galyarderlabs
- 264 skills
- 0 followers
- 20 repo stars
- 2 weeks ago last updated
- ▌ Intercepting Mobile Traffic With Burpsuite 2 · galyarderlabs bundleIntercepts and analyzes HTTP/HTTPS traffic from mobile applications using Burp Suite proxy to identify insecure API communications, authentication flaws, data leakage, and server-side vulnerabilities. Use when performing mobile application penetration testing, assessing API security, or evaluating client-server communication patterns. Activates for requests involving mobile traffic interception, Burp Suite mobile proxy, API security testing, or mobile HTTPS analysis.
- ▌ Executing Phishing Simulation Campaign 2 · galyarderlabs bundleExecutes authorized phishing simulation campaigns to assess an organization's susceptibility to email-based social engineering attacks. The tester designs realistic phishing scenarios, builds credential harvesting infrastructure, sends targeted phishing emails, and tracks open rates, click-through rates, and credential submission rates to measure human security awareness. Activates for requests involving phishing simulation, social engineering assessment, email security testing, or security awareness measurement.
- ▌ Executing Red Team Engagement Planning 2 · galyarderlabs bundleRed team engagement planning is the foundational phase that defines scope, objectives, rules of engagement (ROE), threat model selection, and operational timelines before any offensive testing begins.
- ▌ Executing Active Directory Attack Simulation 2 · galyarderlabs bundleExecutes authorized attack simulations against Active Directory environments to identify misconfigurations, weak credentials, dangerous privilege paths, and exploitable trust relationships that could lead to domain compromise. The tester uses BloodHound for attack path analysis, Mimikatz for credential extraction, and Impacket for protocol-level attacks including Kerberoasting, AS-REP Roasting, and delegation abuse. Activates for requests involving Active Directory pentest, AD attack simulation, domain compromise testing, or Kerberos attack assessment.
- ▌ Recovering From Ransomware Attack 2 · galyarderlabs bundleExecutes structured recovery from a ransomware incident following NIST and CISA frameworks, including environment isolation, forensic evidence preservation, clean infrastructure rebuild, prioritized system restoration from verified backups, credential reset, and validation against re-infection. Covers Active Directory recovery, database restoration, and application stack rebuild in dependency order. Activates for requests involving ransomware recovery, post-encryption restoration, or disaster recovery from ransomware.
- ▌ Finishing A Development Branch 2 · galyarderlabsUse when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup
- ▌ Verification Before Completion 2 · galyarderlabsUse when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always
- ▌ Using Galyarder Agent Framework 2 · galyarderlabsUse when legacy prompts or old framework sessions refer to the pre-rebrand Galyarder Agent Framework operating guide and need the modern equivalent behavior.
- ▌ Tracking Threat Actor Infrastructure 2 · galyarderlabs bundleThreat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control (C2) servers, phishing domains, exploit kit hosts, bulletproof hosting, a
- ▌ Generating Threat Intelligence Reports 2 · galyarderlabs bundleGenerates structured cyber threat intelligence reports at strategic, operational, and tactical levels tailored to specific audiences including executives, security operations teams, and technical analysts. Use when producing finished intelligence products from raw collection data, creating sector threat briefings, or delivering post-incident intelligence assessments. Activates for requests involving CTI report writing, threat briefings, intelligence products, finished intelligence, or executive security reporting.
- ▌ Recovering Deleted Files With Photorec 2 · galyarderlabs bundleRecover deleted files from disk images and storage media using PhotoRec's file signature-based carving engine regardless of file system damage.
- ▌ Reverse Engineering Malware With Ghidra 2 · galyarderlabs bundleReverse engineers malware binaries using NSA's Ghidra disassembler and decompiler to understand internal logic, cryptographic routines, C2 protocols, and evasion techniques at the assembly and pseudo-C level. Activates for requests involving malware reverse engineering, disassembly analysis, decompilation, binary analysis, or understanding malware internals.
- ▌ Validating Backup Integrity For Recovery 2 · galyarderlabsUse when recovery planning requires verification that backups are restorable, complete, and safe to trust before an incident or recovery event.
- ▌ Eradicating Malware From Infected Systems 2 · galyarderlabs bundleSystematically remove malware, backdoors, and attacker persistence mechanisms from infected systems while ensuring complete eradication and preventing re-infection.
- ▌ Investigating Phishing Email Incident 2 · galyarderlabs bundleInvestigates phishing email incidents from initial user report through header analysis, URL/attachment detonation, impacted user identification, and containment actions using SOC tools like Splunk, Microsoft Defender, and sandbox analysis platforms. Use when a reported phishing email requires full incident investigation to determine scope and impact.
- ▌ Retention Specialist 2 · galyarderlabsUse when legacy prompts or older framework flows reference `retention-specialist` and you need the modern runtime to resolve that capability cleanly.
- ▌ Systematic Debugging 2 · galyarderlabsUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes
- ▌ Product Marketing Context 2 · galyarderlabsUse when GTM, sales, growth, or launch work needs a canonical product-marketing context document instead of ad hoc assumptions.
- ▌ Email Marketing Bible 2 · galyarderlabsComprehensive, data-backed email marketing knowledge base. 908 sources, 4,798 insights. Use when reviewing email setups, building automation flows, diagnosing deliverability, writing email copy, selecting platforms, or pulling Standards. Covers strategy, flows, deliverability, copywriting, segmentation, compliance, cold email, and 19 industry playbooks.
- ▌ Receiving Code Review 2 · galyarderlabsUse when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
- ▌ QA Automation Engineer 2 · galyarderlabsUse when legacy prompts or older framework flows reference `qa-automation-engineer` and you need the modern runtime to resolve that capability cleanly.
- ▌ Requesting Code Review 2 · galyarderlabsUse when completing tasks, implementing major features, or before merging to verify work meets requirements
- ▌ Executing Red Team Exercise 2 · galyarderlabs bundleExecutes comprehensive red team exercises that simulate real-world adversary operations against an organization's people, processes, and technology. The red team operates with stealth as a primary objective, employing the full attack lifecycle from initial reconnaissance through objective completion while testing the organization's detection and response capabilities. This differs from penetration testing by focusing on adversary emulation rather than vulnerability identification. Activates for requests involving red team exercise, adversary simulation, adversary emulation, or full-scope offensive security assessment.
- ▌ Vercel React Best Practices 2 · galyarderlabsReact and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
- ▌ Accelerator Application 2 · galyarderlabsAccelerator Application Specialist. Use to shortlist startup programs, draft applications, prepare founder videos, and rehearse accelerator interviews with a disciplined founder narrative.
- ▌ Competitor Alternatives 2 · galyarderlabs bundleYou are an expert in creating competitor comparison and alternative pages. Your goal is to build pages that rank for competitive search terms, provide genuine value to evaluators, and position your product effectively.
- ▌ Iso 42001 AI Governance 2 · galyarderlabsAI governance audit using ISO 42001 standard. Ensures AI systems are developed and deployed responsibly with risk management, ethics, security, transparency, and compliance best practices.
- ▌ Remotion Best Practices 2 · galyarderlabsUse when legacy prompts or older framework flows reference `remotion-best-practices` and you need the modern runtime to resolve that capability cleanly.
- ▌ Test Driven Development 2 · galyarderlabsUse when implementing any feature or bugfix, before writing implementation code
- ▌ Experimentation Engineer 2 · galyarderlabsUse when a feature launch needs experiment design, test sequencing, rollout guardrails, and measurement logic before exposure to users.
- ▌ Saas Finops Optimization 2 · galyarderlabsOptimize cloud and AI costs for modern SaaS stacks (Vercel, Supabase, Neon, Stripe, and AI APIs). Covers token efficiency, serverless database scaling, edge function optimization, and burn rate monitoring. Use when planning infrastructure, investigating high bills, or auditing API usage.
- ▌ Finance Based Pricing Advisor 2 · galyarderlabsEvaluate pricing changes using ARPU, conversion, churn risk, NRR, and payback. Use when deciding whether a pricing move should ship.
- ▌ Profiling Threat Actor Groups 2 · galyarderlabs bundleDevelops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by aggregating TTP documentation, historical campaign data, tooling fingerprints, and attribution indicators from multiple intelligence sources. Use when briefing executives on sector-specific threats, updating threat model assumptions, or prioritizing defensive controls against specific adversaries. Activates for requests involving MITRE ATT&CK Groups, Mandiant APT profiles, CrowdStrike adversary naming, or sector-specific threat briefings.
- ▌ Gdpr Ccpa Privacy Auditor 2 · galyarderlabsAudits web applications to ensure declared privacy policies match actual technical data collection practices. Use to identify discrepancies in cookie usage, tracking scripts, and user data handling.
- ▌ Using Galyarder Framework 2 · galyarderlabs bundleUse when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying questions
- ▌ Founder Thought Leadership 2 · galyarderlabsFounder Brand And Thought Leadership Specialist. Use to define founder IP territory, create content systems for X and LinkedIn, and turn founder experience into audience, distribution, and credibility.
- ▌ Monitoring Darkweb Sources 2 · galyarderlabs bundleMonitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational assets, leaked credentials, threatened attacks, and threat actor communications to provide early warning intelligence. Use when establishing dark web monitoring coverage, investigating specific data breach claims, or enriching incident investigations with dark web context. Activates for requests involving dark web OSINT, leak site monitoring, credential exposure, Recorded Future dark web, or Tor hidden service intelligence.
- ▌ Mapping Mitre Attack Techniques 2 · galyarderlabs bundleMaps observed adversary behaviors, security alerts, and detection rules to MITRE ATT&CK techniques and sub-techniques to quantify detection coverage and guide control prioritization. Use when building an ATT&CK-based coverage heatmap, tagging SIEM alerts with technique IDs, aligning security controls to adversary playbooks, or reporting threat exposure to executives. Activates for requests involving ATT&CK Navigator, Sigma rules, MITRE D3FEND, or coverage gap analysis.
- ▌ Dispatching Parallel Agents 2 · galyarderlabsUse when legacy prompts or older framework flows reference `dispatching-parallel-agents` and you need the modern runtime to resolve that capability cleanly.
- ▌ Subagent Driven Development 2 · galyarderlabsUse when executing implementation plans with independent tasks in the current session
- ▌ Contract And Proposal Writer 2 · galyarderlabs bundleGenerate production-ready business documents including freelance contracts, project proposals, SOWs, NDAs, and MSAs with jurisdiction-aware clauses. Covers US (Delaware), EU (GDPR), UK, and DACH (German law) legal frameworks. Includes contract templates, clause libraries, and DOCX conversion. Use when starting client engagements, writing proposals, drafting partnership agreements, or needing GDPR-compliant data processing addenda.
- ▌ Marketing Demand Acquisition 2 · galyarderlabs bundleCreates demand generation campaigns, optimizes paid ad spend across LinkedIn, Google, and Meta, develops SEO strategies, and structures partnership programs for Series A+ startups scaling internationally. Use when planning marketing strategy, growth marketing, advertising campaigns, PPC optimization, lead generation, pipeline generation, or startup marketing budgets. Covers multi-channel acquisition (Google Ads, LinkedIn Ads, Meta Ads), CAC analysis, MQL/SQL workflows, attribution modeling, technical SEO, and co-marketing partnerships for hybrid PLG/Sales-Led motions in EU/US/Canada markets.
- ▌ Tdd Guide 3 · galyarderlabsUse when legacy prompts or older framework flows reference `tdd-guide` and you need the modern runtime to resolve that capability cleanly.
- ▌ JSON Canvas 3 · galyarderlabs bundleCreate and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections. Use when working with .canvas files, creating visual canvases, mind maps, flowcharts, or when the user mentions Canvas files in Obsidian.
- ▌ Cloud Security 3 · galyarderlabs bundleUse when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.
- ▌ Infrastructure 3 · galyarderlabsConsolidated Galyarder Framework Infrastructure intelligence bundle.
- ▌ Sales Engineer 2 · galyarderlabsPre-sales technical specialist. Use this agent to win the technical decision in B2B deals technical discovery, demo engineering, POC scoping, competitive battlecards, and bridging product capabilities to business outcomes. You can't close the deal without winning the technical evaluation first.
- ▌ Devops Engineer 3 · galyarderlabsUse when legacy prompts or older framework flows reference `devops-engineer` and you need the modern runtime to resolve that capability cleanly.
- ▌ Marketing Ideas 3 · galyarderlabs bundleProvide proven marketing strategies and growth ideas for SaaS and software products, prioritized using a marketing feasibility scoring system.
- ▌ Web Design Guidelines 2 · galyarderlabsUse when website or web app UI work needs practical design guidance for hierarchy, layout, readability, responsiveness, and interaction quality.
- ▌ Code Review Expert 3 · galyarderlabsUse when legacy prompts or older framework flows reference `code-review-expert` and you need the modern runtime to resolve that capability cleanly.
- ▌ Adversarial Reviewer 2 · galyarderlabsUse when a plan, feature, or launch needs an explicit adversarial pass to find weak assumptions, abuse cases, or strategic blind spots before execution.
- ▌ Build Error Resolver 2 · galyarderlabsUse when legacy prompts or older framework flows reference `build-error-resolver` and you need the modern runtime to resolve that capability cleanly.
- ▌ Create Agent Adapter 2 · galyarderlabsTechnical guide for creating a new Galyarder Framework agent adapter. Use when building a new adapter package, adding support for a new AI coding tool (e.g. a new CLI agent, API-based agent, or custom process), or when modifying the adapter system. Covers the required interfaces, module structure, registration points, and conventions derived from the existing claude-local and codex-local adapters.
- ▌ Galyarder Specialist 2 · galyarderlabsUse when the founder needs a single orchestrator to route work across multiple departments, synthesize specialist output, or translate an ambiguous business request into a concrete execution path.
- ▌ Marketing Psychology 2 · galyarderlabsApply behavioral science and mental models to revenue (cuan) decisions, prioritized using a psychological leverage and feasibility scoring system.
- ▌ Clean 2 · galyarderlabsDead code cleanup and consolidation specialist. Removes unused code, duplicates, and refactors for maintainability.
- ▌ Build Fix 2 · galyarderlabsSystematically investigate and fix build errors, TypeScript errors, or test failures with minimal diffs.
- ▌
- ▌ Pitch Deck 2 · galyarderlabsFundraising Pitch Deck Specialist. Use to build, review, or restructure a founder deck for pre-seed through Series A, with a clear narrative arc, investor-grade slide logic, and explicit asks.
- ▌ Devops Engineer 2 · galyarderlabsUse when legacy prompts or older framework flows reference `devops-engineer` and you need the modern runtime to resolve that capability cleanly.
- ▌ Marketing Ideas 2 · galyarderlabs bundleProvide proven marketing strategies and growth ideas for SaaS and software products, prioritized using a marketing feasibility scoring system.
- ▌ Copywriting 2 · galyarderlabs bundleWrite rigorous, conversion-focused marketing copy for landing pages and emails. Enforces brief confirmation and strict no-fabrication rules.
- ▌ Cyber Intel 2 · galyarderlabsUse when legacy prompts or older framework flows reference `cyber-intel` and you need the modern runtime to resolve that capability cleanly.
- ▌ Doc Updater 2 · galyarderlabsUse when documentation, READMEs, release notes, or operating docs have drifted from the current shipped behavior and need synchronized updates.
- ▌ Engineering 2 · galyarderlabs bundleConsolidated Galyarder Framework Engineering intelligence bundle.
- ▌ Prd To Plan 2 · galyarderlabsTurn a PRD into a multi-phase implementation plan using tracer-bullet vertical slices, saved as a local Markdown file in ./plans/. Use when user wants to break down a PRD, create an implementation plan, plan phases from a PRD, or mentions "tracer bullets".
- ▌ Write A Prd 2 · galyarderlabsCreate a PRD through user interview, codebase exploration, and module design, then submit as a GitHub issue. Use when user wants to write a PRD, create a product requirements document, or plan a new feature.
- ▌ Rapid Prototyper · galyarderlabsUltra-fast proof-of-concept and MVP specialist. Use this agent when you need to validate an idea quickly working prototype before the meeting's over. Pragmatic, speed-focused, validation-oriented. Ships in days, not weeks.
- ▌ Board Update 2 · galyarderlabsInvestor And Board Communication Specialist. Use to draft monthly investor updates, quarterly board decks, and high-signal stakeholder communications that surface wins, misses, risks, and asks clearly.
- ▌ Copy Editing 2 · galyarderlabsUse when existing copy needs tightening for clarity, accuracy, tone consistency, or executive readability without changing the underlying message.
- ▌ Lead Scoring 2 · galyarderlabsLead Qualification And Scoring Specialist. Use to define ICP filters, score inbound and outbound leads, and improve pipeline focus for a founder-led sales motion.
- ▌ Obsidian CLI 2 · galyarderlabsInteract with Obsidian vaults using the Obsidian CLI to read, create, search, and manage notes, tasks, properties, and more. Also supports plugin and theme development with commands to reload plugins, run JavaScript, capture errors, take screenshots, and inspect the DOM. Use when the user asks to interact with their Obsidian vault, manage notes, search vault content, perform vault operations from the command line, or develop and debug Obsidian plugins and themes.
- ▌ Support Lead 2 · galyarderlabsUse when support operations, launch fallout, repeated customer issues, or triage ownership need a structured response layer.
- ▌ Ab Test Setup 2 · galyarderlabs bundleStructured guide for setting up A/B tests with mandatory gates for hypothesis, metrics, and execution readiness.
- ▌ Audit Website 2 · galyarderlabsUse when a website needs a broad audit covering UX, conversion, content, SEO, technical correctness, and information hierarchy before changes are planned.
- ▌ Brainstorming 2 · galyarderlabs bundleYou MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
- ▌ Code Reviewer 2 · galyarderlabsUse when legacy prompts or older framework flows reference `code-reviewer` and you need the modern runtime to resolve that capability cleanly.
- ▌ Legal Advisor 2 · galyarderlabsDraft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant texts, cookie policies, and data processing agreements.
- ▌ Legal Counsel 2 · galyarderlabsUse when legacy prompts or older framework flows reference `legal-counsel` and you need the modern runtime to resolve that capability cleanly.
- ▌ Legal Finance 2 · galyarderlabs bundleConsolidated Galyarder Framework Legal-finance intelligence bundle.
- ▌ Prd To Issues 2 · galyarderlabsBreak a PRD into independently-grabbable GitHub issues using tracer-bullet vertical slices. Use when user wants to convert a PRD to issues, create implementation tickets, or break down a PRD into work items.
- ▌ Schema Markup 2 · galyarderlabs bundleDesign, validate, and optimize schema.org structured data for eligibility, correctness, and measurable SEO impact.
- ▌ Writing Plans 2 · galyarderlabsUse when you have a spec or requirements for a multi-step task, before touching code
- ▌ Code Review Expert 2 · galyarderlabsUse when legacy prompts or older framework flows reference `code-review-expert` and you need the modern runtime to resolve that capability cleanly.
- ▌ Finops Manager 2 · galyarderlabsUse when legacy prompts or older framework flows reference `finops-manager` and you need the modern runtime to resolve that capability cleanly.
- ▌ Obsidian Bases 2 · galyarderlabs bundleCreate and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of notes, or when the user mentions Bases, table views, card views, filters, or formulas in Obsidian.
- ▌ Onboarding Cro 2 · galyarderlabs bundleYou are an expert in user onboarding and activation. Your goal is to help users reach their "aha moment" as quickly as possible and establish habits that lead to long-term retention.
- ▌ Playwright Pro 2 · galyarderlabs bundleProduction-grade Playwright testing toolkit. Use when the user mentions Playwright tests, end-to-end testing, browser automation, fixing flaky tests, test migration, CI/CD testing, or test suites. Generate tests, fix flaky failures, migrate from Cypress/Selenium, sync with TestRail, run on BrowserStack. 55 templates, 3 agents, smart reporting.
- ▌ Social Content 2 · galyarderlabs bundleYou are an expert social media strategist with direct access to a scheduling platform that publishes to all major social networks. Your goal is to help create engaging content that builds audience, drives engagement, and supports business goals.
- ▌ UI UX Designer 2 · galyarderlabsUse when user experience, visual flow, interaction quality, or interface coherence needs a dedicated design-oriented pass.
- ▌ Writing Skills 2 · galyarderlabsUse when creating new skills, editing existing skills, or verifying skills work before deployment
- ▌ Company Creator 2 · galyarderlabs bundleCreate agent company packages conforming to the Agent Companies specification (agentcompanies/v1). Use when a user wants to create a new agent company from scratch, build a company around an existing git repo or skills collection, or scaffold a team/department of agents. Triggers on: "create a company", "make me a company", "build a company from this repo", "set up an agent company", "create a team of agents", "hire some agents", or when given a repo URL and asked to turn it into a company. Do NOT use for importing an existing company package (use the CLI import command instead) or for modifying a company that is already running in Galyarder Framework.
- ▌ Content Creator 2 · galyarderlabs bundleDeprecated redirect skill that routes legacy 'content creator' requests to the correct specialist. Use when a user invokes 'content creator', asks to write a blog post, article, guide, or brand voice analysis (routes to content-production), or asks to plan content, build a topic cluster, or create a content calendar (routes to content-strategy). Does not handle requests directly identifies user intent and redirects to content-production for writing/SEO/brand-voice tasks or content-strategy for planning tasks.
- ▌ Contract Review 2 · galyarderlabsAnalyze and red-flag contracts systematically, identifying risks, unfavorable terms, and negotiation opportunities
- ▌ Decision Logger 2 · galyarderlabsUse when important product, technical, or founder decisions need to be captured as durable context with rationale, tradeoffs, and follow-up implications.
- ▌ Doc Maintenance 2 · galyarderlabs bundleAudit top-level documentation (README, SPEC, PRODUCT) against recent git history to find drift shipped features missing from docs or features listed as upcoming that already landed. Proposes minimal edits, creates a branch, and opens a PR. Use when asked to review docs for accuracy, after major feature merges, or on a periodic schedule.
- ▌ Elite Developer 2 · galyarderlabsUse when legacy prompts or older framework flows reference `elite-developer` and you need the modern runtime to resolve that capability cleanly.
- ▌ Executing Plans 2 · galyarderlabsUse when you have a written implementation plan to execute in a separate session with review checkpoints
- ▌ Founder Context 2 · galyarderlabsFounder Operating Context. Use to create or update the canonical founder/startup context document so every fundraising, growth, product, and recruiting workflow runs on concrete company facts instead of generic assumptions.