Agent skills for Gemini CLI

Identify ransomware-related network indicators, including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and…

Investigate supply chain attack artifacts including trojanized software

This skill enables Claude to analyze the sentiment of text data.

Systematically map threat actor behavior and observed IOCs to the MITRE ATT&CK framework, build technique coverage heatmaps with the…

Analyzes structured and unstructured threat intelligence feeds to extract

Query a MISP (Malware Information Sharing Platform) instance via PyMISP

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect

Generate domain permutations with dnstwist and check DNS resolution

Analyzes UEFI bootkit persistence (SPI flash implants, ESP modifications,

Analyze unfamiliar codebases systematically to produce subsystem catalog entries - emphasizes strict contract compliance and confidence…

Correlate Windows registry keys (USBSTOR, MountedDevices), Event Logs,

Parse Apache and Nginx access logs to detect SQL injection attempts,

Parses the Windows Amcache.hve registry hive with Eric Zimmerman''s

Analyzes Windows Security, System, and Sysmon event logs in Splunk to

Parse Windows LNK shortcut files to extract target paths, MAC timestamps,

Parse Windows Prefetch (.pf) files with the windowsprefetch Python

Analyze Windows Shellbag (BagMRU) registry artifacts with SBECmd and

Automate Anchor Browser tasks via Rube MCP (Composio).

Build ghost-in-the-machine sci-fi story spines.

Agente que simula Andrej Karpathy — ex-Director of AI da Tesla, co-fundador da OpenAI, fundador da Eureka Labs, e o maior educador de deep…

Trigger: risk assessment, refactor risk.