Claude Skills by yanacuti1121

Automate credential rotation for service accounts across Active Directory,

Perform security testing of SOAP web services by analyzing WSDL definitions

'Performs tabletop exercises for SOC teams simulating security incidents

'Automates SOC 2 Type II audit preparation including gap assessment against

Perform forensic analysis of SQLite databases to recover deleted records

SSL/TLS certificate lifecycle management encompasses the full process

'Simulates SSL stripping attacks using sslstrip, Bettercap, and mitmproxy

Configure SSL/TLS inspection on network security devices to decrypt,

Assess SSL/TLS server configurations using the sslyze Python library

Test for Server-Side Request Forgery vulnerabilities by probing cloud

'Performs static analysis of Windows PE (Portable Executable) malware

Detect and extract hidden data embedded in images, audio, and other media

Enumerate subdomains of target domains using ProjectDiscovery's Subfinder

Simulate and detect software supply chain attacks including typosquatting

Conduct a thick client application penetration test to identify insecure

'Executes Atomic Red Team tests for MITRE ATT&CK technique validation

'Performs proactive threat hunting in Elastic Security SIEM using KQL/EQL

'Use YARA pattern-matching rules to hunt for malware, suspicious files,

Use PyMISP to create, enrich, and share threat intelligence events on

Conduct a sector-specific threat landscape assessment by analyzing threat

Use OWASP Threat Dragon to create data flow diagrams, identify threats

Build comprehensive forensic super-timelines using Plaso (log2timeline)

'Performs User and Entity Behavior Analytics (UEBA) to detect anomalous

'Simulates VLAN hopping attacks using switch spoofing and double tagging

'Performs authenticated and unauthenticated vulnerability scanning using

Bypass Web Application Firewall protections using encoding techniques,

'Performs systematic security testing of web applications following the

Nikto is an open-source web server and web application scanner that tests

Triage web application vulnerability findings from DAST/SAST scanners

Execute web cache deception attacks by exploiting path normalization

Exploiting web cache mechanisms to serve malicious content to other users

'Captures WPA/WPA2 handshakes and performs offline password cracking

Perform comprehensive Windows forensic artifact analysis using Eric Zimmerman's

Execute a wireless network penetration test to assess WiFi security by

Conduct wireless network security assessments using Kismet to detect

Develop precise YARA rules for malware detection by identifying unique

Self-hosted AI workspace — Chat, Agent, Email IMAP AI triage, Deep Research, Calendar, Memory/Skills. Dùng khi cần build hoặc self-host một AI assistant đầy đủ tính năng.

Use when asked to create or generate a video automatically from a topic, text, or idea. Triggers on: 'tạo video', 'generate video', 'make a video about', 'video từ chủ đề', 'short video', 'create reel', 'pixelle', 'video tự động', 'video AI'. Requires Pixelle-Video server running locally (docker-compose or pip install).

Use before touching any code when user gives a task, spec, or feature request. Forces writing a plan before implementation. Examples: 'implement X', 'add feature Y', 'fix Z and also update A', any multi-step task that would touch 2+ files.

YAGNI-first code-minimalism ladder — before writing code, check in order: does this need to exist? already in the codebase? stdlib? native platform feature? installed dependency? one line? Cuts unnecessary code/tokens while never trading away validation, error handling, security, or accessibility. Triggers on: 'ponytail mode', 'write minimal code', 'don't over-engineer this', 'yagni', 'is there already something for this', 'use native instead of a library', 'keep this simple', 'fewest lines p...

Portkey AI gateway — unified LLM API, load balancing, fallbacks, caching, guardrails, observability

CouchDB-compatible bidirectional sync for agent memory. PouchDB local-first patterns, live replication, conflict resolution, change feeds, and filtered sync for multi-device agent state. Sources: pouchdb/pouchdb.

Back up conversation transcript before context compaction. Use when: PreCompact hook fires, user asks to save session state, or before long tasks where context loss would be costly. Creates timestamped backup in logs/transcript_backups/. Inspired by: disler/claude-code-hooks-mastery pre_compact pattern.

Research prediction markets as data sources or oracle signals for products, agents, dashboards, and corporate decision intelligence. Use for source-grounded analysis of market-implied probabilities, caveats, and integration patterns without investment advice.

Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk. Use before any workflow handles venue auth, user portfolio data, API keys, or trade planning.

The Common Vulnerability Scoring System (CVSS) is the industry standard

Prisma ORM patterns for TypeScript backends — schema design, query optimization, transactions, pagination, and critical traps like updateMany returning count not records, $transaction timeouts, migrate dev resetting the DB, @updatedAt skipped on bulk writes, and serverless connection exhaustion.

Nanosecond-speed process existence check by PID. sindresorhus/process-exists patterns, cross-platform PID validation, zombie detection, and watchdog loop for monitoring long-running agent sandboxes. Sources: sindresorhus/process-exists.

System process list monitoring and PID management for agent sandboxes. Cross-platform process enumeration, CPU/memory per-process metrics, filtering by name/PID, and detecting unexpected child spawns. Sources: sindresorhus/ps-list.

'Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1