO and error-budget programs without pipeline ownership (site-reliability-engineer), or portfolio catalog governance without pipeline YAML (ai-skill-manager).

0
installs
▌
Code Security · daemon-blockint-tech bundle
Guides secure coding and security-focused code review across languages and infrastructure—OWASP-oriented vulnerability patterns (injection, XSS, auth, crypto, deserialization, SSRF, XXE), secrets handling, and IaC security (Terraform, Kubernetes, Docker, GitHub Actions). Use when writing or reviewing code that handles user input, authentication, files, databases, network requests, cryptography, or infrastructure config—or when the user asks to check for SQL injection, XSS, SSRF, hardcoded secrets, OWASP issues, Terraform security, or GitHub Actions security. Not for authorized penetration test engagements (ai-redteam, cybersecurity), compliance program mapping (compliance-engineer), YARA/malware rules (yara-rule-authoring), or CI pipeline setup only (devsecops).

0
installs
▌
Cybersecurity · daemon-blockint-tech bundle
Guides enterprise cybersecurity across security architecture, control design, vulnerability and threat management, incident response, identity security, and GRC alignment (SOC 2, ISO 27001, NIST CSF). Use when defining security strategy, assessing risk, designing defense-in-depth, running security incidents, scoping penetration tests, writing security policies, or high-level GRC strategy—not for hands-on audit evidence automation (compliance-engineer), GRC program/audit prep (compliance-specialist), embedding scans in CI/CD (devsecops), provisioning cloud networks (infrastructure-engineer), or LLM or enterprise red team (ai-redteam, red-team-specialist), binary RE (reverse-engineer), web/API pentest (web-pentester), or on-call/SEV program (incident-management-engineer).

0
installs
▌
D3fend Detect · daemon-blockint-tech bundle
Guides cybersecurity detection engineering using MITRE D3FEND—file analysis, identifier reputation, network traffic analysis, physical access monitoring, and platform monitoring. Covers dynamic/emulated analysis, traffic signature detection, behavior analytics, and integrity monitoring. Use when building detection rules, analyzing malware, monitoring networks, or designing SOC workflows—not for hardening (d3fend-harden), isolation (d3fend-isolate), or deception (d3fend-deceive).

0
installs
▌
D3fend Harden · daemon-blockint-tech bundle
Guides cybersecurity hardening controls using MITRE D3FEND—authentication, application hardening, credential management, message integrity, platform security, and source code defenses. Covers MFA, certificate pinning, control flow integrity, encryption, input validation, and secure configuration. Use when hardening systems, configuring auth, implementing encryption, or reviewing code security—not for detection rules (d3fend-detect), network segmentation (d3fend-isolate), or incident response (d3fend-evict).

0
installs
▌
Threat Hunter · daemon-blockint-tech bundle
Guides proactive threat hunting for advanced SOC—hypothesis-driven hunt campaigns, advanced SIEM/query workflows, baseline and anomaly analysis, MITRE ATT&CK–aligned techniques, threat intel fusion, detection engineering feedback, and hunt reporting with IR handoff. Use for threat hunting, proactive hunt, hypothesis-driven detection, advanced SOC, hunt campaign, detection engineering, MITRE ATT&CK hunt, anomaly hunting—not routine SOC alert triage (soc-analyst), declared incident command (incident-responder), adversary simulation campaigns (red-team-specialist), disk forensics acquisition (digital-forensics-analyst), authorized pentest (penetration-tester), or binary RE lab work (reverse-engineer).

0
installs
▌
Web Pentester · daemon-blockint-tech bundle
Guides authorized web application and API security testing—scoping and rules of engagement, OWASP-oriented testing (injection, auth/session, access control, SSRF, XSS, CSRF, business logic), REST and GraphQL API security, Burp/ZAP-style manual methodology without requiring commercial tools, evidence and remediation reporting, and retest validation. Emphasizes written authorization and safe boundaries. Use for web pentest, OWASP web assessment, web app security test, API pentest, Burp-style testing, XSS or SQL injection testing when authorized—not network/AD/infra pentest (network-pentester), general multi-domain pentest orchestration (penetration-tester), LLM or agent adversarial testing (ai-redteam), enterprise adversary simulation or purple-team campaigns (red-team-specialist), SOC alert triage (soc-analyst), incident command (incident-responder), or CI/CD security gates and SBOM programs (devsecops).

0
installs
▌
Wms Developer · daemon-blockint-tech bundle
Guides design, build, customization, and integration of warehouse management systems—receiving, putaway, inventory, allocation, picking (wave/batch/zone), packing, shipping, cycle counts; slotting; lot/serial/expiry; RF/mobile and barcode; WMS–ERP–TMS–OMS integration; EDI/API; WCS/automation handoffs; peak scaling; multi-warehouse and 3PL models. Use when the user mentions WMS developer, warehouse management system, pick path, wave planning, putaway, cycle count, WMS integration, RF scanning, slotting, 3PL WMS, fulfillment system, inventory allocation, or WMS customization—not supply chain strategy without WMS (supply-chain-manager), generic ERP consulting, logistics routing without WMS, OT/ICS plant (scada-ics-cyber-security-specialist, control-software-developer), analytics warehouse marts (data-warehouse-engineer), or generic app/platform work without warehouse domain (senior-software-engineer, platform-engineer).

0
installs
▌
Aml Compliance · daemon-blockint-tech bundle
This skill should be used when the user asks about AML compliance, anti-money laundering, KYC, CDD, EDD, PEP screening, sanctions screening, transaction monitoring, SAR, STR, suspicious activity, FATF, BSA, financial crime compliance, travel rule, AML risk assessment, or MLRO. Guides risk-based AML/CFT programs, alert triage, SAR narrative structure (not legal filing), governance, crypto AML, and exam readiness—not ISO/SOC only (compliance-engineer), cloud attestations (cloud-compliance-specialist), contracts (commercial-counsel), IT audit workpapers (auditor), FinOps (finops-analyst), SIEM build (information-security-engineer), or blockchain LE investigations (blockint skills).

0
installs
▌
CI CD Engineer · daemon-blockint-tech bundle
Guides CI/CD engineering—pipeline design, build/test/deploy stages, branch and environment strategy, artifact promotion, workflow-level deploy patterns (rolling, blue-green, canary), CI secrets, security gates, flaky tests, monorepo/polyrepo layout, DORA metrics, and rollback/release coordination with platform/SRE. Use when designing or fixing delivery pipelines, GitHub Actions, GitLab CI, Jenkins, release automation, deployment gates, or delivery metrics—not app implementation (senior-software-engineer), K8s cluster internals only (cloud-engineer), SRE on-call/SLO programs (site-reliability-engineer), security policy only (information-security-engineer), or IDP/golden paths (platform-engineer). Triggers: CI/CD, continuous integration, continuous delivery, pipeline design, GitHub Actions, deployment pipeline, build and deploy, release pipeline, DORA metrics, canary deployment, pipeline gates.

0
installs
▌
Cloud Engineer · daemon-blockint-tech bundle
Guides cloud engineering on AWS, GCP, and Azure—landing zones and account structure, VPC/VNet networking, compute and autoscaling, object/block storage, managed databases and caches, serverless and messaging, DNS/CDN, cloud IAM and workload identity, multi-AZ/region reliability, backups and DR, tagging, cost controls, and service-level troubleshooting. Use when designing or operating cloud resources, wiring private connectivity, rightsizing spend, or debugging control-plane and managed-service failures—not for CI/CD and GitOps (devops), Kubernetes cluster bootstrap and Helm (cluster-deployment-engineer), internal developer platforms (platform-engineer), release cutover strategy (deployment-strategist), security program and IdP/KMS ownership (information-security-engineer), enterprise integration ADRs (senior-system-architecture), or physical data center facilities (data-center-design-execution-lead). Reusable Terraform module libraries: infrastructure-engineer.

0
installs
▌
D3fend Deceive · daemon-blockint-tech bundle
Guides cybersecurity deception operations using MITRE D3FEND—honeynets, decoy objects, decoy personas, and decoy credentials. Covers honeypot deployment, decoy file planting, credential baiting, and deception environment design. Use when deploying honeypots, planting decoy data, baiting credentials, or designing deception programs—not for detection (d3fend-detect), hardening (d3fend-harden), or isolation (d3fend-isolate).

0
installs
▌
D3fend Isolate · daemon-blockint-tech bundle
Guides cybersecurity isolation controls using MITRE D3FEND—access mediation, content filtering, execution isolation, and network segmentation. Covers access policies, permissions, content validation, process isolation, allowlisting, and traffic filtering. Use when segmenting networks, restricting access, filtering content, or isolating execution—not for detection (d3fend-detect), hardening (d3fend-harden), or deception (d3fend-deceive).

0
installs
▌
D3fend Restore · daemon-blockint-tech bundle
Guides cybersecurity restoration using MITRE D3FEND—recovering access, objects, configurations, and systems after incidents. Covers credential reissuance, account unlocking, file restoration, database recovery, configuration rebuild, and software reinstallation. Use after incident containment for business continuity, disaster recovery, and return to normal operations—not for incident containment (d3fend-evict), detection (d3fend-detect), or hardening (d3fend-harden).

0
installs
▌
Data Architect · daemon-blockint-tech bundle
Design data architecture at enterprise and solution levels. Cover data mesh, lakehouse, governance, domain-driven design, conceptual/logical/physical data modeling, platform selection, and compliance frameworks. Produce ADRs, data model diagrams, platform comparison matrices, and governance policy templates. Triggers on "design data platform", "choose data warehouse", "data mesh", "lakehouse architecture", "data governance", "data modeling", "platform selection", "data architecture decision", "compliance framework", or "data strategy". For applied AI solution architecture (RAG data plane, embeddings, vector stores in commercial or enterprise products), use applied-ai-architect-commercial-enterprise. For dbt analytics layers and mart delivery, use analytics-data-engineer—not data-architect.

0
installs
▌
Data Scientist · daemon-blockint-tech bundle
Execute data science workflows from exploration to production. Apply machine learning modeling, statistical analysis, A/B testing, causal inference, feature engineering, model evaluation, and MLOps patterns. Triggers on "build predictive model", "design A/B test", "feature engineering", "model evaluation", "causal inference", "productionize ML", "choose ML algorithm", "statistical analysis", "model monitoring", or "data science workflow". Distributed RL training systems: ml-systems-engineer-rl-engineering.

0
installs
▌
Data Scrubbing · daemon-blockint-tech bundle
Guides cleaning and standardizing tabular datasets before analysis, modeling, or reporting—profiling, quality rules, missing values, duplicates, outliers, type coercion, encoding fixes, record linkage, deduplication, high-level PII handling (not legal advice), actuarial/insurance field scrubbing, reproducible scrub pipelines, validation checks, and sign-off. Distinct from warehouse ETL or statistical modeling. Use when the user asks for "data scrubbing", "clean this dataset", "scrub the data", "data cleaning", "dedupe records", "handle missing values", "outlier treatment", "standardize columns", "data quality rules", "profile this table", or "prepare data for modeling". Not warehouse pipelines (data-warehouse-engineer), ML modeling (data-scientist, actuary), privacy programs (compliance-engineer), FinOps only (finops-analyst), or assumption governance (assumption-setting).

0
installs
▌
Finops Analyst · daemon-blockint-tech bundle
Guides FinOps analysis on AWS, GCP, and Azure—cost visibility and allocation, tagging and showback/chargeback models, rightsizing and waste removal, RI/Savings Plan/CUD recommendations, budgets and forecasts, anomaly detection, unit economics (cost per service/customer), and FinOps cadence with engineering accountability. Use when optimizing cloud spend, analyzing CUR/billing exports, building cost dashboards, explaining bill spikes, or improving allocation—not for GL mapping, capex, depreciation, or month-end ledger close (compute-accounting-manager), enterprise EA negotiation (enterprise-cloud-architect), hands-on resource provisioning (cloud-engineer), or hardware supply efficiency (data-center-compute-supply-efficiency).

0
installs
▌
Iam Specialist · daemon-blockint-tech bundle
Guides identity and access management—workforce and machine identity lifecycle, RBAC/ABAC/PBAC entitlement design, access reviews and recertification, SSO/SAML/OIDC federation, privileged access (PAM/JIT), cloud IAM least privilege (AWS/GCP/Azure concepts), service accounts and secrets hygiene, and separation of duties. Use for IAM, identity governance, access review, RBAC, least privilege, SSO federation, PAM, privileged access, cloud IAM policy, service account, or SoD—not full cloud landing zone architecture (enterprise-cloud-architect), broad cloud security controls (cloud-security-engineer), day-2 break-glass ticket execution only (cloud-system-administrator), pentest (penetration-tester), or legal/HR policy drafting only.

0
installs
▌
Talent Sourcer · daemon-blockint-tech bundle
This skill should be used when the user asks to talent sourcer, source candidates, define a sourcing strategy, run boolean search or X-ray search, conduct LinkedIn sourcing, find passive candidates, build a talent map or talent pool, build a recruiting pipeline, draft recruiting outreach, produce a candidate list, or follow a sourcer playbook for proactive recruiting. Guides role intake and search strategy, platform sourcing (LinkedIn, GitHub, communities), talent mapping and market scans, personalized outreach at scale, pipeline hygiene and CRM notes, diversity sourcing, competitor talent pool analysis, and handoff to recruiters—not interview loop design (interview-prep, interview-system-designer), offer letters (draft-offer), comp bands (comp-analysis), HR policy or employee relations (hr-business-partner), generic B2B prospecting (lead-researcher, account-research, enrich-lead unless explicitly recruiting), employer branding campaigns (cmo-advisor), or end-to-end recruiting ops (talent-acquisition).

0
installs
▌
Build Validator · daemon-blockint-tech
Validate plans, designs, and implementations before execution to prevent costly mistakes. Cover architecture review, security audit, scalability assessment, cost analysis, compliance check, and risk identification. Produce go/no-go decisions with specific remediation steps. Triggers on "review this plan", "validate architecture", "check for mistakes", "is this production ready", "audit this design", "what could go wrong", "pre-flight check", "build review", "quality gate", "risk assessment", "cost estimate", or "compliance check".

0
installs
▌
Cloud Architect · daemon-blockint-tech bundle
Guides cloud solution architecture—Well-Architected alignment, landing zone and org design, workload placement and service selection, network and security segmentation, hybrid and multi-region patterns, migration roadmaps (7Rs), cost architecture, and cloud ADRs with diagrams for stakeholder review. Use when choosing cloud platforms and reference architectures, designing account guardrails, comparing managed vs self-managed services, planning cloud migration or exit, or running cloud architecture review—not for hands-on resource configuration (cloud-engineer), Terraform module implementation (infrastructure-engineer), CI/CD delivery (devops), K8s cluster ops (cluster-deployment-engineer), IDP product strategy (platform-engineer), enterprise-wide non-cloud system ADRs (senior-system-architecture), or applied AI solution design (applied-ai-architect-commercial-enterprise).

0
installs
▌
Cloud Economist · daemon-blockint-tech bundle
Guides cloud economics—TCO and NPV for cloud vs on-prem or SaaS, pricing-model trade-offs (on-demand, commitments, spot), commitment portfolio economics, marginal cost and elasticity, regional and service cost comparisons, migration and architecture option business cases, and CFO-ready economic narratives tied to growth drivers. Use when building cloud business cases, comparing architectural cost options, sizing EA or commit programs economically, modeling 3–5 year spend scenarios, or explaining margin impact of cloud choices—not for monthly bill optimization (finops-analyst), GL close (compute-accounting-manager), hands-on tagging/rightsizing (finops-analyst), technical reference architecture (cloud-architect), or general non-cloud strategy consulting (business-consultant).

0
installs
▌
Country Manager · daemon-blockint-tech bundle
This skill should be used when the user asks about country manager, managing director, in-country GM, market entry, localize the business, country P&L, country business plan, matrix organization, local leadership team, government relations, country operations, territory plan, or subsidiary management. Guides in-country or regional unit leadership: market entry and localization, country P&L and business plan, local org and matrix to HQ, regulatory coordination (not legal advice), partnerships and channels, government and stakeholder relations, in-market competition, local crisis and reputation, hiring and culture localization, territory KPIs and QBRs—not global strategy only (enterprise-strategist, ceo-advisor), expansion without execution (intl-expansion), immigration law, tax structuring (cfo-advisor), product roadmap (cpo-advisor), or engineering delivery (cto-advisor).

0
installs
▌
Prompt Engineer · daemon-blockint-tech bundle
Design, test, and optimize prompts for LLM interactions. Cover prompt patterns (few-shot, chain-of-thought, ReAct), system prompt design, output formatting, prompt evaluation, and prompt optimization techniques. Triggers on "write prompt", "optimize prompt", "design system prompt", "few-shot examples", "chain of thought", "prompt evaluation", "LLM output formatting", "prompt testing", or "prompt patterns".

0
installs
▌
Sd Wan Engineer · daemon-blockint-tech bundle
Design, deploy, and operate SD-WAN—overlay WAN (hub-spoke, mesh, regional hubs), underlay overlay (MPLS, broadband, LTE/5G), path selection, application-aware routing, SASE, zero trust WAN, branch connectivity, orchestration templates, NGFW/SWG/ZTNA insertion, HA, and brownfield SD-WAN migration; vendor-agnostic (Viptela, VeloCloud, Prisma SD-WAN). This skill should be used when the user asks about SD-WAN, software-defined WAN, SDWAN engineer, overlay WAN, path selection, application-aware routing, hub-spoke SD-WAN, SASE, zero trust WAN, branch connectivity, underlay overlay, VeloCloud, Viptela, Prisma SD-WAN, WAN optimization, or brownfield SD-WAN migration—not carrier BGP/MPLS backbone-only (network-backbone-architect), cloud VPC design (cloud-architect, cloud-engineer), enterprise APIs (enterprise-integration-api-developer), endpoint security program only (information-security-engineer), or physical DC cabling (infrastructure-engineer).

0
installs
▌
AI Skill Manager · daemon-blockint-tech bundle
Guides management of an enterprise Agent Skills portfolio—inventory and catalog hygiene, naming and structure standards, overlap and routing deduplication, cross-linking between skills, validation and packaging at scale, lifecycle (split, merge, deprecate), and quality/security review before distribution. Use when curating a skills repo, auditing skill quality, fixing trigger overlap, maintaining a skill catalog, batch-validating or packaging skills, or governing who may publish skills—not for authoring a single new skill from scratch (follow skill-creator), implementing agents or RAG (ai-engineer), production LLM ops (ai-lead-ops), or writing prompts inside one skill (prompt-engineer).

0
installs
▌
Business Analyst · daemon-blockint-tech bundle
Run a structured business analysis workflow: requirements elicitation with stakeholder interviews and MoSCoW prioritization, as-is/to-be process mapping with BPMN notation, data-driven analysis (CBA, SWOT, root cause), and production-ready documentation (BRD, FRD, user stories with INVEST acceptance criteria). Triggers on "gather requirements", "write user stories", "map business process", "BRD", "FRD", "gap analysis", "cost-benefit analysis", "facilitate workshop", "business requirements", "process mapping", "as-is to-be", "stakeholder interview", or "business analyst". For management consulting (issue trees, steerCo business cases, operating model), use business-consultant—not business-analyst. For business model canvas, market sizing, and unit economics research, use business-model-researcher. Human data / labeling platform PRDs: product-management-human-data-platform. Monetization PRDs and packaging: product-management-monetization.

0
installs
▌
Markup Detection · daemon-blockint-tech bundle
This skill should be used when the user asks for markup detection, detect manipulation, image tampering, deepfake detection, document integrity, hidden markup, metadata forensics, EXIF analysis, content authenticity, synthetic media, altered image, C2PA, or provenance verification across documents, images, and video. Guides workflow-level assessment of visual tampering indicators (splicing, cloning, inconsistent lighting or shadows, compression artifacts), metadata and provenance checks (EXIF, hashes, source chain), document revision and hidden markup (tracked changes, comments, invisible text), synthetic-media and deepfake red flags, watermarking and content-credentials concepts, and structured reporting with confidence levels and explicit limitations—not training detection models (ml-research-engineer-safeguards), cryptographic watermark design (cryptographer-specialist), full digital forensics lab attribution or legal conclusions, or blockchain-only tracing unless the user scopes on-chain context.

0
installs
▌
Mission Critical · daemon-blockint-tech bundle
Guides mission-critical system framing—tiering (mission-critical vs business-critical vs important), availability/integrity/continuity objectives, dependency and blast-radius mapping, architecture patterns (active-active, geo-redundancy, deterministic behavior), change/release governance, monitoring and escalation by criticality, and generic regulatory/contractual drivers (finance, healthcare, public safety, defense industrial base). Use when classifying criticality, setting RTO/RPO/MTPD and integrity targets, designing redundant architectures, mapping failure domains, governing Tier 0/1 releases, or ops escalation—not SRE error budgets only (site-reliability-engineer), HRO/prevention culture only (zero-tolerance-for-failure), incident command (incident-responder), recovery engineering only (cyber-resilience-engineer), enterprise security architecture only (enterprise-security-architect), ADRs without tiering (senior-system-architecture), or classified ATO only (classified-cyber-security-senior-manager).

0
installs
▌
Product Designer · daemon-blockint-tech bundle
Guides product design—problem framing, discovery synthesis, user journeys and flows, wireframes, interaction specs, usability evaluation, and engineering handoff for digital products (web and mobile). Use when designing a new feature UX, mapping flows, creating wireframe or spec narratives, running heuristic reviews, defining states and edge cases for UI, or preparing design-ready acceptance criteria—not for writing BRDs or business process docs (business-analyst), front-end implementation (senior-frontend-software-engineer, fullstack-software-engineer), or production code review (senior-software-engineer). For UI implementation from specs (tokens, states, Storybook), use ui-software-engineer. For interaction specs, coded prototypes, and in-product UX audits, use ux-software-engineer. For human data / labeling platform PM (tasks, quality, workforce), use product-management-human-data-platform. For business model canvas, pricing research, and unit economics, use business-model-researcher.

0
installs
▌
Reverse Engineer · daemon-blockint-tech bundle
Guides authorized reverse engineering—static and dynamic binary analysis, disassembly and decompilation workflows, protocol and file-format reversing, defensive malware analysis (behavior, IOCs, YARA ideas), firmware RE, patch diffing, and vulnerability research documentation. Emphasizes written authorization, export-control awareness, and no assistance bypassing protections on unowned or unlicensed software. Use for reverse engineering, disassemble, decompile, Ghidra/IDA-style workflows, binary analysis, malware analysis for defense, firmware RE, patch analysis—not disk imaging forensics (digital-forensics-analyst), live incident command (incident-responder), SOC alert triage (soc-analyst), authorized pentest exploitation (penetration-tester), LLM red team (ai-redteam), or CI pipeline gates (devsecops).

0
installs
▌
Sla Slo Engineer · daemon-blockint-tech bundle
Guides SLA and SLO engineering—SLI selection and measurement specs, SLO targets and error budgets, multi-window burn-rate alerting policies, customer-facing SLA vs internal SLO alignment, criticality tiering, reporting and review cadences, and capacity implications of service levels. Use when defining SLIs, setting SLO targets, designing error-budget policy, burn-rate alerts, availability or latency SLOs, SLO reviews, or documenting SLO specs for engineering—not on-call or incident command (site-reliability-engineer, incident-management-engineer), contractual legal SLA negotiation (commercial-counsel), full observability stack implementation (platform-engineer, devops), or application performance tuning only (performance-engineer). Triggers: SLA, SLO, SLI, service level objective, error budget, burn rate alert, availability target, latency SLO, define SLOs, SLO review, customer SLA.

0
installs
▌
Support Engineer · daemon-blockint-tech bundle
Guides technical support engineering—customer ticket investigation, reproduction, log and API analysis, root-cause isolation, workaround communication, engineering escalation with evidence, and knowledge-base fixes for product bugs and integration issues. Use when debugging a customer-reported issue, writing a repro for engineering, analyzing API errors, drafting technical replies, or improving support runbooks—not for CS program design, renewals, or billing ops (customer-ops-specialist), production incident command (incident-management-engineer), building product features (fullstack-software-engineer), or company-wide crisis statements and launch announcements (communication-lead), or exec/VIP and community escalation program design (community-executive-escalations-program-manager). Product how-to, macros, and ticket triage without deep debugging: product-support-specialist.

0
installs
▌
Actuarial Analyst · daemon-blockint-tech bundle
Guides hands-on actuarial analyst work for insurance, reinsurance, and pension—reserving and loss development (IBNR, triangles, chain-ladder diagnostics), pricing and rate indication support (experience, trend, credibility, basic GLM at spec level), data validation and model I/O review, reporting packs and workpapers, assumption application under actuary direction, and statutory tie-outs at analyst depth. Use when the user mentions actuarial analyst, loss development, IBNR, reserve analysis, rate indication, pricing support, actuarial workpaper, triangle analysis, credibility, experience study, actuarial reporting, or reserve roll-forward—not actuary sign-off (actuary), consulting engagements (actuarial-consulting), assumption governance (assumption-setting), ALM strategy (asset-liability-management), P&C legal depth (property-casualty-insurance), charts only (data-visualization), or ETL-only pipelines (data-scrubbing).

0
installs
▌
Associate Actuary · daemon-blockint-tech bundle
Guides associate-level actuarial practice for ASA (SOA, US), ASAI (IAI, India), and analogous associate credentials—role boundaries vs analyst and fellow/chief actuary; credential pathways (high-level); professional standards and confidentiality; signing limits and review chains; leading reserving/pricing workstreams, methodology memos, and peer review; stakeholder communication with management, auditors, and regulators at associate depth; CE/professionalism; career progression; brief cross-border recognition. Use when the user mentions associate actuary, ASA, ASAI, associate of the society of actuaries, actuarial credential, signing authority actuary, professional standards actuary, peer review actuarial, fellowship path, continuing education actuary, or actuarial memo review—not triangle/Excel work (actuarial-analyst), appointed actuary or enterprise risk (actuary), consulting engagements (actuarial-consulting), assumption governance (assumption-setting), or exam tutoring.

0
installs
▌
Corporate Counsel · daemon-blockint-tech bundle
Guides corporate legal support—entity structure, board and stockholder governance, corporate resolutions and minutes, equity and cap table mechanics, corporate policies, intercompany arrangements, and corporate closing checklists for financings or M&A. Use when drafting board materials, reviewing governance documents, entity formation or subsidiary setup, stockholder consents, option plan mechanics, D&O considerations at checklist level, or corporate approval packages—not for B2B MSAs and vendor/customer redlines (commercial-counsel), SOC/ISO evidence (compliance-engineer), tax/accounting treatment (senior-revenue-accountant), or employee HRIS and lifecycle operations (people-operations-specialist). For live deal execution—diligence coordination, closing matrix, signing, funds flow—use transaction-manager. For deal thesis, valuation, and negotiation mandate, use transaction-principal. Output is drafting assistance; human counsel must approve binding actions.

0
installs
▌
Extreme Lifecycle · daemon-blockint-tech bundle
Guides end-to-end lifecycle governance for mission-critical, high-assurance, or zero-failure- tolerance systems—concept through retirement: phases, gates, evidence, traceability, obsolescence, tech refresh, configuration baselines, NDA-safe regulated/classified patterns, assurance/DevSecOps/ ATO interfaces, decommissioning and data disposition. Use for extreme lifecycle, system lifecycle, mission-critical lifecycle, lifecycle gates, sustainment, tech refresh, obsolescence management, decommissioning, configuration baseline, lifecycle evidence, end-to-end lifecycle, or retire a system—not TPM-only (technical-program-manager), HRO-only (zero-tolerance-for-failure), tiering-only (mission-critical), classified pipeline-only (classified-software-devsecops-engineer), formal proofs (software-assurance-formal-methods-specialist), compliance-only (compliance-engineer), CI-only (build-validator), infra portfolio-only (vp-of-infrastructure).

0
installs
▌
Network Pentester · daemon-blockint-tech bundle
Guides authorized network and infrastructure penetration testing—scoping and rules of engagement, external and internal network assessments, host and service enumeration, vulnerability validation on network services, Active Directory attack paths within scope, lateral movement documentation, segmentation testing, wireless assessment methodology (high level), evidence and remediation reporting, and retest. Emphasizes written authorization and safe boundaries. Use for network pentest, internal pentest, external pentest, AD assessment, lateral movement testing, port scan methodology when authorized—not OWASP web/API testing (web-pentester), cross-domain pentest orchestration when network is one workstream (penetration-tester), LLM/agent adversarial testing (ai-redteam), enterprise adversary simulation or purple-team campaigns (red-team-specialist), SOC triage (soc-analyst), incident command (incident-responder), or cloud guardrail implementation (cloud-security-engineer).

0
installs
▌
Ontology Engineer · daemon-blockint-tech bundle
Design ontologies and build knowledge graphs. Cover OWL/RDF ontologies, SKOS taxonomies, SPARQL querying, knowledge graph construction, semantic reasoning, and linked data patterns. Triggers on "build ontology", "design knowledge graph", "create taxonomy", "SPARQL query", "semantic reasoning", "linked data", "RDF modeling", "ontology alignment", or "knowledge representation".

0
installs
▌
Platform Engineer · daemon-blockint-tech bundle
Guides platform engineering—internal developer platforms (IDP), golden paths, self-service abstractions, developer portals, paved-road templates, multi-tenant Kubernetes platforms, and platform-as-product practices (roadmap, adoption, platform SLOs). Use when designing or operating a platform for engineering teams, building service scaffolds, standardizing deploy/runtime patterns, integrating Backstage or similar portals, defining platform APIs and contracts, or measuring developer experience—not for one-off VPC or network design (infrastructure-engineer), per-app CI YAML only (devops), release cutover planning (deployment-strategist), security control implementation (information-security-engineer), or enterprise-wide system integration ADRs (senior-system-architecture). For hands-on cluster add-ons, Helm, and namespace layout on shared clusters, use cluster-deployment-engineer.

0
installs
▌
AI Risk Governance · daemon-blockint-tech bundle
Guides AI risk management and governance—use-case risk assessment, model/system documentation, policies and guardrails, human oversight, third-party model/vendor review, and mapping to frameworks (NIST AI RMF, ISO 42001, EU AI Act concepts, internal AI policy). Use when classifying AI use cases, drafting AI acceptable-use policies, building risk registers, preparing model cards or DPIAs for AI, reviewing vendor LLMs, or aligning product teams with compliance—not for implementing RAG/agents (ai-engineer), running jailbreak tests (ai-redteam), or SOC 2/ISO evidence automation and technical control mapping (compliance-engineer), or general SOC 2 IT controls without AI scope (cybersecurity). For AI solution architecture in commercial or enterprise deployments, use applied-ai-architect-commercial-enterprise. For agent skills catalog standards and security review before publish, use ai-skill-manager. Safeguard infra/research: ml-infrastructure-engineer-safeguards, ml-research-engineer-safeguards.

0
installs
▌
Assumption Setting · daemon-blockint-tech bundle
Guides defining, documenting, and governing actuarial and risk assumptions for insurance and related models—mortality, morbidity, lapse, discount rates, inflation, loss development, expense, cat, credit; categories and sources; selection methodology and judgment; sensitivity and scenarios; governance and change control; pricing vs reserving vs capital packs; audit trail—not legal or accounting sign-off. Use for assumption setting, set assumptions, mortality/lapse/discount rate/ loss development assumption, assumption governance, assumption documentation, assumption review, change assumptions—not full model build (actuary), consulting SOW (actuarial-consulting), LOB education (property-casualty-insurance, life-health-insurance), pensions (pension-retirement-funds), or FP&A without actuarial context (financial-analyst).

0
installs
▌
Commercial Counsel · daemon-blockint-tech bundle
Guides commercial contract review and negotiation support for B2B agreements—MSAs, SaaS/order forms, vendor and customer contracts, DPAs, SLAs, limitation of liability, indemnity, IP, payment terms, and redline/issue logs with business impact notes. Use when reviewing or negotiating commercial terms, comparing vendor or customer paper, drafting negotiation positions, or triaging contract risk before sign-off—not for SOC/ISO GRC programs or vendor questionnaire ops (compliance-specialist), technical audit evidence (compliance-engineer), revenue recognition under ASC 606 (senior-revenue-accountant), or product requirements (business-analyst), strategy (business-consultant). Corporate/board: corporate-counsel. AI architecture for contract review: applied-ai-architect-commercial-enterprise. M&A economics mandate: transaction-principal. Drafting assistance only; human counsel must approve.

0
installs
▌
Communication Lead · daemon-blockint-tech bundle
Guides communications leadership—messaging strategy, narrative and key-message development, stakeholder and executive comms cadence, internal announcements (all-hands, change, crisis), external customer and partner messaging, launch and incident communication plans, channel selection, approval workflows, and spokesperson/Q&A prep. Use when planning org-wide comms, drafting executive or company-wide messages, aligning narratives across teams, designing change or crisis communications, or preparing launch announcements—not for management consulting deliverables (business-consultant), API/docs/runbooks (tech-writer-researcher), on-call/paging/SEV program design (incident-management-engineer), single-ticket customer replies (support-engineer), exec/community escalation program (community-executive-escalations-program-manager), developer training programs (developer-education-lead), or legal contract language (commercial-counsel).

0
installs
▌
Data Visualization · daemon-blockint-tech bundle
Guides data visualization design—chart type selection for message and audience, honest scales and labeling, color and accessibility, executive and operational dashboard layout, actuarial and insurance charts (loss triangles, trends, distributions), ethics and misleading-viz avoidance, and visualization specs for engineers versus slides. Tool-agnostic patterns (matplotlib, plotly, Tableau concepts). Use when the user says "data visualization", "chart type", "dashboard design", "visualize this data", "which chart should I use", "misleading chart", "accessible chart", "executive dashboard", "loss triangle chart", or "data viz spec"—not full statistical analysis, BI platform admin, ETL pipelines, narrative-only storytelling, or hands-on warehouse or dbt modeling.

0
installs
▌
Incident Responder · daemon-blockint-tech bundle
Guides CSIRT-style security incident response—declaring incidents, scoping and severity, timeline reconstruction, evidence preservation, containment/eradication/recovery coordination, stakeholder communication templates, post-incident review, lessons learned, and regulatory notification preparation (not legal advice). Use when a security incident is declared or suspected, coordinating active IR, building incident timelines, preserving forensic evidence, drafting internal/exec/customer IR updates, running blameless post-incident reviews, or preparing breach-notification fact packs for legal/compliance—not for routine SOC alert triage (soc-analyst), incident program/on-call/paging design (incident-management-engineer), enterprise security strategy or ISMS (cybersecurity, information-security-engineer), pentest (penetration-tester), adversary simulation (red-team-specialist), LLM red team (ai-redteam), binary RE (reverse-engineer), audit evidence (compliance-engineer), or CI pipeline gates (devsecops).

0
installs
▌
Matrix Environment · daemon-blockint-tech bundle
Guides organizational operating models for cross-functional security and technology teams—matrix vs hierarchical structures, RACI and interaction models, chapter/pod/guild patterns, platform vs product vs security alignment, interfaces between SOC/IR/AppSec/GRC/Engineering, scaling patterns, anti-patterns, and operating rhythm. Use when designing or tuning a matrix org, security/engineering interaction models, chapter or guild structure, decision rights between central and embedded teams, cross-functional interfaces (SOC, IR, AppSec, GRC, SRE, platform), or org scaling—not cloud environment tiers or deployment matrices alone (cloud-engineer), executive security program strategy (chief-information-security-officer), enterprise security reference architecture (enterprise-security-architect), multi-team program RAID and milestones (technical-program-manager), or VP infrastructure portfolio and capex (vp-of-infrastructure).

0
installs
▌
Penetration Tester · daemon-blockint-tech bundle
Guides authorized penetration testing—scoping and rules of engagement, reconnaissance, vulnerability identification, exploitation within scope, post-exploitation documentation, evidence and remediation reporting, and retest validation. Emphasizes written authorization, RoE boundaries, and safe/legal testing. Use for pentest, penetration test, ethical hacking, authorized assessment—not enterprise adversary simulation or purple-team campaigns (red-team-specialist), dedicated network/AD/infra pentest (network-pentester), deep web/API-only assessments (web-pentester), SOC alert triage (soc-analyst), incident command (incident-responder), forensic imaging (digital-forensics-analyst), binary/firmware RE (reverse-engineer), LLM/adversarial AI testing (ai-redteam), or implementing cloud guardrails (cloud-security-engineer).

0
installs
▌
Talent Acquisition · daemon-blockint-tech bundle
Expert talent acquisition for end-to-end recruiting operations—workforce planning tie-in, requisition intake, job descriptions and leveling, interview process coordination, candidate experience, offer process coordination, ATS/CRM workflow, hiring manager partnership, recruiting metrics (time-to-fill, pass-through, diversity funnel), agency/RPO management, EVP in hiring, onboarding handoff, and hiring compliance awareness (not legal advice). Use when the user mentions talent acquisition, TA strategy, recruiting process, hiring process, requisition, job description, time to fill, interview loop, candidate experience, ATS workflow, hiring manager, offer process, recruiting metrics, RPO, or full-cycle recruiting—not passive sourcing only (talent-sourcer), interview question banks alone (interview-prep, interview-system-designer), comp modeling (comp-analysis), offer letter legal text (draft-offer), org-wide people strategy (chro-advisor), or employee HR onboarding (people-operations-specialist).

0
installs
▌
Ab Testing Engineer · daemon-blockint-tech bundle
Guides experimentation engineering for A/B and multivariate tests—hypothesis framing, primary/secondary/guardrail metrics, design (A/B, A/B/n, MVT), sample size and power, duration and seasonality, allocation and randomization units, SRM checks, instrumentation, analysis plans (frequentist and Bayesian workflow level), stopping rules, readouts, rollout/kill decisions, and experiment registry hygiene (sound statistical practice only). Use for "A/B test", "A/B testing engineer", "experiment design", "sample size calculator", "statistical significance", "power analysis", "split test", "experiment readout", "guardrail metrics", "SRM", "randomization unit", "experiment duration", "multivariate test", "holdout", or "experiment analysis". Not for analytics stack build (analytics-data-engineer), marketing copy (cmo-advisor), roadmap-only (cpo-advisor), ML model experiments (ml-research-engineer-safeguards), or privacy/legal review (compliance-engineer).

0
installs
▌
AI Context Engineer · daemon-blockint-tech bundle
Guides context engineering for LLM systems—assembling prompts, budgeting tokens, prioritizing sources, compressing history, caching, structured context blocks, and debugging context-related failures (lost instructions, overflow, distraction). Use when designing what enters the model context each turn, optimizing cost/latency via context strategy, building context pipelines for agents, implementing summarization or compaction, or fixing "model ignored X" issues—not for persistent memory store design (ai-memory-developer), full RAG index pipelines (ai-engineer), or AI org operations (ai-lead-ops). For a structured token/cost improvement roadmap with phased initiatives and KPIs, use ai-token-improvement-plan-engineer. For commercial/enterprise AI solution architecture (RAG, copilots, platform selection), use applied-ai-architect-commercial-enterprise. Token research and compression ablations: research-engineer-scientist-tokens.

0
installs
▌
AI Memory Developer · daemon-blockint-tech bundle
Guides design and implementation of AI agent and application memory—short-term conversation state, long-term user/tenant memory, episodic vs semantic stores, consolidation, retrieval, forgetting, privacy retention, and eval of memory quality. Use when building persistent memory for copilots, designing memory APIs, choosing vector or graph stores, implementing memory write/read policies, debugging wrong or stale memories, or tuning what the model should remember across sessions—not for general RAG document search (ai-engineer), context window packing and token budgets (ai-context-engineer), AI team operations cadence (ai-lead-ops), or org-wide token cost improvement roadmaps (ai-token-improvement-plan-engineer).

0
installs
▌
Business Consultant · daemon-blockint-tech bundle
Guides management consulting-style work—engagement framing, hypothesis-driven problem structuring, issue trees, business cases, operating model and capability design, strategic options analysis, workshop facilitation, and executive recommendations (not legal advice). Use when diagnosing a business problem, structuring a strategy or transformation initiative, building a business case for leadership, designing target operating models, preparing steerCo or board recommendations, or advising on build-vs-buy and portfolio priorities—not for detailed requirements/BRDs (business-analyst), multi-team delivery tracking (technical-program-manager), contract negotiation (commercial-counsel), revenue accounting (senior-revenue-accountant), applied AI architecture (applied-ai-architect-commercial-enterprise), or system ADRs (senior-system-architecture). Canvas/TAM: business-model-researcher. Comms: communication-lead. M&A closing: transaction-manager. M&A principal/IC: transaction-principal.

0
installs
▌
Compliance Engineer · daemon-blockint-tech bundle
Guides compliance engineering—mapping regulatory and framework requirements to technical controls, automating audit evidence, continuous compliance monitoring, gap remediation tracking, and audit-ready documentation for security and privacy programs (SOC 2, ISO 27001, GDPR technical measures, HIPAA safeguards, PCI scope boundaries, NIST CSF). Use when implementing audit controls, evidence pipelines, continuous monitoring, auditor packages, testable policy checks, or pre-attestation remediation—not non-engineering GRC (compliance-specialist), contracts (commercial-counsel), DC commissioning (data-center-design-execution-lead), financial SOX journals (senior-revenue-accountant), security strategy without audit lens (cybersecurity), CI scans only (devsecops), or AI model classification (ai-risk-governance).

0
installs
▌
Red Team Specialist · daemon-blockint-tech bundle
Guides authorized enterprise adversary simulation and red team operations—campaign planning, threat-informed objectives, MITRE ATT&CK–framed TTP selection, OPSEC and scope, purple-team coordination, detection validation narratives, executive reporting, and blue-team lessons learned. Emphasizes rules of engagement, written authorization, and no unauthorized targeting. Use for red team, adversary simulation, purple team, assumed breach exercise, MITRE ATT&CK campaign, detection gap assessment, or threat-informed emulation—not LLM/agent adversarial testing (ai-redteam), single-vector pentest deliverables only (web-pentester, network-pentester, penetration-tester as execution specialists), SOC alert triage (soc-analyst), or incident command (incident-responder).

0
installs
▌
Solutions Architect · daemon-blockint-tech bundle
Guides customer-facing and internal technical solution design—discovery and requirements, integration and reference architecture, security/compliance fit, sizing and cost framing, RFP/RFI responses, PoC scoping, build-vs-buy, and handoff to delivery. Use when scoping a customer or partner solution, designing integration architecture for a deal, drafting RFP/RFI technical responses, planning a proof-of-concept, framing security and compliance fit, or preparing solution decks for stakeholders—not for org-wide landing zones and Well-Architected programs (cloud-architect, enterprise-cloud-architect), internal product ADRs and C4 (senior-system-architecture), production Terraform/IaC (infrastructure-engineer), hands-on cloud resource config (cloud-engineer), live PoC execution and competitive demos (sales-engineer), business strategy without technical design (business-consultant), contract redlines (commercial-counsel), or deep FinOps/GL (finops-analyst, compute-accounting-manager).

0
installs
▌
Transaction Manager · daemon-blockint-tech bundle
Guides corporate transaction execution—M&A, divestitures, financings, and JVs: deal timeline, diligence workstreams, data room and Q&A, conditions precedent, closing matrix, signing logistics, funds flow, and post-close handoff to integration. Use when running a live deal, maintaining a closing checklist, coordinating legal/tax/HR/IT workstreams, tracking CPs and signatures, or preparing signing/closing binders—not for sales quote-to-cash (deal-operations-administrator), drafting board resolutions (corporate-counsel), commercial contract redlines (commercial-counsel), deal thesis or IC strategy (transaction-principal), general consulting (business-consultant), or generic software programs (technical-program-manager). Output coordinates process; human counsel and executives approve binding steps.

0
installs
▌
Yara Rule Authoring · daemon-blockint-tech bundle
Guides authoring, review, optimization, and false-positive debugging of YARA-X detection rules for malware identification across PE, script, npm, Office, Chrome extensions (crx module), and Android DEX (dex module). Covers string and atom quality, condition short-circuiting, legacy YARA migration, yarGen/FLOSS workflows, goodware validation, and production deployment—not full malware reverse engineering, network IDS (Suricata/Snort), or memory forensics (Volatility). Use when the user asks to write YARA rule, YARA-X, yr check, yr scan, false positive YARA, yarGen, malware detection rule, crx module, dex module, optimize YARA performance, or migrate legacy YARA.

0
installs
▌
Actuarial Consulting · daemon-blockint-tech bundle
Guides actuarial consulting engagements—client scoping and SOW design, stakeholder communication (CFO, risk, boards, regulators at overview level), due diligence and M&A actuarial support, reserving/pricing/capital review programs, model validation and opinion support, regulatory interaction prep, and deliverable governance (memos, exhibits, management presentations). Use when the user mentions actuarial consulting, actuarial engagement, reserve opinion, due diligence actuarial, model validation engagement, actuarial memo, SOW actuarial, regulatory actuarial, M&A reserves, or actuarial review—not deep technical modeling execution (actuary), P&C line education only (property-casualty-insurance), legal advice (commercial-counsel), or generic management consulting without actuarial lens (business-consultant).

0
installs
▌
Agentic AI Developer · daemon-blockint-tech bundle
Guides hands-on development of agentic AI systems—agent loops (plan → act → observe), tool and MCP schemas, multi-agent orchestration and handoffs, state/checkpointing, HITL gates, agent prompts, reliability (retries, idempotency, cancellation), observability, trajectory evaluation, tool sandboxing, injection awareness, and deployment (API, queue, durable workflows). Framework-agnostic with optional LangGraph, Deep Agents, and Cursor SDK pointers—not full framework docs. Use for agentic AI, build an agent, agent loop, tool use, MCP integration, multi-agent, agent orchestration, LangGraph, agentic workflow, AI agent developer, agent handoff, agent memory, HITL agent, evaluate agent, or agentic application—not model training (ai-engineer), ML research (ai-researcher), product strategy only (cpo-advisor), architecture whiteboard only (agent-designer, external), generic backend without agent loops (senior-software-engineer), or red-team only (ai-redteam).

0
installs
▌
Data System Ops Lead · daemon-blockint-tech bundle
Run data system operations and reliability engineering. Cover pipeline monitoring, incident response, SLA management, capacity planning, on-call runbooks, data quality alerting, and operational excellence. Triggers on "data pipeline monitoring", "incident response", "SLA management", "capacity planning", "on-call runbook", "data quality alerting", "operational excellence", "system reliability", "pipeline health check", or "data ops".

0
installs
▌
Performance Engineer · daemon-blockint-tech bundle
Guides performance engineering—profiling (CPU, memory, I/O), distributed tracing, latency and throughput analysis, load/soak/stress testing, capacity models, performance budgets, database query tuning, and regression detection in CI. Use when investigating slow endpoints, p99 regressions, memory leaks, saturation, flaky load tests, defining latency SLOs, or producing optimization reports with evidence—not for CI/CD pipeline build (devops), rollout cutover strategy (deployment-strategist), warehouse dimensional modeling (data-warehouse-engineer), React/UI implementation (senior-frontend-software-engineer), facility compute utilization (data-center-compute-supply-efficiency), or LLM token/cost research (research-engineer-scientist-tokens).

0
installs
▌
Predictive Analytics · daemon-blockint-tech bundle
Guides applied predictive analytics for business—target and leakage framing, tabular feature engineering, regression and classification models (baselines, boosting, regularized linear), validation splits and metrics, calibration and cost-sensitive thresholds, practitioner explainability (importance, SHAP), drift monitoring concepts, and uncertainty comms. Covers churn, demand, fraud, propensity, risk scores—not actuarial reserving. Use for "predictive analytics", "build a predictive model", "propensity model", "churn prediction", "demand forecast model", "classification model", "feature engineering", "model validation", "predict customer behavior", "risk score model", or "predictive modeling workflow". Not for MLOps (ml-infrastructure-engineer-safeguards), DL research (ml-research-engineer-safeguards), actuarial reserving (actuarial-analyst), BI only (data-visualization), warehouse/dbt only (data-warehouse-engineer, analytics-data-engineer), or A/B tests (ab-testing-engineer).

0
installs
▌
Supply Chain Manager · daemon-blockint-tech bundle
Guides supply chain management—sourcing and supplier qualification, procurement and PO governance, demand forecasting and inventory policy, logistics and fulfillment (3PL, Incoterms, lead times), supplier scorecards, cost and TCO analysis, supply risk and continuity, and SCM KPI dashboards. Use when designing supply strategy, running RFQs, setting safety stock, resolving stockouts or excess inventory, improving OTIF, dual-sourcing critical parts, or building supplier business reviews—not for contract legal redlines (commercial-counsel), vendor security assessments (information-security-engineer), DC construction delivery programs (senior-data-center-capacity-delivery-manager), compute GL and invoice reconciliation (compute-accounting-manager), SaaS quote-to-order (deal-operations-administrator), or enterprise strategy cases (business-consultant).

0
installs
▌
UI Software Engineer · daemon-blockint-tech bundle
Guides UI software engineering—implementing screens and components from design specs, design tokens, responsive layout, interaction states, forms, and API-boundary loading/error UI in React/Next.js or similar stacks. Covers component library usage, basic WCAG implementation, and visual QA—not for senior front-end architecture or Core Web Vitals programs (senior-frontend-software-engineer), web auth/CORS/session security (web-application-developer), UX discovery without code (product-designer), interaction specs and coded prototypes (ux-software-engineer), or backend APIs and schemas (fullstack-software-engineer).

0
installs

211 published skills · page 1 of 3