← all publishers

yanacuti1121

@yanacuti1121 source repo

Report this profile Claim this profile

• 1.8k skills
• 0 followers
• 2 repo stars
• 2 weeks ago last updated

1. ▌
   Testing Mobile API Authentication · yanacuti1121 bundle

   Tests authentication and authorization mechanisms in mobile application APIs to identify broken authentication, insecure token management, session fixation, privilege escalation, and IDOR vulnerabilities. Use when performing API security assessments against mobile app backends, testing JWT implementations, evaluating OAuth flows, or assessing session management. Activates for requests involving mobile API auth testing, token security assessment, OAuth mobile flow testing, or API authorization bypass.
   2 repo stars
2. ▌
   Security And Hardening · yanacuti1121

   Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
   2 repo stars
3. ▌
   Scrum Master Agent · yanacuti1121

   Comprehensive Scrum Master assistant for sprint planning, backlog grooming, retrospectives, capacity planning, and daily standups with intelligent context-aware reporting
   2 repo stars
4. ▌
   Analyzing Indicators Of Compromise · yanacuti1121 bundle

   Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence, campaign attribution, and blocking priority. Use when triaging IOCs from phishing emails, security alerts, or external threat feeds; enriching raw IOCs with multi-source intelligence; or making block/monitor/whitelist decisions. Activates for requests involving VirusTotal, AbuseIPDB, MalwareBazaar, MISP, or IOC enrichment pipelines.
   2 repo stars
5. ▌
   Analyzing Uefi Bootkit Persistence · yanacuti1121 bundle

   Analyzes UEFI bootkit persistence mechanisms including firmware implants in SPI flash, EFI System Partition (ESP) modifications, Secure Boot bypass techniques, and UEFI variable manipulation. Covers detection of known bootkit families (BlackLotus, LoJax, MosaicRegressor, MoonBounce, CosmicStrand), ESP partition forensic inspection, chipsec-based firmware integrity verification, and Secure Boot configuration auditing. Activates for requests involving UEFI malware analysis, firmware persistence investigation, boot chain integrity verification, or Secure Boot bypass detection.
   2 repo stars
6. ▌
   Auditing AWS S3 Bucket Permissions · yanacuti1121 bundle

   Systematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.
   2 repo stars
7. ▌
   Auditing Cloud With Cis Benchmarks · yanacuti1121 bundle

   This skill details how to conduct cloud security audits using Center for Internet Security benchmarks for AWS, Azure, and GCP. It covers interpreting CIS Foundations Benchmark controls, running automated assessments with tools like Prowler and ScoutSuite, remediating failed controls, and maintaining continuous compliance monitoring against CIS v5 for AWS, v4 for Azure, and v4 for GCP.
   2 repo stars
8. ▌
   Chrome Devtools Browser Automation · yanacuti1121

   Automate browser input, navigation, and interaction via Chrome DevTools MCP (Puppeteer-backed). Click, type, fill forms, drag, upload, navigate pages, wait for conditions, emulate devices.
   2 repo stars
9. ▌
   Conducting Cloud Incident Response · yanacuti1121 bundle

   Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure. Activates for requests involving cloud incident response, AWS security incident, Azure compromise, GCP breach, cloud forensics, or cloud identity compromise.
   2 repo stars
10. ▌
    Configuring Pfsense Firewall Rules · yanacuti1121 bundle

    Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic shaping to enforce network segmentation, control traffic flow, and protect internal network zones in enterprise and small-to-medium business environments.
    2 repo stars
11. ▌
    Detecting Attacks On Scada Systems · yanacuti1121 bundle

    This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial protocols, unauthorized command injection into PLCs, HMI compromise, historian data manipulation, and denial-of-service against control system communications. It leverages OT-specific intrusion detection systems, industrial protocol anomaly detection, and process data analytics to identify attacks that traditional IT security tools miss.
    2 repo stars
12. ▌
    Detecting AWS Cloudtrail Anomalies · yanacuti1121 bundle

    Detect unusual API call patterns in AWS CloudTrail logs using boto3, statistical baselining, and behavioral analysis to identify credential compromise, privilege escalation, and unauthorized resource access.
    2 repo stars
13. ▌
    Detecting Email Account Compromise · yanacuti1121 bundle

    Detect compromised O365 and Google Workspace email accounts by analyzing inbox rule creation, suspicious sign-in locations, mail forwarding rules, and unusual API access patterns via Microsoft Graph and audit logs.
    2 repo stars
14. ▌
    Detecting Insider Threat Behaviors · yanacuti1121 bundle

    Detect insider threat behavioral indicators including unusual data access, off-hours activity, mass file downloads, privilege abuse, and resignation-correlated data theft.
    2 repo stars
15. ▌
    Detecting Insider Threat With Ueba · yanacuti1121 bundle

    Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch to build behavioral baselines, calculate anomaly scores, perform peer group analysis, and detect insider threat indicators such as data exfiltration, privilege abuse, and unauthorized access patterns.
    2 repo stars
16. ▌
    Implementing Endpoint Dlp Controls · yanacuti1121 bundle

    Implements endpoint Data Loss Prevention (DLP) controls to detect and prevent sensitive data exfiltration through email, USB, cloud storage, and printing. Use when deploying DLP agents, creating content inspection policies, or preventing unauthorized data movement from endpoints. Activates for requests involving DLP, data exfiltration prevention, content inspection, or sensitive data protection on endpoints.
    2 repo stars
17. ▌
    Openai Codex Security Validation · yanacuti1121

    Use when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more candidate security findings are valid. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
    2 repo stars
18. ▌
    Openai Plugin Eval Improve Skill · yanacuti1121

    Turn plugin-eval findings into a concrete rewrite brief for a Codex skill. Use when the user already evaluated a skill and now wants Codex to improve it, especially after asking what to fix first.
    2 repo stars
19. ▌
    Openai Superpowers Brainstorming · yanacuti1121 bundle

    You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
    2 repo stars
20. ▌
    Openai Superpowers Writing Plans · yanacuti1121

    Use when you have a spec or requirements for a multi-step task, before touching code
    2 repo stars
21. ▌
    Performing Blind Ssrf Exploitation · yanacuti1121 bundle

    Detect and exploit blind Server-Side Request Forgery vulnerabilities using out-of-band techniques, DNS interactions, and timing analysis to access internal services and cloud metadata endpoints.
    2 repo stars
22. ▌
    Performing Dns Tunneling Detection · yanacuti1121 bundle

    Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying high subdomain cardinality. Uses scapy for packet capture analysis and statistical methods to distinguish legitimate DNS from covert channels. Use when hunting for data exfiltration.
    2 repo stars
23. ▌
    Performing Iot Security Assessment · yanacuti1121 bundle

    Performs comprehensive security assessments of IoT devices and their ecosystems by testing hardware interfaces, firmware, network communications, cloud APIs, and companion mobile applications. The tester uses firmware extraction and analysis, hardware debugging via UART and JTAG, network protocol analysis, and runtime exploitation to identify vulnerabilities across all layers of the IoT stack. Activates for requests involving IoT security testing, embedded device assessment, firmware security analysis, or smart device penetration testing.
    2 repo stars
24. ▌
    Performing Packet Injection Attack · yanacuti1121 bundle

    Crafts and injects custom network packets using Scapy, hping3, and Nemesis during authorized security assessments to test firewall rules, IDS detection, protocol handling, and network stack resilience against malformed and spoofed traffic.
    2 repo stars
25. ▌
    Performing Steganography Detection · yanacuti1121 bundle

    Detect and extract hidden data embedded in images, audio, and other media files using steganalysis tools to uncover covert communication channels.
    2 repo stars
26. ▌
    Performing User Behavior Analytics · yanacuti1121 bundle

    Performs User and Entity Behavior Analytics (UEBA) to detect anomalous user activities including impossible travel, unusual access patterns, privilege abuse, and insider threats using SIEM-based behavioral baselines and statistical analysis. Use when SOC teams need to identify compromised accounts or insider threats through deviation from established behavioral norms.
    2 repo stars
27. ▌
    Securing Container Registry Images · yanacuti1121 bundle

    Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent deploying unscanned or unsigned images.
    2 repo stars
28. ▌
    Testing For Email Header Injection · yanacuti1121 bundle

    Test web application email functionality for SMTP header injection vulnerabilities that allow attackers to inject additional email headers, modify recipients, and abuse contact forms for spam relay.
    2 repo stars
29. ▌
    Triaging Security Alerts In Splunk · yanacuti1121 bundle

    Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events, correlating related telemetry, and making escalation or closure decisions using SPL queries and the Incident Review dashboard. Use when SOC analysts face queued alerts from correlation searches, need to prioritize investigation order, or must document triage decisions for handoff to Tier 2/3 analysts.
    2 repo stars
30. ▌
    Venice Venice Audio Transcription · yanacuti1121

    Transcribe audio files to text via POST /audio/transcriptions. Covers supported models (Parakeet, Whisper, Wizper, Scribe, xAI STT), supported formats (wav/flac/m4a/aac/mp4/mp3/ogg/webm), response formats (json/text), timestamps, and language hints. OpenAI-compatible multipart.
    2 repo stars
31. ▌
    Code Review And Quality · yanacuti1121

    Conducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to assess code quality across multiple dimensions before it enters the main branch.
    2 repo stars
32. ▌
    Frontend UI Engineering · yanacuti1121

    Builds production-quality UIs. Use when building or modifying user-facing interfaces. Use when creating components, implementing layouts, managing state, or when the output needs to look and feel production-quality rather than AI-generated.
    2 repo stars
33. ▌
    Spec Driven Development · yanacuti1121

    Creates specs before coding. Use when starting a new project, feature, or significant change and no specification exists yet. Use when requirements are unclear, ambiguous, or only exist as a vague idea.
    2 repo stars
34. ▌
    Test Driven Development · yanacuti1121

    Drives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that code works, when a bug report arrives, or when you're about to modify existing functionality.
    2 repo stars
35. ▌
    Analyzing Dns Logs For Exfiltration · yanacuti1121 bundle

    Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channels using entropy analysis, query volume anomalies, and subdomain length detection in SIEM platforms. Use when SOC teams need to identify DNS-based threats that bypass traditional network security controls.
    2 repo stars
36. ▌
    Analyzing Malicious PDF With Peepdf · yanacuti1121 bundle

    Perform static analysis of malicious PDF documents using peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects.
    2 repo stars
37. ▌
    Analyzing Security Logs With Splunk · yanacuti1121 bundle

    Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection. Covers Windows event logs, firewall logs, proxy logs, and authentication data analysis. Activates for requests involving Splunk investigation, SPL queries, SIEM log analysis, security event correlation, or log-based incident investigation.
    2 repo stars
38. ▌
    Analyzing Threat Intelligence Feeds · yanacuti1121 bundle

    Analyzes structured and unstructured threat intelligence feeds to extract actionable indicators, adversary tactics, and campaign context. Use when ingesting commercial or open-source CTI feeds, evaluating feed quality, normalizing data into STIX 2.1 format, or enriching existing IOCs with campaign attribution. Activates for requests involving ThreatConnect, Recorded Future, Mandiant Advantage, MISP, AlienVault OTX, or automated feed aggregation pipelines.
    2 repo stars
39. ▌
    Analyzing Windows Amcache Artifacts · yanacuti1121 bundle

    Parses and analyzes the Windows Amcache.hve registry hive to extract evidence of program execution, application installation, and driver loading for digital forensics investigations. Uses Eric Zimmerman's AmcacheParser and Timeline Explorer for artifact extraction, SHA-1 hash correlation with threat intel, and timeline reconstruction. Activates for requests involving Amcache forensics, program execution evidence, Windows artifact analysis, or application compatibility cache investigation.
    2 repo stars
40. ▌
    Building Detection Rules With Sigma · yanacuti1121 bundle

    Builds vendor-agnostic detection rules using the Sigma rule format for threat detection across SIEM platforms including Splunk, Elastic, and Microsoft Sentinel. Use when creating portable detection logic from threat intelligence, mapping rules to MITRE ATT&CK techniques, or converting community Sigma rules into platform-specific queries using sigmac or pySigma backends.
    2 repo stars
41. ▌
    Building Incident Response Playbook · yanacuti1121 bundle

    Designs and documents structured incident response playbooks that define step-by-step procedures for specific incident types aligned with NIST SP 800-61r3 and SANS PICERL frameworks. Covers playbook structure, decision trees, escalation criteria, RACI matrices, and integration with SOAR platforms. Activates for requests involving IR playbook creation, incident response procedure documentation, response runbook development, or SOAR playbook design.
    2 repo stars
42. ▌
    Collecting Indicators Of Compromise · yanacuti1121 bundle

    Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security incidents to enable detection, blocking, and threat intelligence sharing. Covers network, host, email, and behavioral indicators using STIX/TAXII formats and threat intelligence platforms. Activates for requests involving IOC collection, indicator extraction, threat indicator sharing, compromise indicators, STIX export, or IOC enrichment.
    2 repo stars
43. ▌
    Collecting Open Source Intelligence · yanacuti1121 bundle

    Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and attack campaigns using publicly available data sources, passive reconnaissance tools, and dark web monitoring. Use when investigating external threat actor infrastructure, performing pre-engagement reconnaissance for authorized red team assessments, or enriching CTI reports with publicly available adversary context. Activates for requests involving Maltego, Shodan, OSINT framework, SpiderFoot, or infrastructure reconnaissance.
    2 repo stars
44. ▌
    Conducting Network Penetration Test · yanacuti1121 bundle

    Conducts comprehensive network penetration tests against authorized target environments by performing host discovery, port scanning, service enumeration, vulnerability identification, and controlled exploitation to assess the security posture of network infrastructure. The tester follows PTES methodology from reconnaissance through post-exploitation and reporting. Activates for requests involving network pentest, infrastructure security assessment, internal network testing, or external perimeter testing.
    2 repo stars
45. ▌
    Configuring Ldap Security Hardening · yanacuti1121 bundle

    Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding, and channel binding bypass. Covers LDAPS enforcement, channel binding, LDAP si
    2 repo stars
46. ▌
    Detecting Business Email Compromise · yanacuti1121 bundle

    Business Email Compromise (BEC) is a sophisticated fraud scheme where attackers impersonate executives, vendors, or trusted partners to trick employees into transferring funds, sharing sensitive data,
    2 repo stars
47. ▌
    Detecting Container Escape Attempts · yanacuti1121 bundle

    Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
    2 repo stars
48. ▌
    Detecting Modbus Protocol Anomalies · yanacuti1121 bundle

    This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems. It addresses function code monitoring, register range validation, timing analysis, unauthorized client detection, and deep packet inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers, Suricata IDS with OT rules, and custom Python-based detection using Markov chain models for normal Modbus transaction sequences.
    2 repo stars
49. ▌
    Exploiting Deeplink Vulnerabilities · yanacuti1121 bundle

    Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applications to identify unauthorized access, data injection, intent hijacking, and redirect manipulation. Use when assessing mobile app attack surface through custom URI schemes, Android App Links, iOS Universal Links, or intent-based navigation. Activates for requests involving deep link security testing, URL scheme exploitation, mobile intent abuse, or link hijacking.
    2 repo stars
50. ▌
    Exploiting Insecure Deserialization · yanacuti1121 bundle

    Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications to achieve remote code execution during authorized penetration tests.
    2 repo stars
51. ▌
    Hunting Advanced Persistent Threats · yanacuti1121 bundle

    Proactively hunts for Advanced Persistent Threat (APT) activity within enterprise environments using hypothesis-driven searches across endpoint telemetry, network logs, and memory artifacts. Use when conducting scheduled threat hunting cycles, investigating anomalous behavior flagged by UEBA, or validating that known APT TTPs are not present in the environment. Activates for requests involving MITRE ATT&CK, Velociraptor, osquery, Zeek, or threat hunting playbooks.
    2 repo stars
52. ▌
    Hunting Credential Stuffing Attacks · yanacuti1121 bundle

    Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins. Uses statistical analysis on Splunk or raw log data. Use when investigating account takeover campaigns or building detection rules for auth abuse.
    2 repo stars
53. ▌
    Hunting For Dns Tunneling With Zeek · yanacuti1121 bundle

    Detect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.
    2 repo stars
54. ▌
    Hunting For Supply Chain Compromise · yanacuti1121 bundle

    Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts.
    2 repo stars
55. ▌
    Implementing Bgp Security With Rpki · yanacuti1121 bundle

    Implement BGP route origin validation using RPKI with Route Origin Authorizations, RPKI-to-Router protocol, and ROV policies on Cisco and Juniper routers to prevent route hijacking.
    2 repo stars
56. ▌
    Implementing Diamond Model Analysis · yanacuti1121 bundle

    The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features - Adversary, Capability, Infrastructure, and Victim. This skill covers implementing the Diamond Model programmatically to classify and correlate intrusion events, build activity threads, and generate pivot-ready intelligence.
    2 repo stars
57. ▌
    Implementing GCP Vpc Firewall Rules · yanacuti1121 bundle

    Implementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egress traffic, apply hierarchical firewall policies across the organization, and monitor firewall rule effectiveness using VPC Flow Logs.
    2 repo stars
58. ▌
    Implementing Network Access Control · yanacuti1121 bundle

    Implements 802.1X port-based network access control using RADIUS authentication, PacketFence NAC, and switch configurations to enforce identity-based access policies, posture assessment, and automatic VLAN assignment for authorized devices.
    2 repo stars
59. ▌
    Openai Cloudflare Durable Objects · yanacuti1121

    Create and review Cloudflare Durable Objects. Use when building stateful coordination (chat rooms, multiplayer games, booking systems), implementing RPC methods, SQLite storage, alarms, WebSockets, or reviewing DO code for best practices. Covers Workers integration, wrangler config, and testing with Vitest. Biases towards retrieval from Cloudflare docs over pre-trained knowledge.
    2 repo stars
60. ▌
    Openai Codex Security Fix Finding · yanacuti1121

    Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
    2 repo stars
61. ▌
    Openai Github Gh Address Comments · yanacuti1121 bundle

    Address actionable GitHub pull request review feedback. Use when the user wants to inspect unresolved review threads, requested changes, or inline review comments on a PR, then implement selected fixes. Use the GitHub app for PR metadata and flat comment reads, and use the bundled GraphQL script via `gh` whenever thread-level state, resolution status, or inline review context matters.
    2 repo stars
62. ▌
    Openai Superpowers Writing Skills · yanacuti1121

    Use when creating new skills, editing existing skills, or verifying skills work before deployment
    2 repo stars
63. ▌
    Performing API Fuzzing With Restler · yanacuti1121 bundle

    Uses Microsoft RESTler to perform stateful REST API fuzzing by automatically generating and executing test sequences that exercise API endpoints, discover producer-consumer dependencies between requests, and find security and reliability bugs. The tester compiles an OpenAPI specification into a RESTler fuzzing grammar, configures authentication, runs test/fuzz-lean/fuzz modes, and analyzes results for 500 errors, authentication bypasses, resource leaks, and payload injection vulnerabilities. Activates for requests involving API fuzzing, RESTler testing, stateful API testing, or automated API security scanning.
    2 repo stars
64. ▌
    Performing API Rate Limiting Bypass · yanacuti1121 bundle

    Tests API rate limiting implementations for bypass vulnerabilities by manipulating request headers, IP addresses, HTTP methods, API versions, and encoding schemes to circumvent request throttling controls. The tester identifies rate limit headers, determines enforcement mechanisms, and attempts bypasses including X-Forwarded-For spoofing, parameter pollution, case variation, and endpoint path manipulation. Maps to OWASP API4:2023 Unrestricted Resource Consumption. Activates for requests involving rate limit bypass, API throttling evasion, brute force protection testing, or API abuse prevention assessment.
    2 repo stars
65. ▌
    Performing Clickjacking Attack Test · yanacuti1121 bundle

    Testing web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
    2 repo stars
66. ▌
    Performing Fuzzing With Aflplusplus · yanacuti1121 bundle

    Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instruments target binaries with afl-cc/afl-clang-fast, manages input corpora with afl-cmin and afl-tmin, runs parallel fuzzing campaigns with afl-fuzz, and triages crashes using CASR or GDB scripts. Activates for requests involving binary fuzzing, crash discovery, coverage-guided testing, or AFL++ fuzzing campaigns.
    2 repo stars
67. ▌
    Performing Malware Triage With Yara · yanacuti1121 bundle

    Performs rapid malware triage and classification using YARA rules to match file patterns, strings, byte sequences, and structural characteristics against known malware families and suspicious indicators. Covers rule writing, scanning, and integration with analysis pipelines. Activates for requests involving YARA rule creation, malware classification, pattern matching, sample triage, or signature-based detection.
    2 repo stars
68. ▌
    Scanning Infrastructure With Nessus · yanacuti1121 bundle

    Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.
    2 repo stars
69. ▌
    Scanning Network With Nmap Advanced · yanacuti1121 bundle

    Performs advanced network reconnaissance using Nmap's scripting engine, timing controls, evasion techniques, and output parsing to discover hosts, enumerate services, detect vulnerabilities, and fingerprint operating systems across authorized target networks.
    2 repo stars
70. ▌
    Securing AWS Lambda Execution Roles · yanacuti1121 bundle

    Securing AWS Lambda execution roles by implementing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, using IAM Access Analyzer to validate permissions, and enforcing role scoping through SCPs.
    2 repo stars
71. ▌
    Founder Thought Leadership · yanacuti1121

    When the user wants to build personal brand, thought leadership, or IP as a founder on Twitter/X or LinkedIn. Also use when the user mentions "founder brand", "personal content", "build audience", or "grow my following".
    2 repo stars
72. ▌
    Testing For Sensitive Data Exposure · yanacuti1121 bundle

    Identifying sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.
    2 repo stars
73. ▌
    Testing Oauth2 Implementation Flaws · yanacuti1121 bundle

    Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass. The tester evaluates the authorization server, client application, and token handling for common misconfigurations that enable account takeover or unauthorized access. Activates for requests involving OAuth security testing, OIDC vulnerability assessment, OAuth2 redirect bypass, or authorization code flow testing.
    2 repo stars
74. ▌
    API And Interface Design · yanacuti1121

    Guides stable API and interface design. Use when designing APIs, module boundaries, or any public interface. Use when creating REST or GraphQL endpoints, defining type contracts between modules, or establishing boundaries between frontend and backend.
    2 repo stars
75. ▌
    Doubt Driven Development · yanacuti1121

    Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when correctness matters more than speed, when working in unfamiliar code, when stakes are high (production, security-sensitive logic, irreversible operations), or any time a confident output would be cheaper to verify now than to debug later.
    2 repo stars
76. ▌
    Performance Optimization · yanacuti1121

    Optimizes application performance. Use when performance requirements exist, when you suspect performance regressions, or when Core Web Vitals or load times need improvement. Use when profiling reveals bottlenecks that need fixing.
    2 repo stars
77. ▌
    Ms365 Tenant Manager · yanacuti1121

    Comprehensive Microsoft 365 tenant administration skill for setup, configuration, user management, security policies, and organizational structure optimization for Global Administrators
    2 repo stars
78. ▌
    Tech Stack Evaluator · yanacuti1121

    Comprehensive technology stack evaluation and comparison tool with TCO analysis, security assessment, and intelligent recommendations for engineering teams
    2 repo stars
79. ▌
    Analyzing Active Directory Acl Abuse · yanacuti1121 bundle

    Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
    2 repo stars
80. ▌
    Analyzing Docker Container Forensics · yanacuti1121 bundle

    Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
    2 repo stars
81. ▌
    Analyzing Golang Malware With Ghidra · yanacuti1121 bundle

    Reverse engineer Go-compiled malware using Ghidra with specialized scripts for function recovery, string extraction, and type reconstruction in stripped Go binaries.
    2 repo stars
82. ▌
    Analyzing Malicious Url With Urlscan · yanacuti1121 bundle

    URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolat
    2 repo stars
83. ▌
    Analyzing Network Packets With Scapy · yanacuti1121 bundle

    Craft, send, sniff, and dissect network packets using Scapy for protocol analysis, network reconnaissance, and traffic anomaly detection in authorized security testing
    2 repo stars
84. ▌
    Analyzing Network Traffic Of Malware · yanacuti1121 bundle

    Analyzes network traffic generated by malware during sandbox execution or live incident response to identify C2 protocols, data exfiltration channels, payload downloads, and lateral movement patterns using Wireshark, Zeek, and Suricata. Activates for requests involving malware network analysis, C2 traffic decoding, malware PCAP analysis, or network-based malware detection.
    2 repo stars
85. ▌
    Analyzing Ransomware Payment Wallets · yanacuti1121 bundle

    Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor, WalletExplorer, and blockchain.com APIs. Identifies wallet clusters, tracks fund movement through mixers and exchanges, and supports law enforcement attribution. Activates for requests involving ransomware payment tracing, bitcoin wallet analysis, cryptocurrency forensics, or blockchain intelligence gathering.
    2 repo stars
86. ▌
    Analyzing Threat Landscape With Misp · yanacuti1121 bundle

    Analyze the threat landscape using MISP (Malware Information Sharing Platform) by querying event statistics, attribute distributions, threat actor galaxy clusters, and tag trends over time. Uses PyMISP to pull event data, compute IOC type breakdowns, identify top threat actors and malware families, and generate threat landscape reports with temporal trends.
    2 repo stars
87. ▌
    Analyzing Windows Shellbag Artifacts · yanacuti1121 bundle

    Analyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags Explorer.
    2 repo stars
88. ▌
    Book The Pragmatic Programmer Full · yanacuti1121

    The Pragmatic Programmer (Hunt & Thomas) — Full rules — comprehensive mandatory coding standards. Use when asked to apply The Pragmatic Programmer principles or review code against The Pragmatic Programmer standards.
    2 repo stars
89. ▌
    Book The Pragmatic Programmer Mini · yanacuti1121

    The Pragmatic Programmer (Hunt & Thomas) — Condensed rules — key principles distilled. Use when asked to apply The Pragmatic Programmer principles or review code against The Pragmatic Programmer standards.
    2 repo stars
90. ▌
    Book The Pragmatic Programmer Nano · yanacuti1121

    The Pragmatic Programmer (Hunt & Thomas) — Minimal rules — essential one-liners only. Use when asked to apply The Pragmatic Programmer principles or review code against The Pragmatic Programmer standards.
    2 repo stars
91. ▌
    Building Incident Response Dashboard · yanacuti1121 bundle

    Builds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadership with situational awareness during active incidents, tracking affected systems, containment status, IOC spread, and response timeline. Use when IR teams need unified visibility during incident coordination and post-incident reporting.
    2 repo stars
92. ▌
    Building Soc Playbook For Ransomware · yanacuti1121 bundle

    Builds a structured SOC incident response playbook for ransomware attacks covering detection, containment, eradication, and recovery phases with specific SIEM queries, isolation procedures, and decision trees. Use when SOC teams need formalized response procedures for ransomware incidents aligned to NIST SP 800-61 and MITRE ATT&CK ransomware techniques.
    2 repo stars
93. ▌
    Conducting Cloud Penetration Testing · yanacuti1121 bundle

    This skill outlines methodologies for performing authorized penetration testing against AWS, Azure, and GCP cloud environments. It covers understanding the shared responsibility model for testing scope, leveraging cloud-specific attack tools like Pacu and ScoutSuite, exploiting IAM misconfigurations, testing for SSRF to cloud metadata services, and reporting findings aligned to MITRE ATT&CK Cloud matrix.
    2 repo stars
94. ▌
    SEO Technical · yanacuti1121

    When the user needs a technical SEO audit, on-page optimization guidance, or help resolving crawlability, indexation, or performance issues that affect search rankings.
    2 repo stars
95. ▌
    The Pirate Bay · yanacuti1121

    Search The Pirate Bay for torrents and extract magnet links via the apibay.org JSON API. Use when asked to "find a torrent", "search pirate bay", "get a magnet link", "download torrent", "find seeders", "top torrents", or any torrent search task. Can operate via CLI tool or direct API calls.
    2 repo stars
96. ▌
    Venice Venice Augment · yanacuti1121

    Venice augmentation endpoints for agent pipelines. Covers POST /augment/text-parser (extract text from PDF/DOCX/XLSX/plain text, multipart, up to 25MB, JSON or plain text response), POST /augment/scrape (fetch a URL and return markdown; blocks X/Reddit), and POST /augment/search (Brave ZDR or anonym
    2 repo stars
97. ▌
    Venice Venice Billing · yanacuti1121

    Venice billing and usage analytics - GET /billing/balance, GET /billing/usage (paginated per-request ledger, JSON or CSV), and GET /billing/usage-analytics (aggregated by date/model/key). Covers the DIEM/USD/BUNDLED_CREDITS consumption priority and building dashboards. (Beta)
    2 repo stars
98. ▌
    Idea Refine · yanacuti1121

    Refines raw ideas into sharp, actionable concepts through structured divergent and convergent thinking. Use when an idea is still vague, when you need to stress-test assumptions before committing to a plan, or when you want to expand options before converging on one. Triggers on "ideate", "refine this idea", or "stress-test my plan".
    2 repo stars
99. ▌
    AI Code Maintainability · yanacuti1121

    Write production-safe code that survives maintenance — avoid the 15 patterns AI agents commonly generate that work on day 1 but break 3 months later; enforce error handling, logging, type safety, no magic values, and testable structure before writing any code.
    2 repo stars
100. ▌
     AI System Prompts Intel · yanacuti1121

     Intelligence on leaked/published system prompts from 30+ AI coding tools (Cursor, Windsurf, Claude Code, GitHub Copilot, Devin, v0, Lovable, Replit, Warp) and general chat products (Claude, ChatGPT, Gemini, Grok, Perplexity, Mistral, Notion AI). Use for competitive analysis, prompt engineering research, understanding how other tools/products instruct their models. Triggers on: 'system prompt of cursor', 'windsurf system prompt', 'claude code prompt', 'copilot system prompt', 'devin prompt', 'AI tool system prompt', 'leaked AI prompts', 'how cursor instructs AI', 'competitive prompt analysis', 'prompt engineering research', 'v0 system prompt', 'replit agent prompt', 'chatgpt system prompt', 'gemini system prompt', 'grok system prompt', 'how does claude.ai instruct itself'.
     2 repo stars