henriquescastilho
- 152 skills
- 0 followers
- 1 day ago last updated
- ▌ Hunting For Spearphishing Indicators · henriquescastilho bundleHunt for spearphishing campaign indicators across email logs, endpoint telemetry, and network data to detect targeted email attacks.
- ▌ Implementing Pam For Database Access · henriquescastilho bundleDeploy privileged access management for database systems including Oracle, SQL Server, PostgreSQL, and MySQL. Covers session proxy configuration, credential vaulting, query auditing, dynamic credentia
- ▌ Tracking Threat Actor Infrastructure · henriquescastilho bundleThreat actor infrastructure tracking involves monitoring and mapping adversary-controlled assets including command-and-control (C2) servers, phishing domains, exploit kit hosts, bulletproof hosting, a
- ▌ Conducting Phishing Incident Response · henriquescastilho bundleResponds to phishing incidents by analyzing reported emails, extracting indicators, assessing credential compromise, quarantining malicious messages across the organization, and remediating affected accounts. Covers email header analysis, URL/attachment sandboxing, and mailbox-wide purge operations. Activates for requests involving phishing response, email incident, credential phishing, spear phishing investigation, or phishing remediation.
- ▌ Configuring Oauth2 Authorization Flow · henriquescastilho bundleConfigure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. This skill covers flow selection, PKCE implementation, token
- ▌ Investigating Phishing Email Incident · henriquescastilho bundleInvestigates phishing email incidents from initial user report through header analysis, URL/attachment detonation, impacted user identification, and containment actions using SOC tools like Splunk, Microsoft Defender, and sandbox analysis platforms. Use when a reported phishing email requires full incident investigation to determine scope and impact.
- ▌ Executing Phishing Simulation Campaign · henriquescastilho bundleExecutes authorized phishing simulation campaigns to assess an organization's susceptibility to email-based social engineering attacks. The tester designs realistic phishing scenarios, builds credential harvesting infrastructure, sends targeted phishing emails, and tracks open rates, click-through rates, and credential submission rates to measure human security awareness. Activates for requests involving phishing simulation, social engineering assessment, email security testing, or security awareness measurement.
- ▌ Exploiting Kerberoasting With Impacket · henriquescastilho bundlePerform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active Directory service accounts.
- ▌ Testing Ransomware Recovery Procedures · henriquescastilho bundleTest and validate ransomware recovery procedures including backup restore operations, RTO/RPO target verification, recovery sequencing, and clean restore validation to ensure organizational resilience against destructive ransomware attacks.
- ▌ Notebooklm · henriquescastilhoGoogle NotebookLM API. Use automatically when user wants to create documentation, study material, podcast, or summary from project sources. Also when onboarding someone to a project or creating client-facing materials from code/docs.
- ▌ Cct Create Plan · henriquescastilhoCreate a concise plan. Use when a user explicitly asks for a plan related to a coding task.
- ▌ Cct Systematic Debugging · henriquescastilho bundleUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes
- ▌ Cct Accessibility Auditor · henriquescastilhoWeb accessibility specialist for WCAG compliance, ARIA implementation, and inclusive design. Use when auditing websites for accessibility issues, implementing WCAG 2.1 AA/AAA standards, testing with screen readers, or ensuring ADA compliance. Expert in semantic HTML, keyboard navigation, and assistive technology compatibility.
- ▌ Cct Test Driven Development · henriquescastilho bundleUse when implementing any feature or bugfix, before writing implementation code
- ▌ Cct Context Window Management · henriquescastilhoStrategies for managing LLM context windows including summarization, trimming, routing, and avoiding context rot Use when: context window, token limit, context management, context engineering, long context.
- ▌ Extracting Credentials From Memory Dump · henriquescastilho bundleExtract cached credentials, password hashes, Kerberos tickets, and authentication tokens from memory dumps using Volatility and Mimikatz for forensic investigation.
- ▌ Ideia · henriquescastilhoAnalyze any input (GitHub repo, Instagram reel, YouTube video, article, link, idea description) and evaluate what can be extracted, adapted, or integrated into DME Technology projects or global config.
- ▌ Deslop · henriquescastilhoRemover codigo com cara de IA -- comentarios obvios, over-engineering, abstraccoes prematuras, try/catch desnecessarios. Usar automaticamente antes de commits ou quando o codigo parece inflado.
- ▌ Graphify · henriquescastilho bundleGenerate knowledge graph from codebase. Use automatically when exploring a new/unfamiliar project for the first time, when user asks to understand architecture or map dependencies, or when codebase changed significantly. Also use for any input (code, docs, papers, images) to knowledge graph.
- ▌ Auto Update · henriquescastilhoCheck and update Claude Code to latest version, update plugins, and show changelog.
- ▌
- ▌ MCP Builder · henriquescastilhoCriar MCP servers para integrar APIs externas ao Claude. Usar quando precisar conectar a servicos externos, criar ferramentas customizadas, ou integrar APIs de terceiros.
- ▌ New Project · henriquescastilhoBootstrap a new project from PRD or idea. Creates folder structure, CLAUDE.md, initial implementation with security best practices. Use when starting any new project.
- ▌ Deploy Check · henriquescastilhoPre-deploy validation checklist. Use automatically before any deploy, push to production, or when the user says "deploy", "publica", "manda pra prod". Run to catch issues before they reach production.
- ▌ Criar Tirinhas · henriquescastilho bundleProtocolo "Criar Tirinhas" da empresa 3S-001. Transforma planilhas medicas (.xlsx) com abas de Cranio (Neuro) e Coluna em um .xlsx separado por medico, todos dentro de uma pasta chamada "tirinhas/" criada automaticamente. Cada arquivo tem o nome do medico e contem UMA UNICA aba com todas as cirurgias combinadas (cranio + coluna), finalizada com linha de Total e Taxa (20% — nunca chamada de "comissao"). Usar sempre que o usuario mencionar: "criar tirinhas", "tirinhas", "protocolo tirinhas", "gerar tirinhas", "tirinha por medico", "separar por medico", ou ao processar planilha de cirurgias cranio/coluna. Empresa padrao: 3S-001.
- ▌
- ▌ Rebuild Skills · henriquescastilhoRewrite third-party skills as DME Technology originals. Use when onboarding new skills from marketplace or repos. Applies DME standards and optimizes for our agent architecture.
- ▌ Security Audit · henriquescastilho<!-- Source: claude-code-templates/security/security-audit.md -->
- ▌ Webapp Testing · henriquescastilhoTestar aplicacoes web locais usando Playwright. Usar automaticamente quando precisar verificar funcionalidade frontend, debugar UI, capturar screenshots, ou ver logs do browser.
- ▌ AI Architecture · henriquescastilhoArquitetura de plataformas AI, integracao de modelos, MLOps, edge AI. Usar quando o projeto envolve IA, modelos de linguagem, Gemma, fine-tuning, ou inferencia.
- ▌ DB Optimization · henriquescastilhoOtimizacao de banco de dados, caching, queries, indices. Usar automaticamente quando trabalhar com Supabase, Postgres, Firebase, ou quando performance de queries for relevante.
- ▌ Prepare Release · henriquescastilho<!-- Source: claude-code-templates/deployment/prepare-release.md -->
- ▌ Rollback Deploy · henriquescastilho<!-- Source: claude-code-templates/deployment/rollback-deploy.md -->
- ▌ Capability Router · henriquescastilhoUse FIRST quando user faz request não-trivial. Retorna index resumido de plugins, MCP servers, skills e agents EOI-OS por capability category, com guidance "use X when Y". Trigger words/contexts:user pede algo complexo que requer ferramentas (deploy, security audit, design, knowledge graph, memory, swarm, data query, etc); user pergunta "que ferramenta usar pra X"; user faz request ambíguo que pode mapear a múltiplos tools; início de qualquer task que vai usar mais de 1 tool. NÃO usar para chat casual, perguntas simples, ou tasks já obvious (e.g., "lê esse arquivo" → Read direto).
- ▌ Devops Automation · henriquescastilhoAutomacao de CI/CD, infraestrutura como codigo, containers, monitoramento. Usar automaticamente quando o contexto envolve pipelines, deploy, Docker, Kubernetes, GitHub Actions, ou infraestrutura.
- ▌ Composition Patterns · henriquescastilhoPadroes de composicao React que escalam. Usar quando refatorar componentes com muitas props booleanas, construir bibliotecas de componentes, ou projetar APIs reutilizaveis.
- ▌ Pre Deploy Validator · henriquescastilhoUse ANTES de qualquer deploy em produção. Roda checklist de 23 validações baseadas em falhas reais detectadas em projetos anteriores (CRM_OS, Valesa, etc). Detecta env vars hardcoded errado, CSP/CORS misconfig, JWT claims mismatch, migrations slot conflict, rotas Hono não montadas, RBAC lazy, mocks em prod, e mais. Invocável com `/pre-deploy-check` ou automaticamente quando o usuário menciona deploy/release.
- ▌ Criar Tirinhas Care Sa · henriquescastilho bundleProtocolo "Criar Tirinhas" da empresa CARE SA. Transforma planilhas medicas (.xlsx) com abas de Cranio (Neuro) e Coluna em um .xlsx separado por medico, todos dentro de uma pasta chamada "tirinhas/" criada automaticamente. Cada arquivo tem o nome do medico e contem UMA UNICA aba com todas as cirurgias combinadas (cranio + coluna), finalizada com linha de Total e Taxa (20% padrao, com overrides para Gustavo Adolpho Cannabrava Carvalho e Silas Augusto Faria Martins). Usar sempre que o usuario mencionar: "criar tirinhas care sa", "tirinhas care sa", "gerar tirinhas care sa", ou ao processar planilha CARE SA - MM.YYYY N.xlsx. Empresa: CARE SA.
- ▌ Dispatching Parallel Agents · henriquescastilhoOrquestrar trabalho paralelo com multiplos sub-agents quando ha 2+ tarefas independentes. Usar automaticamente quando detectar tarefas sem dependencia entre si.
- ▌ Verification Before Completion · henriquescastilhoObrigar verificacao com evidencia antes de declarar trabalho completo. Usar automaticamente antes de commits, PRs, ou qualquer afirmacao de que algo esta pronto.
- ▌
- ▌ Learn Rule · henriquescastilhoCapture a correction or lesson as a persistent learning rule with category, mistake, and correction. Stores, categorises, and retrieves rules for future sessions. Use after mistakes or when the user says "remember this", "don't forget", "note this", or "learn from this".
- ▌ Pro Workflow · henriquescastilhoComplete AI coding workflow system. Orchestration patterns, 18 hook events, 5 agents, cross-agent support, reference guides, and searchable learnings. Works with Claude Code, Cursor, and 32+ agents.
- ▌ Smart Commit · henriquescastilhoRun quality gates, review staged changes for issues, and create a well-crafted conventional commit. Use when saying "commit", "git commit", "save my changes", or ready to commit after making changes.
- ▌ Context Optimizer · henriquescastilhoOptimize token usage and context management. Use when sessions feel slow, context is degraded, or you're running out of budget.
- ▌ Generate Image · henriquescastilho bundleGenerate or edit images using AI models (FLUX, Gemini). Use for general-purpose image generation including photos, illustrations, artwork, visual assets, concept art, and any image that isn't a technical diagram or schematic. For flowcharts, circuits, pathways, and technical diagrams, use the scientific-schematics skill instead.
- ▌ Research Lookup · henriquescastilho bundleLook up current research information using the Parallel Chat API (primary) or Perplexity sonar-pro-search (academic paper searches). Automatically routes queries to the best backend. Use for finding papers, gathering research data, and verifying scientific information.
- ▌ Venue Templates · henriquescastilho bundleAccess comprehensive LaTeX templates, formatting requirements, and submission guidelines for major scientific publication venues (Nature, Science, PLOS, IEEE, ACM), academic conferences (NeurIPS, ICML, CVPR, CHI), research posters, and grant proposals (NSF, NIH, DOE, DARPA). This skill should be used when preparing manuscripts for journal submission, conference papers, research posters, or grant proposals and need venue-specific formatting requirements and templates.
- ▌ Scientific Writing · henriquescastilho bundleCore skill for the deep research and writing tool. Write scientific manuscripts in full paragraphs (never bullet points). Use two-stage process: (1) create section outlines with key points using research-lookup, (2) convert to flowing prose. IMRAD structure, citations (APA/AMA/Vancouver), figures/tables, reporting guidelines (CONSORT/STROBE/PRISMA), for research papers and journal submissions.
- ▌ Citation Management · henriquescastilho bundleComprehensive citation management for academic research. Search Google Scholar and PubMed for papers, extract accurate metadata, validate citations, and generate properly formatted BibTeX entries. This skill should be used when you need to find papers, verify citation information, convert DOIs to BibTeX, or ensure reference accuracy in scientific writing.
- ▌ Market Research Reports · henriquescastilho bundleGenerate comprehensive market research reports (50+ pages) in the style of top consulting firms (McKinsey, BCG, Gartner). Features professional LaTeX formatting, extensive visual generation with scientific-schematics and generate-image, deep integration with research-lookup for data gathering, and multi-framework strategic analysis including Porter's Five Forces, PESTLE, SWOT, TAM/SAM/SOM, and BCG Matrix.
- ▌ Clinical Decision Support · henriquescastilho bundleGenerate professional clinical decision support (CDS) documents for pharmaceutical and clinical research settings, including patient cohort analyses (biomarker-stratified with outcomes) and treatment recommendation reports (evidence-based guidelines with decision algorithms). Supports GRADE evidence grading, statistical analysis (hazard ratios, survival curves, waterfall plots), biomarker integration, and regulatory compliance. Outputs publication-ready LaTeX/PDF format optimized for drug development, clinical research, and evidence synthesis.