all publishers

micsapp

@micsapp source repo

3,235 published skills · page 27 of 33

  1. ▌
    Remediating S3 Bucket Misconfiguration · micsapp bundle
    This skill provides step-by-step procedures for identifying and remediating Amazon S3 bucket misconfigurations that expose sensitive data to unauthorized access. It covers enabling S3 Block Public Access at account and bucket levels, auditing bucket policies and ACLs, enforcing encryption, configuring access logging, and deploying automated remediation using AWS Config and Lambda.
    3 repo stars
  2. ▌
    Reverse Engineering IOS App With Frida · micsapp bundle
    Reverse engineers iOS applications using Frida dynamic instrumentation to understand internal logic, extract encryption keys, bypass security controls, and discover hidden functionality without source code access. Use when performing authorized iOS penetration testing, analyzing proprietary protocols, understanding obfuscated logic, or extracting runtime secrets from iOS binaries. Activates for requests involving iOS reverse engineering, Frida iOS hooking, Objective-C/Swift method tracing, or iOS binary analysis.
    3 repo stars
  3. ▌
    Scanning Containers With Trivy In Cicd · micsapp bundle
    This skill covers integrating Aqua Security's Trivy scanner into CI/CD pipelines for comprehensive container image vulnerability detection. It addresses scanning Docker images for OS package and application dependency CVEs, detecting misconfigurations in Dockerfiles, scanning filesystem and git repositories, and establishing severity-based quality gates that block deployment of vulnerable images.
    3 repo stars
  4. ▌
    Securing Azure With Microsoft Defender · micsapp bundle
    This skill instructs security practitioners on deploying Microsoft Defender for Cloud as a cloud-native application protection platform for Azure, multi-cloud, and hybrid environments. It covers enabling Defender plans for servers, containers, storage, and databases, configuring security recommendations, managing Secure Score, and integrating with the unified Defender portal for centralized threat management.
    3 repo stars
  5. ▌
    Testing API Security With Owasp Top 10 · micsapp bundle
    Systematically assessing REST and GraphQL API endpoints against the OWASP API Security Top 10 risks using automated and manual testing techniques.
    3 repo stars
  6. ▌
    Testing Ransomware Recovery Procedures · micsapp bundle
    Test and validate ransomware recovery procedures including backup restore operations, RTO/RPO target verification, recovery sequencing, and clean restore validation to ensure organizational resilience against destructive ransomware attacks.
    3 repo stars
  7. ▌
    Escalation Governance · micsapp bundle
    NEVER escalate without investigation first. This is the Iron Law. Use when evaluating whether to escalate models, facing genuine complexity requiring deeper reasoning, novel patterns with no existing solutions, high-stakes decisions requiring capability investment. Do not use when thrashing without investigation - investigate root cause first. DO NOT use when: time pressure alone - urgency doesn't change task complexity. DO NOT use when: "just to be safe" - assess actual complexity instead.
    3 repo stars
  8. ▌
    Architecture Aware Init · micsapp
    Architecture-aware project initialization combining online research with archetype selection. project initialization, new project, architecture decision, project setup, which architecture, choose architecture, project architecture Use when: initializing a new project and need to select an appropriate architecture based on project type, team size, domain complexity, and current best practices DO NOT use when: architecture is already decided - use project-init instead.
    3 repo stars
  9. ▌
    Knowledge Intake · micsapp bundle
    Process external resources into actionable knowledge with evaluation, storage, and application decisions. knowledge intake, article evaluation, paper review, external resource Use when: user shares links to articles, papers, or external resources DO NOT use when: searching existing knowledge - use knowledge-locator.
    3 repo stars
  10. ▌
    Color Contrast Checker · micsapp
    Validate color contrast checker operations. Auto-activating skill for Frontend Development. Triggers on: color contrast checker, color contrast checker Part of the Frontend Development skill category. Use when working with color contrast checker functionality. Trigger with phrases like "color contrast checker", "color checker", "color".
    3 repo stars
  11. ▌
    Pwa Manifest Generator · micsapp
    Generate pwa manifest generator operations. Auto-activating skill for Frontend Development. Triggers on: pwa manifest generator, pwa manifest generator Part of the Frontend Development skill category. Use when working with pwa manifest generator functionality. Trigger with phrases like "pwa manifest generator", "pwa generator", "pwa".
    3 repo stars
  12. ▌
    Vue Composable Creator · micsapp
    Create vue composable creator operations. Auto-activating skill for Frontend Development. Triggers on: vue composable creator, vue composable creator Part of the Frontend Development skill category. Use when working with vue composable creator functionality. Trigger with phrases like "vue composable creator", "vue creator", "vue".
    3 repo stars
  13. ▌
    Express Route Generator · micsapp
    Generate express route generator operations. Auto-activating skill for Backend Development. Triggers on: express route generator, express route generator Part of the Backend Development skill category. Use when working with express route generator functionality. Trigger with phrases like "express route generator", "express generator", "express".
    3 repo stars
  14. ▌
    Flask Blueprint Creator · micsapp
    Create flask blueprint creator operations. Auto-activating skill for Backend Development. Triggers on: flask blueprint creator, flask blueprint creator Part of the Backend Development skill category. Use when working with flask blueprint creator functionality. Trigger with phrases like "flask blueprint creator", "flask creator", "flask".
    3 repo stars
  15. ▌
    Kafka Producer Consumer · micsapp
    Manage kafka producer consumer operations. Auto-activating skill for Backend Development. Triggers on: kafka producer consumer, kafka producer consumer Part of the Backend Development skill category. Use when working with kafka producer consumer functionality. Trigger with phrases like "kafka producer consumer", "kafka consumer", "kafka".
    3 repo stars
  16. ▌
    Memcached Config Helper · micsapp
    Configure with memcached config helper operations. Auto-activating skill for Backend Development. Triggers on: memcached config helper, memcached config helper Part of the Backend Development skill category. Use when configuring systems or services. Trigger with phrases like "memcached config helper", "memcached helper", "memcached".
    3 repo stars
  17. ▌
    Nestjs Module Generator · micsapp
    Generate nestjs module generator operations. Auto-activating skill for Backend Development. Triggers on: nestjs module generator, nestjs module generator Part of the Backend Development skill category. Use when working with nestjs module generator functionality. Trigger with phrases like "nestjs module generator", "nestjs generator", "nestjs".
    3 repo stars
  18. ▌
    Sequelize Model Creator · micsapp
    Create sequelize model creator operations. Auto-activating skill for Backend Development. Triggers on: sequelize model creator, sequelize model creator Part of the Backend Development skill category. Use when working with sequelize model creator functionality. Trigger with phrases like "sequelize model creator", "sequelize creator", "sequelize".
    3 repo stars
  19. ▌
    SQL Migration Generator · micsapp
    Generate sql migration generator operations. Auto-activating skill for Backend Development. Triggers on: sql migration generator, sql migration generator Part of the Backend Development skill category. Use when working with sql migration generator functionality. Trigger with phrases like "sql migration generator", "sql generator", "sql".
    3 repo stars
  20. ▌
    Websocket Handler Setup · micsapp
    Configure websocket handler setup operations. Auto-activating skill for Backend Development. Triggers on: websocket handler setup, websocket handler setup Part of the Backend Development skill category. Use when working with websocket handler setup functionality. Trigger with phrases like "websocket handler setup", "websocket setup", "websocket".
    3 repo stars
  21. ▌
    Data Normalization Tool · micsapp
    Process data normalization tool operations. Auto-activating skill for ML Training. Triggers on: data normalization tool, data normalization tool Part of the ML Training skill category. Use when working with data normalization tool functionality. Trigger with phrases like "data normalization tool", "data tool", "data".
    3 repo stars
  22. ▌
    Early Stopping Callback · micsapp
    Manage early stopping callback operations. Auto-activating skill for ML Training. Triggers on: early stopping callback, early stopping callback Part of the ML Training skill category. Use when working with early stopping callback functionality. Trigger with phrases like "early stopping callback", "early callback", "early".
    3 repo stars
  23. ▌
    Learning Rate Scheduler · micsapp
    Manage learning rate scheduler operations. Auto-activating skill for ML Training. Triggers on: learning rate scheduler, learning rate scheduler Part of the ML Training skill category. Use when working with learning rate scheduler functionality. Trigger with phrases like "learning rate scheduler", "learning scheduler", "learning".
    3 repo stars
  24. ▌
    Mixed Precision Trainer · micsapp
    Manage mixed precision trainer operations. Auto-activating skill for ML Training. Triggers on: mixed precision trainer, mixed precision trainer Part of the ML Training skill category. Use when working with mixed precision trainer functionality. Trigger with phrases like "mixed precision trainer", "mixed trainer", "mixed".
    3 repo stars
  25. ▌
    Wandb Experiment Logger · micsapp
    Execute wandb experiment logger operations. Auto-activating skill for ML Training. Triggers on: wandb experiment logger, wandb experiment logger Part of the ML Training skill category. Use when working with wandb experiment logger functionality. Trigger with phrases like "wandb experiment logger", "wandb logger", "wandb".
    3 repo stars
  26. ▌
    Data Quality Checker · micsapp
    Validate data quality checker operations. Auto-activating skill for Data Pipelines. Triggers on: data quality checker, data quality checker Part of the Data Pipelines skill category. Use when working with data quality checker functionality. Trigger with phrases like "data quality checker", "data checker", "data".
    3 repo stars
  27. ▌
    Luigi Task Generator · micsapp
    Generate luigi task generator operations. Auto-activating skill for Data Pipelines. Triggers on: luigi task generator, luigi task generator Part of the Data Pipelines skill category. Use when working with luigi task generator functionality. Trigger with phrases like "luigi task generator", "luigi generator", "luigi".
    3 repo stars
  28. ▌
    SQL Transform Helper · micsapp
    Assist with sql transform helper operations. Auto-activating skill for Data Pipelines. Triggers on: sql transform helper, sql transform helper Part of the Data Pipelines skill category. Use when working with sql transform helper functionality. Trigger with phrases like "sql transform helper", "sql helper", "sql".
    3 repo stars
  29. ▌
    Retention Calculator · micsapp
    Configure and manage - Calculate retention calculator operations. Auto-activating skill for Data Analytics. Triggers on: retention calculator, retention calculator Part of the Data Analytics skill category. Use when working with retention calculator functionality. Trigger with phrases like "retention calculator", "retention calculator", "retention".
    3 repo stars
  30. ▌
    Cloudwatch Alarm Creator · micsapp
    Create cloudwatch alarm creator operations. Auto-activating skill for AWS Skills. Triggers on: cloudwatch alarm creator, cloudwatch alarm creator Part of the AWS Skills skill category. Use when working with cloudwatch alarm creator functionality. Trigger with phrases like "cloudwatch alarm creator", "cloudwatch creator", "cloudwatch".
    3 repo stars
  31. ▌
    Eventbridge Rule Creator · micsapp
    Create eventbridge rule creator operations. Auto-activating skill for AWS Skills. Triggers on: eventbridge rule creator, eventbridge rule creator Part of the AWS Skills skill category. Use when working with eventbridge rule creator functionality. Trigger with phrases like "eventbridge rule creator", "eventbridge creator", "eventbridge".
    3 repo stars
  32. ▌
    Security Group Generator · micsapp
    Generate security group generator operations. Auto-activating skill for AWS Skills. Triggers on: security group generator, security group generator Part of the AWS Skills skill category. Use when working with security group generator functionality. Trigger with phrases like "security group generator", "security generator", "security".
    3 repo stars
  33. ▌
    Bigquery Scheduled Query · micsapp
    Manage bigquery scheduled query operations. Auto-activating skill for GCP Skills. Triggers on: bigquery scheduled query, bigquery scheduled query Part of the GCP Skills skill category. Use when working with bigquery scheduled query functionality. Trigger with phrases like "bigquery scheduled query", "bigquery query", "bigquery".
    3 repo stars
  34. ▌
    Cloud Function Generator · micsapp
    Generate cloud function generator operations. Auto-activating skill for GCP Skills. Triggers on: cloud function generator, cloud function generator Part of the GCP Skills skill category. Use when working with cloud function generator functionality. Trigger with phrases like "cloud function generator", "cloud generator", "cloud".
    3 repo stars
  35. ▌
    Cloud Logging Sink Setup · micsapp
    Configure cloud logging sink setup operations. Auto-activating skill for GCP Skills. Triggers on: cloud logging sink setup, cloud logging sink setup Part of the GCP Skills skill category. Use when working with cloud logging sink setup functionality. Trigger with phrases like "cloud logging sink setup", "cloud setup", "cloud".
    3 repo stars
  36. ▌
    Cloud Run Service Config · micsapp
    Configure cloud run service config operations. Auto-activating skill for GCP Skills. Triggers on: cloud run service config, cloud run service config Part of the GCP Skills skill category. Use when configuring systems or services. Trigger with phrases like "cloud run service config", "cloud config", "cloud".
    3 repo stars
  37. ▌
    Cloud SQL Instance Setup · micsapp
    Configure cloud sql instance setup operations. Auto-activating skill for GCP Skills. Triggers on: cloud sql instance setup, cloud sql instance setup Part of the GCP Skills skill category. Use when working with cloud sql instance setup functionality. Trigger with phrases like "cloud sql instance setup", "cloud setup", "cloud".
    3 repo stars
  38. ▌
    Firebase Rules Generator · micsapp
    Generate firebase rules generator operations. Auto-activating skill for GCP Skills. Triggers on: firebase rules generator, firebase rules generator Part of the GCP Skills skill category. Use when working with firebase rules generator functionality. Trigger with phrases like "firebase rules generator", "firebase generator", "firebase".
    3 repo stars
  39. ▌
    Swagger Doc Creator · micsapp
    Create swagger doc creator operations. Auto-activating skill for API Development. Triggers on: swagger doc creator, swagger doc creator Part of the API Development skill category. Use when working with swagger doc creator functionality. Trigger with phrases like "swagger doc creator", "swagger creator", "swagger".
    3 repo stars
  40. ▌
    API Response Cacher · micsapp
    Configure api response cacher operations. Auto-activating skill for API Integration. Triggers on: api response cacher, api response cacher Part of the API Integration skill category. Use when working with APIs or building integrations. Trigger with phrases like "api response cacher", "api cacher", "api".
    3 repo stars
  41. ▌
    Acquiring Disk Image With Dd And Dcfldd · micsapp bundle
    Create forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.
    3 repo stars
  42. ▌
    Analyzing Campaign Attribution Evidence · micsapp bundle
    Campaign attribution analysis involves systematically evaluating evidence to determine which threat actor or group is responsible for a cyber operation. This skill covers collecting and weighting attr
    3 repo stars
  43. ▌
    Analyzing Cloud Storage Access Patterns · micsapp bundle
    Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics. Identifies after-hours bulk downloads, access from new IP addresses, unusual API calls (GetObject spikes), and potential data exfiltration using statistical baselines and time-series anomaly detection.
    3 repo stars
  44. ▌
    Analyzing Mft For Deleted File Recovery · micsapp bundle
    Analyze the NTFS Master File Table ($MFT) to recover metadata and content of deleted files by examining MFT record entries, $LogFile, $UsnJrnl, and MFT slack space using MFTECmd, analyzeMFT, and X-Ways Forensics.
    3 repo stars
  45. ▌
    Analyzing Network Traffic For Incidents · micsapp bundle
    Analyzes network traffic captures and flow data to identify adversary activity during security incidents, including command-and-control communications, lateral movement, data exfiltration, and exploitation attempts. Uses Wireshark, Zeek, and NetFlow analysis techniques. Activates for requests involving network traffic analysis, packet capture investigation, PCAP analysis, network forensics, C2 traffic detection, or exfiltration detection.
    3 repo stars
  46. ▌
    Analyzing Ransomware Network Indicators · micsapp bundle
    Identify ransomware network indicators including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and encryption key exchange via Zeek conn.log and NetFlow analysis
    3 repo stars
  47. ▌
    Analyzing Usb Device Connection History · micsapp bundle
    Investigate USB device connection history from Windows registry, event logs, and setupapi logs to track removable media usage and potential data exfiltration.
    3 repo stars
  48. ▌
    Analyzing Web Server Logs For Intrusion · micsapp bundle
    Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal, web scanner fingerprints, and brute-force patterns. Uses regex-based pattern matching against OWASP attack signatures, GeoIP enrichment for source attribution, and statistical anomaly detection for request frequency and response size outliers.
    3 repo stars
  49. ▌
    Building Detection Rule With Splunk Spl · micsapp bundle
    Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.
    3 repo stars
  50. ▌
    Building Patch Tuesday Response Process · micsapp bundle
    Establish a structured operational process to triage, test, and deploy Microsoft Patch Tuesday security updates within risk-based remediation SLAs.
    3 repo stars
  51. ▌
    Detecting Azure Service Principal Abuse · micsapp bundle
    Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.
    3 repo stars
  52. ▌
    Detecting Compromised Cloud Credentials · micsapp bundle
    Detecting compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible travel patterns, unauthorized resource provisioning, and credential abuse indicators using GuardDuty, Defender for Identity, and SCC Event Threat Detection.
    3 repo stars
  53. ▌
    Detecting Credential Dumping Techniques · micsapp bundle
    Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft using Sysmon Event ID 10, Windows Security logs, and SIEM correlation rules
    3 repo stars
  54. ▌
    Detecting Email Forwarding Rules Attack · micsapp bundle
    Detect malicious email forwarding rules created by adversaries to maintain persistent access to email communications for intelligence collection and BEC attacks.
    3 repo stars
  55. ▌
    Detecting Fileless Attacks On Endpoints · micsapp bundle
    Detects fileless malware and in-memory attacks that execute entirely in RAM without writing persistent files to disk, evading traditional antivirus. Use when building detections for PowerShell-based attacks, reflective DLL injection, WMI persistence, and registry-resident malware. Activates for requests involving fileless malware detection, in-memory attacks, PowerShell exploitation, or living-off-the-land techniques.
    3 repo stars
  56. ▌
    Detecting Privilege Escalation Attempts · micsapp bundle
    Detect privilege escalation attempts including token manipulation, UAC bypass, unquoted service paths, kernel exploits, and sudo/doas abuse across Windows and Linux.
    3 repo stars
  57. ▌
    Detecting S3 Data Exfiltration Attempts · micsapp bundle
    Detecting data exfiltration attempts from AWS S3 buckets by analyzing CloudTrail S3 data events, VPC Flow Logs, GuardDuty findings, Amazon Macie alerts, and S3 access patterns to identify unauthorized bulk downloads and cross-account data transfers.
    3 repo stars
  58. ▌
    Detecting Serverless Function Injection · micsapp bundle
    Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google Cloud Functions) through event source poisoning, malicious layer injection, runtime command execution, and IAM privilege escalation via function modification. The analyst combines static analysis of function code, CloudTrail event correlation, runtime behavior monitoring, and IAM policy auditing to identify injection vectors across the expanded serverless attack surface including API Gateway, S3, SQS, DynamoDB Streams, and CloudWatch event triggers. Activates for requests involving Lambda security assessment, serverless injection detection, function event poisoning analysis, or serverless privilege escalation investigation.
    3 repo stars
  59. ▌
    Detecting Supply Chain Attacks In CI CD · micsapp bundle
    Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for automated audit. Use when hardening CI/CD pipelines or investigating compromised build systems.
    3 repo stars
  60. ▌
    Exploiting Constrained Delegation Abuse · micsapp bundle
    Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users via S4U2self and S4U2proxy extensions for lateral movement and privilege escalation.
    3 repo stars
  61. ▌
    Exploiting Mass Assignment In REST Apis · micsapp bundle
    Discover and exploit mass assignment vulnerabilities in REST APIs to escalate privileges, modify restricted fields, and bypass authorization controls by injecting unexpected parameters in API requests.
    3 repo stars
  62. ▌
    Extracting Credentials From Memory Dump · micsapp bundle
    Extract cached credentials, password hashes, Kerberos tickets, and authentication tokens from memory dumps using Volatility and Mimikatz for forensic investigation.
    3 repo stars
  63. ▌
    Extracting Memory Artifacts With Rekall · micsapp bundle
    Uses Rekall memory forensics framework to analyze memory dumps for process hollowing, injected code via VAD anomalies, hidden processes, and rootkit detection. Applies plugins like pslist, psscan, vadinfo, malfind, and dlllist to extract forensic artifacts from Windows memory images. Use during incident response memory analysis.
    3 repo stars
  64. ▌
    Extracting Windows Event Logs Artifacts · micsapp bundle
    Extract, parse, and analyze Windows Event Logs (EVTX) using Chainsaw, Hayabusa, and EvtxECmd to detect lateral movement, persistence, and privilege escalation.
    3 repo stars
  65. ▌
    Hunting For Unusual Network Connections · micsapp bundle
    Hunt for unusual network connections by analyzing outbound traffic patterns, rare destinations, non-standard ports, and anomalous connection frequencies from endpoints.
    3 repo stars
  66. ▌
    Implementing AWS Nitro Enclave Security · micsapp bundle
    Implements AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy integration using PCR-based condition keys, and secure vsock communication channels. The practitioner builds enclave images, configures attestation-aware KMS policies, validates attestation documents against the AWS Nitro PKI root of trust, and establishes isolated computation pipelines for processing sensitive data such as PII, cryptographic keys, and healthcare records. Activates for requests involving Nitro Enclave setup, enclave attestation validation, confidential computing on AWS, or KMS enclave policy configuration.
    3 repo stars
  67. ▌
    Implementing Code Signing For Artifacts · micsapp bundle
    This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific signing tools, establishing trust chains, and verifying signatures in deployment pipelines.
    3 repo stars
  68. ▌
    Implementing Network Traffic Baselining · micsapp bundle
    Build network traffic baselines from NetFlow/IPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly/daily traffic pattern profiling
    3 repo stars
  69. ▌
    Implementing Ransomware Backup Strategy · micsapp bundle
    Designs and implements a ransomware-resilient backup strategy following the 3-2-1-1-0 methodology (3 copies, 2 media types, 1 offsite, 1 immutable/air-gapped, 0 errors on restore verification). Configures backup schedules aligned to RPO/RTO requirements, implements backup credential isolation to prevent ransomware from compromising backup infrastructure, and establishes automated restore testing. Activates for requests involving ransomware backup planning, backup resilience, air-gapped backup design, or backup recovery point objective configuration.
    3 repo stars
  70. ▌
    Implementing Security Chaos Engineering · micsapp bundle
    Implements security chaos engineering experiments that deliberately disable or degrade security controls to verify detection and response capabilities. Tests WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement scenarios using boto3 and subprocess. Use when validating SOC detection coverage and resilience.
    3 repo stars
  71. ▌
    Implementing Soar Playbook For Phishing · micsapp bundle
    Automate phishing incident response using Splunk SOAR REST API to create containers, add artifacts, and trigger playbooks
    3 repo stars
  72. ▌
    Implementing Zero Trust With Beyondcorp · micsapp bundle
    Deploy Google BeyondCorp Enterprise zero trust access controls using Identity-Aware Proxy (IAP), context-aware access policies, device trust validation, and Access Context Manager to enforce identity and posture-based access to GCP resources and internal applications.
    3 repo stars
  73. ▌
    Investigating Insider Threat Indicators · micsapp bundle
    Investigates insider threat indicators including data exfiltration attempts, unauthorized access patterns, policy violations, and pre-departure behaviors using SIEM analytics, DLP alerts, and HR data correlation. Use when SOC teams receive insider threat referrals from HR, detect anomalous data movement by employees, or need to build investigation timelines for potential insider threats.
    3 repo stars
  74. ▌
    Performing Binary Exploitation Analysis · micsapp bundle
    Analyze binary exploitation techniques including buffer overflows and ROP chains using pwntools Python library. Covers checksec analysis, gadget discovery with ROPgadget, and exploit development for CTF and authorized security assessments.
    3 repo stars
  75. ▌
    Performing Disk Forensics Investigation · micsapp bundle
    Conducts disk forensics investigations using forensic imaging, file system analysis, artifact recovery, and timeline reconstruction to support incident response cases. Utilizes tools such as FTK Imager, Autopsy, and The Sleuth Kit for evidence acquisition, deleted file recovery, and artifact examination. Activates for requests involving disk forensics, hard drive analysis, forensic imaging, file recovery, evidence acquisition, or digital forensic investigation.
    3 repo stars
  76. ▌
    Performing GRAPHQL Introspection Attack · micsapp bundle
    Performs GraphQL introspection attacks to extract the full API schema including types, queries, mutations, subscriptions, and field definitions from GraphQL endpoints. The tester uses introspection queries to map the attack surface, identifies sensitive fields and mutations, tests for query depth and complexity limits, and exploits GraphQL-specific vulnerabilities including batching attacks, alias-based brute force, and nested query DoS. Activates for requests involving GraphQL security testing, introspection attack, GraphQL enumeration, or GraphQL API penetration testing.
    3 repo stars
  77. ▌
    Performing Insider Threat Investigation · micsapp bundle
    Investigates insider threat incidents involving employees, contractors, or trusted partners who misuse authorized access to steal data, sabotage systems, or violate security policies. Combines digital forensics, user behavior analytics, and HR/legal coordination to build an evidence-based case. Activates for requests involving insider threat investigation, employee data theft, privilege misuse, user behavior anomaly, or internal threat detection.
    3 repo stars
  78. ▌
    Performing Nist Csf Maturity Assessment · micsapp bundle
    The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides a comprehensive taxonomy for managing cybersecurity risk through six core Functions - Govern, Identify, Protect, Detect, Respond, and Recover. This skill covers conducting a maturity assessment against the CSF using Implementation Tiers to measure organizational cybersecurity posture and create improvement roadmaps.
    3 repo stars
  79. ▌
    Performing Privileged Account Discovery · micsapp bundle
    Discover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin account
    3 repo stars
  80. ▌
    Performing Ransomware Tabletop Exercise · micsapp bundle
    Plans and facilitates tabletop exercises simulating ransomware incidents to test organizational readiness, decision-making, and communication procedures. Designs realistic scenarios based on current ransomware threat actors (LockBit, ALPHV/BlackCat, Cl0p), injects covering double extortion, backup destruction, and regulatory notification requirements. Evaluates participant responses against NIST CSF and CISA guidelines. Activates for requests involving ransomware tabletop, incident response exercise, or ransomware readiness drill.
    3 repo stars
  81. ▌
    Performing Soc2 Type2 Audit Preparation · micsapp bundle
    Automates SOC 2 Type II audit preparation including gap assessment against AICPA Trust Services Criteria (CC1-CC9), evidence collection from cloud providers and identity systems, control testing validation, remediation tracking, and continuous compliance monitoring. Covers all five TSC categories (Security, Availability, Processing Integrity, Confidentiality, Privacy) with automated evidence gathering from AWS, Azure, GCP, Okta, GitHub, and Jira. Use when preparing for or maintaining SOC 2 Type II certification.
    3 repo stars
  82. ▌
    Reverse Engineering Malware With Ghidra · micsapp bundle
    Reverse engineers malware binaries using NSA's Ghidra disassembler and decompiler to understand internal logic, cryptographic routines, C2 protocols, and evasion techniques at the assembly and pseudo-C level. Activates for requests involving malware reverse engineering, disassembly analysis, decompilation, binary analysis, or understanding malware internals.
    3 repo stars
  83. ▌
    Securing Container Registry With Harbor · micsapp bundle
    Harbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies, replicatio
    3 repo stars
  84. ▌
    Content Creation · micsapp
    Draft marketing content across channels — blog posts, social media, email newsletters, landing pages, press releases, and case studies. Use when writing any marketing content, when you need channel-specific formatting, SEO-optimized copy, headline options, or calls to action.
    3 repo stars
  85. ▌
    Comprehensive Testing Verification · micsapp
    MASTER Vue.js application testing with strict enforcement of verification protocols. Systematically test functionality with Playwright, validate bug fixes, verify features work, and enforce zero-tolerance policies for false success claims. MANDATORY testing with visual evidence before any deployment or functionality claims.
    3 repo stars
  86. ▌
    Authentication Patterns · micsapp bundle
    Authentication patterns for external services: API keys, OAuth, token management, verification. authentication, API keys, OAuth, token management, credentials.
    3 repo stars
  87. ▌
    Knowledge Locator · micsapp bundle
    Consult this skill when searching or navigating stored knowledge. Use when searching for stored knowledge, cross-referencing concepts, discovering connections, retrieving from palaces, finding past PR decisions. Do not use when creating new palace structures - use memory-palace-architect. DO NOT use when: processing new external resources - use knowledge-intake.
    3 repo stars
  88. ▌
    Python Performance · micsapp bundle
    Consult this skill for Python performance profiling and optimization. Use when debugging slow code, identifying bottlenecks, optimizing memory, benchmarking performance, production profiling. Do not use when async concurrency - use python-async instead. DO NOT use when: CPU/GPU system monitoring - use conservation:cpu-gpu-performance.
    3 repo stars
  89. ▌
    Google Calendar · micsapp bundle
    Google 캘린더 일정 조회/생성/수정/삭제. "오늘 일정", "이번 주 일정", "미팅 추가해줘" 요청에 사용. 여러 계정(work, personal) 통합 조회 지원.
    3 repo stars
  90. ▌
    Fuzzing Apis · micsapp bundle
    Configure perform API fuzzing to discover edge cases, crashes, and security vulnerabilities. Use when performing specialized testing. Trigger with phrases like "fuzz the API", "run fuzzing tests", or "discover edge cases".
    3 repo stars
  91. ▌
    Helm Chart Generator · micsapp
    Generate helm chart generator operations. Auto-activating skill for DevOps Advanced. Triggers on: helm chart generator, helm chart generator Part of the DevOps Advanced skill category. Use when working with helm chart generator functionality. Trigger with phrases like "helm chart generator", "helm generator", "helm".
    3 repo stars
  92. ▌
    Vue Component Generator · micsapp
    Generate vue component generator operations. Auto-activating skill for Frontend Development. Triggers on: vue component generator, vue component generator Part of the Frontend Development skill category. Use when working with vue component generator functionality. Trigger with phrases like "vue component generator", "vue generator", "vue".
    3 repo stars
  93. ▌
    Database Schema Designer · micsapp
    Build database schema designer operations. Auto-activating skill for Backend Development. Triggers on: database schema designer, database schema designer Part of the Backend Development skill category. Use when working with database schema designer functionality. Trigger with phrases like "database schema designer", "database designer", "database".
    3 repo stars
  94. ▌
    Error Handler Middleware · micsapp
    Manage error handler middleware operations. Auto-activating skill for Backend Development. Triggers on: error handler middleware, error handler middleware Part of the Backend Development skill category. Use when working with error handler middleware functionality. Trigger with phrases like "error handler middleware", "error middleware", "error".
    3 repo stars
  95. ▌
    GRAPHQL Resolver Creator · micsapp
    Create graphql resolver creator operations. Auto-activating skill for Backend Development. Triggers on: graphql resolver creator, graphql resolver creator Part of the Backend Development skill category. Use when working with graphql resolver creator functionality. Trigger with phrases like "graphql resolver creator", "graphql creator", "graphql".
    3 repo stars
  96. ▌
    Typeorm Entity Generator · micsapp
    Generate typeorm entity generator operations. Auto-activating skill for Backend Development. Triggers on: typeorm entity generator, typeorm entity generator Part of the Backend Development skill category. Use when working with typeorm entity generator functionality. Trigger with phrases like "typeorm entity generator", "typeorm generator", "typeorm".
    3 repo stars
  97. ▌
    Gradient Clipping Helper · micsapp
    Configure with gradient clipping helper operations. Auto-activating skill for ML Training. Triggers on: gradient clipping helper, gradient clipping helper Part of the ML Training skill category. Use when working with gradient clipping helper functionality. Trigger with phrases like "gradient clipping helper", "gradient helper", "gradient".
    3 repo stars
  98. ▌
    Model Checkpoint Manager · micsapp
    Manage model checkpoint manager operations. Auto-activating skill for ML Training. Triggers on: model checkpoint manager, model checkpoint manager Part of the ML Training skill category. Use when working with model checkpoint manager functionality. Trigger with phrases like "model checkpoint manager", "model manager", "model".
    3 repo stars
  99. ▌
    Model Evaluation Metrics · micsapp
    Build model evaluation metrics operations. Auto-activating skill for ML Training. Triggers on: model evaluation metrics, model evaluation metrics Part of the ML Training skill category. Use when working with model evaluation metrics functionality. Trigger with phrases like "model evaluation metrics", "model metrics", "model".
    3 repo stars
  100. ▌
    Sklearn Pipeline Builder · micsapp
    Build sklearn pipeline builder operations. Auto-activating skill for ML Training. Triggers on: sklearn pipeline builder, sklearn pipeline builder Part of the ML Training skill category. Use when working with sklearn pipeline builder functionality. Trigger with phrases like "sklearn pipeline builder", "sklearn builder", "sklearn".
    3 repo stars