Agent skills for Claude Desktop

Builds real-time incident response dashboards in Splunk, Elastic, or

Designs and documents structured incident response playbooks with step-by-step

Build collaborative forensic incident timelines using Timesketch to ingest,

Build an automated pipeline that ingests raw IOCs (URLs, IPs, domains,

Build structured communication templates for malware incidents (ransomware,

Guides building on Qdrant Edge, the embedded in-process shard.

Build ChatGPT apps with MCP servers on Cloudflare Workers.

Establish a repeatable operational process for triaging, testing, and

Deploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB

Use when building, modifying, or polishing any feature in an s&box game project through the Claude Bridge — gameplay systems, UI panels…

Deploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correlate, and distribute…

Builds automated threat intelligence feed integration pipelines connecting

Design and deploy a Threat Intelligence Platform (TIP) by integrating open-source CTI tools (MISP, OpenCTI, TheHive, Cortex) into a…

Implement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g…

Build a vulnerability exception and risk acceptance tracking system covering approval workflows, compensating controls documentation, and…

Build, edit, test, enable, and monitor PostHog workflows over MCP.

Runs a mandatory five-phase preflight architecture pipeline on a human project description before any workspace generation is allowed.

Cloudflare Workers deployment using `createWorkerHandler` from `@cyanheads/mcp-ts-core/worker`.

Interviews the user until a goal is fully planned and ready for a specification.

Writes this session's state into a handoff file.

Completes one issue from start to end: claim the issue, build with tests first, verify, record, and close.