# Skills Navigation Graph - Source repo: `architectonic/skills` - Source ref: `a601a56cb2f9605b1c64ae90440da04d871c2fff` - Nodes: **1337** - Leaves: **1266** - Browse default visible: **96** - Browse default hidden: **1170** - Supersession edges: **3** Discovery-only navigation surface. `browse_default=true` means show in default browse; it does not grant runtime authority. - **Architectonic Skills** (root) - **Reviewed core** (section) - **Grounding and collaboration** (group) - Controlled Technical Writing (`controlled-technical-writing`) — visible - Document-Guided Organization Bootstrap (`document-guided-organization-bootstrap`) — visible - Source Grounding (`source-grounding`) — visible - Assumption Grilling (`assumption-grilling`) — visible - Agent Handoff (`agent-handoff`) — visible - Architecture Review (`architecture-review`) — visible - **Adaptive systems** (group) - Adaptive Composition (`adaptive-composition`) — visible - Knowledge Lifecycle Design (`knowledge-lifecycle-design`) — visible - Source-First Wiki Compilation (`source-first-wiki`) — visible - Second-Brain Distillation (`second-brain-distillation`) — visible - Loop Engineering (`loop-engineering`) — visible - Graph Projection (`graph-projection`) — visible - Public Skill Adoption (`public-skill-adoption`) — visible - **Reviewed packs** (section) - **Marketing Top 50 Skills Pack** (pack) - Marketing Orchestrator (`marketing-orchestrator`) — visible - **Brand** (category) - Brand Voice Guide (`brand-voice-guide`) — visible - Institutional Copy Review (`institutional-copy-review`) — visible - Social Media Strategy (`social-media-strategy`) — visible - Community Growth (`community-growth`) — visible - Copy Consistency Audit (`copy-consistency-audit`) — visible - **Copy** (category) - Headline Formulas (`headline-formulas`) — visible - Hero Section Copy (`hero-section`) — visible - Landing Page Copy (`landing-page-copy`) — visible - Scroll-Stopping Hooks (`scroll-stopping-hooks`) — visible - Direct Response Copy (`direct-response-copy`) — visible - CTA Optimizer (`cta-optimizer`) — visible - Proof Stack Assembler (`proof-stack`) — visible - FAQ Objection Handler (`faq-objection-handler`) — visible - **Funnel** (category) - Full Funnel Architect (`full-funnel-architect`) — visible - Funnel Validator (`funnel-validator`) — visible - Message Match Audit (`message-match-audit`) — visible - Conversion Math (`conversion-math`) — visible - Email Nurture Sequence (`email-nurture-sequence`) — visible - Productize Offer Ladder (`productize-offer-ladder`) — visible - **Market** (category) - Market Research (`market-research`) — visible - Dream Buyer Profile (`dream-buyer-profile`) — visible - Customer Language & VOC (`customer-language-voc`) — visible - Competitive Positioning (`competitive-positioning`) — visible - ICP Definition (`icp-definition`) — visible - **Offer** (category) - Grand Slam Offer (`grand-slam-offer`) — visible - Offer Audit (`offer-audit`) — visible - Offer Angles (`offer-angles`) — visible - Irresistible Lead Magnet (`irresistible-lead-magnet`) — visible - Godfather Offer Stack (`godfather-offer-stack`) — visible - Business Model Design (`business-model-design`) — visible - DFY / DWY / DIY Selector (`dfy-dwy-diy-selector`) — visible - **Pricing** (category) - Value Perception (`value-perception`) — visible - Bonus Stack (`bonus-stack`) — visible - Pricing Strategy (`pricing-strategy`) — visible - Objection Destroyer (`objection-destroyer`) — visible - Value Equation Optimizer (`value-equation-optimizer`) — visible - **Sales** (category) - Hormozi Pitch (`hormozi-pitch`) — visible - VSL Script Outline (`vsl-script-outline`) — visible - High-Ticket Sales Script (`high-ticket-sales-script`) — visible - **Seo** (category) - SEO Project Context (`seo-project-context`) — visible - SEO Keyword Opportunity Research (`seo-keyword-research`) — visible - SEO Keyword-to-Page Mapping (`seo-keyword-page-mapping`) — visible - SEO Competitive Research (`seo-competitive-research`) — visible - SEO Link Prospecting (`seo-link-prospecting`) — visible - Technical SEO Audit (`technical-seo-audit`) — visible - Site Architecture (`site-architecture`) — visible - On-Page SEO (`on-page-seo`) — visible - AI Search Visibility Audit (`ai-search-visibility`) — visible - GEO Content Research (`geo-content-research`) — visible - SERP Intent Match (`serp-intent-match`) — visible - **Code Intelligence** (pack) - Codebase Structural Map (`codebase-structural-map`) — visible - Change Impact Review (`change-impact-review`) — visible - **SEO and Visibility** (pack) - SEO Project Context (`seo-project-context`) — visible - SEO Keyword Opportunity Research (`seo-keyword-opportunity-research`) — visible - SEO Competitive Research (`seo-competitive-research`) — visible - AI Search Visibility Audit (`ai-search-visibility-audit`) — visible - SEO Keyword-to-Page Mapping (`seo-keyword-page-mapping`) — visible - SEO Link Prospecting (`seo-link-prospecting`) — visible - **Agent Operations** (pack) - Source Review (`source-review`) — visible - Intent to Contract (`intent-to-contract`) — visible - Validation-Gated Skill Improvement (`validation-gated-skill-improvement`) — visible - Shared Skill Library Governance (`shared-skill-library-governance`) — visible - MCP External Tool Security Review (`mcp-external-tool-security-review`) — visible - Mission-Grounded Learning Workspace (`mission-grounded-learning-workspace`) — visible - **Design and Interface** (pack) - Interface Design (`interface-design`) — visible - Interface Quality Audit (`interface-quality-audit`) — visible - Interface Transition Review (`interface-transition-review`) — visible - **Research and Evidence** (pack) - Recent Source Research (`recent-source-research`) — visible - **Media Production** (pack) - Programmatic Video Production (`programmatic-video-production`) — visible - **Distribution catalog** (section) - **Agent Operations** (category) - **Playbook** (group) - Agent Context Validation (`agent-context-validation`) — hidden - Agent Development for Claude Code Plugins (`agent-development`) — hidden - Agent Handoff (`agent-handoff`) — hidden - agent-memory-system (`agent-memory-system`) — hidden - Agent Operating Loop (`agent-operating-loop`) — hidden - Agent Skill and Agentic Coding Configuration Studies (`agent-skill-configuration`) — hidden - Agent Skill Portability and Security Studies (`agent-skill-portability`) — hidden - Agent Instruction File Improver (`agents-md-improver`) — hidden - Agent-Friendly CLI Spec (`ai-native-cli`) — hidden - Authoring Agent Skills (`authoring-agent-skills`) — hidden - Authority Model (`Authority Model`) — hidden - Autonomy Loop (`Autonomy Loop`) — hidden - Autoresearch Loop (`Autoresearch Loop`) — hidden - Bash Defensive Patterns (`Bash Defensive Patterns`) — hidden - browse (`browse`) — hidden - Canonicalization (`Canonicalization`) — hidden - Capture — Single Ingestion Entrypoint (`Capture`) — hidden - Careful (`Careful`) — hidden - Clarity Gate (`clarity-gate`) — hidden - Code Tour (`Code Tour Generation`) — hidden - codex (`codex`) — hidden - Collaboration Principles (`Collaboration Principles`) — hidden - completion-standards (`completion-standards`) — hidden - Construction Discipline (`construction-discipline`) — hidden - Context Compression Strategies (`context-compression`) — hidden - context-restore (`context-restore`) — hidden - Context Save (`Context Save`) — hidden - Context Window Management (`context-window-management`) — hidden - Cross-Session Handoff (`cross-session-handoff`) — hidden - Decision Principles (`Decision Principles`) — hidden - Define Goal (`Define Goal`) — hidden - doctrine-upkeep (`doctrine-upkeep`) — hidden - Domain Modeling (`Domain Modeling`) — hidden - Dream Cycle (`Dream Cycle`) — hidden - Engineering Agent Harnesses (`engineering-agent-harnesses`) — hidden - Engineering Context Windows (`engineering-context-windows`) — hidden - Engineering Loop Contracts (`engineering-loop-contracts`) — hidden - Evaluating Skills Before Authoring (`evaluating-skills-before-authoring`) — hidden - external-system-mutation (`external system mutation`) — hidden - Frontier Agent Governance (`Frontier Agent Governance`) — hidden - Full-Output Enforcement (`full-output-enforcement`) — hidden - Gating Work With Verification Loops (`gating-work-with-verification-loops`) — hidden - Graphify Onboarding (`Graphify Onboarding`) — visible - gstack (`gstack`) — hidden - gui-skill-action-graph (`gui-skill-action-graph`) — hidden - handoff (`handoff`) — hidden - identity-upkeep (`identity-upkeep`) — hidden - Issue Triage (`Issue Triage`) — hidden - Knowledge Ops — SOP/Runbook Authoring and KB Hygiene (`Knowledge Ops — SOP/Runbook Authoring and KB Hygiene`) — hidden - learn (`learn`) — hidden - Legacy Code Safety (`legacy-code-safety`) — hidden - Legacy Modernizer (`Legacy Modernizer`) — hidden - LLM Cost Optimizer (`llm-cost-optimizer`) — hidden - Managed Agent Launch (`managed-agent-launch-cma`) — hidden - Memory Lifecycle (`Memory Lifecycle`) — hidden - Memory Substrate Checklist (`Memory Substrate Checklist`) — hidden - Minimal Fix (`Minimal Fix`) — hidden - Minimum Viable Memory System (`Minimum Viable Memory System`) — hidden - Multi-Agent Architecture Patterns (`Multi-Agent Architecture Patterns`) — hidden - office-hours (`office-hours`) — hidden - Ontology (`Ontology`) — hidden - open-gstack-browser (`open-gstack-browser`) — hidden - Source Code Fetching with OpenSrc (`OpenSrc`) — hidden - Orchestrate Batch Refactor (`Orchestrate Batch Refactor`) — hidden - pair-agent (`pair-agent`) — hidden - plan-ceo-review (`plan-ceo-review`) — hidden - Pragmatic Engineering (`pragmatic-engineering`) — hidden - Process Mapper — BPMN Documentation and Bottleneck Analysis (`Process Mapper — BPMN Documentation and Bottleneck Analysis`) — hidden - Project Onboarding (`Project Onboarding`) — hidden - project-upkeep (`project-upkeep`) — hidden - QA Gauntlet (`QA Gauntlet`) — hidden - Reasoning Principles (`Reasoning Principles`) — hidden - regulated-domain-skill-governance (`regulated-domain-skill-governance`) — hidden - Repo Contract (`Repo Contract`) — hidden - repo-discovery (`repo discovery`) — hidden - retro (`retro`) — hidden - Scaffold Exercises (`scaffold-exercises`) — hidden - Security Review (`Security Review`) — hidden - setup-browser-cookies (`setup-browser-cookies`) — hidden - Sharp Edges Analysis (`Sharp Edges Analysis`) — hidden - Signal Detector — Ambient Capture (`Signal Detector`) — hidden - hermes-agent-skill-authoring (`hermes-agent-skill-authoring`) — hidden - Skill Creation Process (`skill-creation`) — hidden - Skill Development (`Skill Development`) — hidden - skill-distillation (`skill-distillation`) — hidden - Skill Library Maintenance (`Skill Library Maintenance`) — hidden - Skill Model (`Skill Model`) — hidden - Skill Optimization Loop (`skill-optimization-loop`) — hidden - skill-quality-gate (`skill-quality-gate`) — hidden - skill-revision (`skill-revision`) — hidden - Skill Safety Review (`Skill Safety Review`) — hidden - skillify (`skillify`) — hidden - Catalog and Categorize Agent Skills (`skills-catalog`) — hidden - Keep Skills Healthy (`skills-keep`) — hidden - skills-upkeep (`skills-upkeep`) — hidden - Source Hierarchy (`Source Hierarchy`) — hidden - teleagent-system-upkeep (`teleagent-system-upkeep`) — hidden - Tool Use Guardrails (`Tool Use Guardrails`) — hidden - Trace2Skill (`trace2skill`) — hidden - Trace2Skill — Skill Evolution from Execution Trajectories (`Trace2Skill — Skill Evolution from Execution Trajectories`) — hidden - Vertical Slice Issues (`vertical-slice-issues`) — hidden - writing-great-skills (`writing-great-skills`) — hidden - **Reference** (group) - loop-me (`loop-me`) — hidden - Preferences Model (`Preferences Model`) — hidden - skill-authoring-doctrine (`skill-authoring-doctrine`) — hidden - **Skill** (group) - Command Basics (`Command Basics`) — hidden - Command Development (`Command Development`) — hidden - Command Dynamic Features (`Command Dynamic Features`) — hidden - Command Frontmatter (`Command Frontmatter`) — hidden - Command Organization (`Command Organization`) — hidden - Hook Basics (`Hook Basics`) — hidden - Hook Events (`Hook Events`) — hidden - Mission-Grounded Learning Workspace (`mission-grounded-learning-workspace`) — hidden - Project Skill Audit (`Project Skill Audit`) — hidden - Shared Skill Library Governance (`shared-skill-library-governance`) — hidden - Skill Structure (`Skill Structure`) — hidden - Skill Validation Checklist (`Skill Validation Checklist`) — hidden - Validation-Gated Skill Improvement (`validation-gated-skill-improvement`) — hidden - **Workflow** (group) - Completion Contract Loop (`Completion Contract Loop`) — hidden - Fresh Clone Loop (`Fresh Clone Loop`) — hidden - Planning with Files (`Planning with Files`) — hidden - Teaching Workspace (`Teaching Workspace`) — hidden - **Business** (category) - **Playbook** (group) - Acceptance Orchestrator (`acceptance-orchestrator`) — hidden - Achieving CMMC Level 2 Compliance (`achieving-cmmc-level-2-compliance`) — hidden - Analyzing Ethereum Smart Contract Vulnerabilities (`Analyzing Ethereum Smart Contract Vulnerabilities`) — hidden - Analyzing Network Packets with Scapy (`Analyzing Network Packets with Scapy`) — hidden - Building Patch Tuesday Response Process (`Building Patch Tuesday Response Process`) — hidden - Building Role Mining for RBAC Optimization (`Building Role Mining for RBAC Optimization`) — hidden - Change Management Playbook (`change-management`) — hidden - Channel Economics (`channel-economics`) — hidden - Compliance OS — Multi-Framework Compliance Orchestration (`Compliance OS — Multi-Framework Compliance Orchestration`) — hidden - Configuring Identity-Aware Proxy with Google IAP (`Configuring Identity-Aware Proxy with Google IAP`) — hidden - grilling (`grilling`) — hidden - YC Office Hours (`gstack-openclaw-office-hours`) — hidden - Implementing Application Whitelisting with AppLocker (`Implementing Application Whitelisting with AppLocker`) — hidden - Implementing Conduit Security for OT Remote Access (`Implementing Conduit Security for OT Remote Access`) — hidden - Implementing Container Network Policies with Calico (`Implementing Container Network Policies with Calico`) — hidden - Implementing Endpoint DLP Controls (`Implementing Endpoint DLP Controls`) — hidden - Implementing GCP Organization Policy Constraints (`Implementing GCP Organization Policy Constraints`) — hidden - Implementing GDPR Data Protection Controls (`Implementing GDPR Data Protection Controls`) — hidden - Implementing ICS Firewall with Tofino (`Implementing ICS Firewall with Tofino`) — hidden - Implementing Identity Governance with SailPoint (`Implementing Identity Governance with SailPoint`) — hidden - Implementing ISO 27001 Information Security Management (`Implementing ISO 27001 Information Security Management`) — hidden - Implementing Just-In-Time Access Provisioning (`Implementing Just-In-Time Access Provisioning`) — hidden - Implementing Passwordless Authentication with FIDO2 (`Implementing Passwordless Authentication with FIDO2`) — hidden - Implementing Patch Management for OT Systems (`Implementing Patch Management for OT Systems`) — hidden - Implementing Purdue Model Network Segmentation (`Implementing Purdue Model Network Segmentation`) — hidden - Implementing Zero Trust with BeyondCorp (`Implementing Zero Trust with BeyondCorp`) — hidden - Loop Engineering (`Loop Engineering`) — hidden - Marketplace Skill Triage (`marketplace-skill-triage`) — hidden - Partnerships Architect (`partnerships-architect`) — hidden - Performing Access Recertification with Saviynt (`Performing Access Recertification with Saviynt`) — hidden - Performing Access Review and Certification (`Performing Access Review and Certification`) — hidden - Performing Entitlement Review with SailPoint IdentityIQ (`Performing Entitlement Review with SailPoint IdentityIQ`) — hidden - Performing ICS Asset Discovery with Claroty (`Performing ICS Asset Discovery with Claroty`) — hidden - Performing Insider Threat Investigation (`Performing Insider Threat Investigation`) — hidden - Performing NIST CSF Maturity Assessment (`Performing NIST CSF Maturity Assessment`) — hidden - Performing Oil & Gas Cybersecurity Assessment (`Performing Oil & Gas Cybersecurity Assessment`) — hidden - Performing Privacy Impact Assessment (`Performing Privacy Impact Assessment`) — hidden - Performing SOC 2 Type II Audit Preparation (`Performing SOC 2 Type II Audit Preparation`) — hidden - Procurement Optimizer — Spend Categorization and Supplier Rationalization (`Procurement Optimizer — Spend Categorization and Supplier Rationalization`) — hidden - request-refactor-plan (`request-refactor-plan`) — hidden - Revenue Operations (`SaaS Revenue Operations`) — hidden - Securing Historian Server in OT Environment (`Securing Historian Server in OT Environment`) — hidden - Setup Matt Pocock's Skills (`setup-matt-pocock-skills`) — hidden - teach (`teach`) — hidden - To Issues (`to-issues`) — hidden - to-prd (`to-prd`) — hidden - Ubiquitous Language (`ubiquitous-language`) — hidden - Vendor Management — Scorecard, SLA Tracking, and Third-Party Risk (`Vendor Management — Scorecard, SLA Tracking, and Third-Party Risk`) — hidden - **Skill** (group) - AI SEO (`ai-seo`) — hidden - **Workflow** (group) - Competitive Intelligence (`competitive-intel`) — visible - landing-report (`landing-report`) — hidden - Meeting Intelligence (`meeting-intelligence`) — hidden - **Cloud Security** (category) - **Playbook** (group) - Analyzing Azure Activity Logs for Threats (`Analyzing Azure Activity Logs for Threats`) — hidden - Analyzing Cloud Storage Access Patterns (`Analyzing Cloud Storage Access Patterns`) — hidden - Analyzing Kubernetes Audit Logs (`analyzing-kubernetes-audit-logs`) — hidden - Auditing AWS S3 Bucket Permissions (`Auditing AWS S3 Bucket Permissions`) — hidden - Auditing Azure Active Directory Configuration (`Auditing Azure Active Directory Configuration`) — hidden - Auditing GCP IAM Permissions (`Auditing GCP IAM Permissions`) — hidden - Auditing Kubernetes Cluster RBAC (`Auditing Kubernetes Cluster RBAC`) — hidden - Configuring AWS Verified Access for ZTNA (`Configuring AWS Verified Access for ZTNA`) — hidden - Detecting AWS IAM Privilege Escalation (`Detecting AWS IAM Privilege Escalation`) — hidden - Detecting Azure Lateral Movement (`Detecting Azure Lateral Movement`) — hidden - Detecting Azure Storage Account Misconfigurations (`Detecting Azure Storage Account Misconfigurations`) — hidden - Detecting Compromised Cloud Credentials (`Detecting Compromised Cloud Credentials`) — hidden - Detecting Misconfigured Azure Storage (`Detecting Misconfigured Azure Storage`) — hidden - Detecting S3 Data Exfiltration Attempts (`Detecting S3 Data Exfiltration Attempts`) — hidden - Detecting Shadow IT Cloud Usage (`Detecting Shadow IT Cloud Usage`) — hidden - Emulating Cloud Attacks with Stratus Red Team (`Emulating Cloud Attacks with Stratus Red Team`) — hidden - Implementing AWS Config Rules for Compliance (`Implementing AWS Config Rules for Compliance`) — hidden - Implementing AWS IAM Permission Boundaries (`Implementing AWS IAM Permission Boundaries`) — hidden - Implementing AWS Macie for Data Classification (`Implementing AWS Macie for Data Classification`) — hidden - Implementing AWS Security Hub (`Implementing AWS Security Hub`) — hidden - Implementing Azure Defender for Cloud (`Implementing Azure Defender for Cloud`) — hidden - Implementing Cloud DLP for Data Protection (`Implementing Cloud DLP for Data Protection`) — hidden - Implementing CloudTrail Log Analysis (`Implementing CloudTrail Log Analysis`) — hidden - Implementing Cloud Vulnerability Posture Management (`Implementing Cloud Vulnerability Posture Management`) — hidden - Implementing Cloud WAF Rules (`Implementing Cloud WAF Rules`) — hidden - Implementing Conditional Access Policies in Azure AD (`Implementing Conditional Access Policies in Azure AD`) — hidden - Implementing Envelope Encryption with AWS KMS (`Implementing Envelope Encryption with AWS KMS`) — hidden - Implementing GCP VPC Firewall Rules (`Implementing GCP VPC Firewall Rules`) — hidden - Implementing Google Workspace Admin Security (`Implementing Google Workspace Admin Security`) — hidden - Implementing Security Monitoring with Datadog (`Implementing Security Monitoring with Datadog`) — hidden - Implementing Zero Standing Privilege with CyberArk (`Implementing Zero Standing Privilege with CyberArk`) — hidden - Implementing Zero Trust Network Access (`Implementing Zero Trust Network Access`) — hidden - Performing AWS Account Enumeration with ScoutSuite (`Performing AWS Account Enumeration with ScoutSuite`) — hidden - Performing AWS Privilege Escalation Assessment (`Performing AWS Privilege Escalation Assessment`) — hidden - Performing Cloud Asset Inventory with Cartography (`Performing Cloud Asset Inventory with Cartography`) — hidden - Performing Cloud Forensics with AWS CloudTrail (`Performing Cloud Forensics with AWS CloudTrail`) — hidden - Performing Cloud Incident Containment Procedures (`Performing Cloud Incident Containment Procedures`) — hidden - Performing Cloud-Native Threat Hunting with AWS Detective (`Performing Cloud-Native Threat Hunting with AWS Detective`) — hidden - Performing Cloud Penetration Testing with Pacu (`Performing Cloud Penetration Testing with Pacu`) — hidden - Performing GCP Security Assessment with Forseti (`Performing GCP Security Assessment with Forseti`) — hidden - Remediating S3 Bucket Misconfiguration (`Remediating S3 Bucket Misconfiguration`) — hidden - Securing AWS Lambda Execution Roles (`Securing AWS Lambda Execution Roles`) — hidden - **Design** (category) - **Playbook** (group) - Accessibility Audit (`a11y-audit`) — hidden - Analyzing SBOM for Supply Chain Vulnerabilities (`Analyzing SBOM for Supply Chain Vulnerabilities`) — hidden - Ask Matt (`ask-matt`) — hidden - Configuring TLS 1.3 for Secure Communications (`Configuring TLS 1.3 for Secure Communications`) — hidden - Database Design (`Database Design`) — hidden - Dependency Auditor (`dependency-auditor`) — hidden - Design an Interface (`design-an-interface`) — hidden - design-consultation (`design-consultation`) — hidden - design-html (`design-html`) — hidden - design-shotgun (`design-shotgun`) — hidden - Detecting Port Scanning with Fail2ban (`Detecting Port Scanning with Fail2ban`) — hidden - Embedded Captions (`embedded-captions`) — hidden - Exploiting BGP Hijacking Vulnerabilities (`Exploiting BGP Hijacking Vulnerabilities`) — hidden - Exploiting Deep Link Vulnerabilities (`Exploiting Deep Link Vulnerabilities`) — hidden - Generating and Analyzing SBOMs (`Generating and Analyzing SBOMs`) — hidden - Implementing AES Encryption for Data at Rest (`Implementing AES Encryption for Data at Rest`) — hidden - Implementing API Threat Protection with Apigee (`Implementing API Threat Protection with Apigee`) — hidden - Implementing Azure AD Privileged Identity Management (`Implementing Azure AD Privileged Identity Management`) — hidden - Implementing BGP Security with RPKI (`Implementing BGP Security with RPKI`) — hidden - Implementing Google Workspace SSO Configuration (`Implementing Google Workspace SSO Configuration`) — hidden - Implementing Image Provenance Verification with Cosign (`Implementing Image Provenance Verification with Cosign`) — hidden - Implementing SAML SSO with Okta (`Implementing SAML SSO with Okta`) — hidden - Implementing SCIM Provisioning with Okta (`Implementing SCIM Provisioning with Okta`) — hidden - Implementing Semgrep for Custom SAST Rules (`Implementing Semgrep for Custom SAST Rules`) — hidden - Improve Codebase Architecture (`improve-codebase-architecture`) — hidden - LiteParse — Local Document Parsing (`Liteparse`) — hidden - motion-graphics — dispatch entry (`motion-graphics`) — hidden - Performing Clickjacking Attack Test (`Performing Clickjacking Attack Test`) — hidden - Performing Directory Traversal Testing (`Performing Directory Traversal Testing`) — hidden - Performing Hash Cracking with Hashcat (`Performing Hash Cracking with Hashcat`) — hidden - Performing Mobile Device Forensics with Cellebrite (`Performing Mobile Device Forensics with Cellebrite`) — hidden - Performing Security Headers Audit (`Performing Security Headers Audit`) — hidden - Performing SOAP Web Service Security Testing (`Performing SOAP Web Service Security Testing`) — hidden - Performing SSL Stripping Attack (`Performing SSL Stripping Attack`) — hidden - Performing Web Application Firewall Bypass (`Performing Web Application Firewall Bypass`) — hidden - Ponytail Audit — Repo-Wide Over-Engineering Scan (`Ponytail Audit — Repo-Wide Over-Engineering Scan`) — hidden - Ponytail Review — Diff Review for Over-Engineering (`Ponytail Review — Diff Review for Over-Engineering`) — hidden - Taste — Anti-Slop Frontend Design (`Taste — Anti-Slop Frontend Design`) — hidden - **Reference** (group) - Loop Pattern Reference (`Loop Pattern Reference`) — hidden - Markdown & Mermaid Writing (`Markdown Mermaid Writing`) — hidden - **Skill** (group) - Algorithmic Art (`algorithmic-art`) — hidden - Canvas Design — Visual Art Creation (`canvas-design`) — visible - creative-ideation (`Creative Ideation — Constraint-Driven Project Generation`) — hidden - Data Storytelling (`Data Storytelling`) — hidden - diagrams-charts (`diagrams-charts`) — hidden - frontend-design (`frontend-design`) — hidden - Frontend UI Engineering (`frontend-ui-engineering`) — visible - image-generation (`image-generation`) — hidden - **Forensics** (category) - **Playbook** (group) - Acquiring Disk Image with dd and dcfldd (`Acquiring Disk Image with dd and dcfldd`) — hidden - Analyzing Android Malware with Apktool (`Analyzing Android Malware with Apktool`) — hidden - Analyzing Bootkit and Rootkit Samples (`Analyzing Bootkit and Rootkit Samples`) — hidden - Analyzing Email Headers for Phishing Investigation (`Analyzing Email Headers for Phishing Investigation`) — hidden - Analyzing Memory Forensics with LiME and Volatility (`Analyzing Memory Forensics with LiME and Volatility`) — hidden - Analyzing MFT for Deleted File Recovery (`analyzing-mft-for-deleted-file-recovery`) — hidden - Building Incident Timeline with Timesketch (`Building Incident Timeline with Timesketch`) — hidden - Building Super Timelines with Plaso (`Building Super Timelines with Plaso`) — hidden - Collecting Volatile Evidence from Compromised Hosts (`Collecting Volatile Evidence from Compromised Hosts`) — hidden - Extracting Browser History Artifacts (`Extracting Browser History Artifacts`) — hidden - Extracting Credentials from Memory Dump (`Extracting Credentials from Memory Dump`) — hidden - Extracting Windows Event Logs Artifacts (`Extracting Windows Event Logs Artifacts`) — hidden - Generating Forensic Timelines with Hayabusa (`Generating Forensic Timelines with Hayabusa`) — hidden - Investigating Ransomware Attack Artifacts (`Investigating Ransomware Attack Artifacts`) — hidden - Parsing Artifacts with Eric Zimmerman Tools (`Parsing Artifacts with Eric Zimmerman Tools`) — hidden - Performing Cloud Forensics Investigation (`Performing Cloud Forensics Investigation`) — hidden - Performing Cloud Log Forensics with AWS Athena (`Performing Cloud Log Forensics with AWS Athena`) — hidden - Performing Cloud Storage Forensic Acquisition (`Performing Cloud Storage Forensic Acquisition`) — hidden - Performing File Carving with Foremost (`Performing File Carving with Foremost`) — hidden - Performing Log Analysis for Forensic Investigation (`Performing Log Analysis for Forensic Investigation`) — hidden - Performing Malware Persistence Investigation (`Performing Malware Persistence Investigation`) — hidden - Performing Network Forensics with Wireshark (`Performing Network Forensics with Wireshark`) — hidden - Performing Steganography Detection (`Performing Steganography Detection`) — hidden - Performing Timeline Reconstruction with Plaso (`Performing Timeline Reconstruction with Plaso`) — hidden - Recovering Deleted Files with PhotoRec (`Recovering Deleted Files with PhotoRec`) — hidden - Triage (`triage`) — hidden - Triaging Windows with KAPE (`Triaging Windows with KAPE`) — hidden - **Media** (category) - **Playbook** (group) - music-audio-tools (`music-audio-tools`) — hidden - **Skill** (group) - HyperFrames Animation (`hyperframes-animation`) — visible - HyperFrames Core (`hyperframes-core`) — visible - HyperFrames Creative (`hyperframes-creative`) — visible - HyperFrames Media (`hyperframes-media`) — hidden - media-use (`media-use`) — visible - **Skill Suite** (group) - HyperFrames — start here (`hyperframes`) — visible - **Workflow** (group) - Faceless Explainer to HyperFrames (`faceless-explainer`) — hidden - general-video — general video workflow (`general-video`) — hidden - music-to-video — one music-grounded, beat-synced video workflow (`music-to-video`) — hidden - **Research** (category) - **Playbook** (group) - academic-research (`academic-research`) — hidden - Analyzing Campaign Attribution Evidence (`Analyzing Campaign Attribution Evidence`) — hidden - Analyzing Certificate Transparency for Phishing (`Analyzing Certificate Transparency for Phishing`) — hidden - Analyzing Cobalt Strike Beacon Configuration (`Analyzing Cobalt Strike Beacon Configuration`) — hidden - Analyzing CobaltStrike Malleable C2 Profiles (`Analyzing CobaltStrike Malleable C2 Profiles`) — hidden - Analyzing Cyber Kill Chain (`Analyzing Cyber Kill Chain`) — hidden - Analyzing Disk Image with Autopsy (`Analyzing Disk Image with Autopsy`) — hidden - Analyzing DNS Logs for Exfiltration (`Analyzing DNS Logs for Exfiltration`) — hidden - Analyzing Docker Container Forensics (`Analyzing Docker Container Forensics`) — hidden - Analyzing Heap Spray Exploitation (`Analyzing Heap Spray Exploitation`) — hidden - Analyzing Indicators of Compromise (`Analyzing Indicators of Compromise`) — hidden - Analyzing iOS App Security with Objection (`Analyzing iOS App Security with Objection`) — hidden - Analyzing Linux Audit Logs for Intrusion (`Analyzing Linux Audit Logs for Intrusion`) — hidden - Analyzing Linux ELF Malware (`Analyzing Linux ELF Malware`) — hidden - Analyzing Linux Kernel Rootkits (`Analyzing Linux Kernel Rootkits`) — hidden - Analyzing Linux System Artifacts (`Analyzing Linux System Artifacts`) — hidden - Analyzing LNK File and Jump List Artifacts (`Analyzing LNK File and Jump List Artifacts`) — hidden - Analyzing Macro Malware in Office Documents (`Analyzing Macro Malware in Office Documents`) — hidden - Analyzing Malicious PDF with peepdf (`Analyzing Malicious PDF with peepdf`) — hidden - Analyzing Malicious URL with URLScan (`Analyzing Malicious URL with URLScan`) — hidden - Analyzing Malware Behavior with Cuckoo Sandbox (`Analyzing Malware Behavior with Cuckoo Sandbox`) — hidden - Analyzing Malware Family Relationships with Malpedia (`Analyzing Malware Family Relationships with Malpedia`) — hidden - Analyzing Malware Persistence with Autoruns (`Analyzing Malware Persistence with Autoruns`) — hidden - Analyzing Malware Sandbox Evasion Techniques (`Analyzing Malware Sandbox Evasion Techniques`) — hidden - Analyzing Memory Dumps with Volatility (`Analyzing Memory Dumps with Volatility`) — hidden - Analyzing Network Covert Channels in Malware (`Analyzing Network Covert Channels in Malware`) — hidden - Analyzing Network Flow Data with Netflow (`Analyzing Network Flow Data with Netflow`) — hidden - Analyzing Network Traffic for Incidents (`Analyzing Network Traffic for Incidents`) — hidden - Analyzing Network Traffic of Malware (`Analyzing Network Traffic of Malware`) — hidden - Analyzing Network Traffic with Wireshark (`Analyzing Network Traffic with Wireshark`) — hidden - Analyzing Outlook PST for Email Forensics (`Analyzing Outlook PST for Email Forensics`) — hidden - Analyzing Packed Malware with UPX Unpacker (`Analyzing Packed Malware with UPX Unpacker`) — hidden - Analyzing PDF Malware with PDFiD (`Analyzing PDF Malware with PDFiD`) — hidden - Analyzing PowerShell Empire Artifacts (`Analyzing PowerShell Empire Artifacts`) — hidden - Analyzing PowerShell Script Block Logging (`Analyzing PowerShell Script Block Logging`) — hidden - Analyzing Prefetch Files for Execution History (`Analyzing Prefetch Files for Execution History`) — hidden - Analyzing Ransomware Encryption Mechanisms (`Analyzing Ransomware Encryption Mechanisms`) — hidden - Analyzing Ransomware Leak Site Intelligence (`Analyzing Ransomware Leak Site Intelligence`) — hidden - Analyzing Ransomware Network Indicators (`Analyzing Ransomware Network Indicators`) — hidden - Analyzing Ransomware Payment Wallets (`Analyzing Ransomware Payment Wallets`) — hidden - Analyzing Security Logs with Splunk (`Analyzing Security Logs with Splunk`) — hidden - Analyzing Slack Space and File System Artifacts (`Analyzing Slack Space and File System Artifacts`) — hidden - Analyzing Supply Chain Malware Artifacts (`Analyzing Supply Chain Malware Artifacts`) — hidden - Analyzing Threat Intelligence Feeds (`Analyzing Threat Intelligence Feeds`) — hidden - Analyzing Threat Landscape with MISP (`Analyzing Threat Landscape with MISP`) — hidden - Analyzing Typosquatting Domains with DNSTwist (`Analyzing Typosquatting Domains with DNSTwist`) — hidden - Analyzing UEFI Bootkit Persistence (`Analyzing UEFI Bootkit Persistence`) — hidden - Analyzing USB Device Connection History (`Analyzing USB Device Connection History`) — hidden - Analyzing Windows Amcache Artifacts (`Analyzing Windows Amcache Artifacts`) — hidden - Analyzing Windows Event Logs in Splunk (`Analyzing Windows Event Logs in Splunk`) — hidden - Analyzing Windows LNK Files for Artifacts (`Analyzing Windows LNK Files for Artifacts`) — hidden - Analyzing Windows Prefetch with Python (`Analyzing Windows Prefetch with Python`) — hidden - Building Adversary Infrastructure Tracking System (`Building Adversary Infrastructure Tracking System`) — hidden - Consulting Analysis & Report Generation (`consulting-analysis`) — hidden - Culture Architect — Company Culture as Operational System (`Culture Architect — Company Culture as Operational System`) — hidden - Deep Research (`deep-research`) — hidden - Detecting AI Model Prompt Injection Attacks (`Detecting AI Model Prompt Injection Attacks`) — hidden - Firecrawl Web Scraper (`firecrawl-web-scraper`) — hidden - Implementing Data Loss Prevention with Microsoft Purview (`Implementing Data Loss Prevention with Microsoft Purview`) — hidden - LLM Wiki — Persistent Knowledge Base Pattern (`LLM Wiki — Persistent Knowledge Base Pattern`) — hidden - lm-evaluation-harness (`lm-evaluation-harness`) — hidden - Market Research Methodology (`market-research-methodology`) — hidden - obliteratus (`obliteratus`) — hidden - Open Notebook (`open-notebook`) — hidden - Orchestrating LLM Attacks with PyRIT (`Orchestrating LLM Attacks with PyRIT`) — hidden - Performing Asset Criticality Scoring for Vulns (`Performing Asset Criticality Scoring for Vulns`) — hidden - Ponytail Gain — Impact Scoreboard (`Ponytail Gain — Impact Scoreboard`) — hidden - Product Research Methodology (`product-research-methodology`) — hidden - Repository Agent Evaluation Studies (2026) (`repository-agent-evaluation-2026`) — hidden - Research & Documentation (`research-documentation`) — hidden - Research Operations — Domain Orchestrator (`research-ops-orchestrator`) — hidden - Skill Evolution Taxonomy (`Skill Evolution Taxonomy`) — hidden - Statistical Analyst (`statistical-analyst`) — hidden - Statistical Power & Sample Size (`Statistical Power & Sample Size`) — hidden - Systematic Literature Review (`Systematic Literature Review`) — hidden - Tracking Threat Actor Infrastructure (`Tracking Threat Actor Infrastructure`) — hidden - Triaging Security Alerts in Splunk (`Triaging Security Alerts in Splunk`) — hidden - Triaging Security Incidents (`Triaging Security Incidents`) — hidden - Triaging Security Incidents with IR Playbooks (`Triaging Security Incidents with IR Playbooks`) — hidden - Triaging Vulnerabilities with SSVC Framework (`Triaging Vulnerabilities with SSVC Framework`) — hidden - Venue Templates (`Venue Templates`) — hidden - vllm (`vllm`) — hidden - What-If Oracle — Possibility Space Explorer (`What If Oracle`) — hidden - **Skill** (group) - Scientific Visualization (`Scientific Visualization`) — hidden - **Workflow** (group) - benchmark (`benchmark`) — hidden - benchmark-models (`benchmark-models`) — hidden - Building Threat Actor Profile from OSINT (`Building Threat Actor Profile from OSINT`) — hidden - Collecting Open-Source Intelligence (`Collecting Open-Source Intelligence`) — hidden - Litreview — Academic Literature Orientation (`litreview`) — hidden - **Runtime Tools** (category) - **Playbook** (group) - Alert Optimizer (`alert-optimizer`) — hidden - Analyzing Browser Forensics with Hindsight (`Analyzing Browser Forensics with Hindsight`) — hidden - Conducting Mobile App Penetration Test (`Conducting Mobile App Penetration Test`) — hidden - Configuring Certificate Authority with OpenSSL (`Configuring Certificate Authority with OpenSSL`) — hidden - Configuring HSM for Key Storage (`Configuring HSM for Key Storage`) — hidden - Configuring OAuth 2.0 Authorization Flow (`Configuring OAuth 2.0 Authorization Flow`) — hidden - Configuring Zscaler Private Access for ZTNA (`Configuring Zscaler Private Access for ZTNA`) — hidden - Detecting Dependency Confusion (`Detecting Dependency Confusion`) — hidden - Exploiting Insecure Data Storage in Mobile (`Exploiting Insecure Data Storage in Mobile`) — hidden - Exploiting JWT Algorithm Confusion Attack (`Exploiting JWT Algorithm Confusion Attack`) — hidden - Exploiting Server-Side Request Forgery (`Exploiting Server-Side Request Forgery`) — hidden - Fleet Hunting with Velociraptor (`Fleet Hunting with Velociraptor`) — hidden - Implementing Delinea Secret Server for PAM (`Implementing Delinea Secret Server for PAM`) — hidden - Implementing Disk Encryption with BitLocker (`Implementing Disk Encryption with BitLocker`) — hidden - Implementing End-to-End Encryption for Messaging (`Implementing End-to-End Encryption for Messaging`) — hidden - Implementing JWT Signing and Verification (`Implementing JWT Signing and Verification`) — hidden - Implementing mTLS for Zero Trust Services (`Implementing mTLS for Zero Trust Services`) — hidden - Implementing Privileged Access Management with CyberArk (`Implementing Privileged Access Management with CyberArk`) — hidden - Implementing RSA Key Pair Management (`Implementing RSA Key Pair Management`) — hidden - Implementing Syslog Centralization with Rsyslog (`Implementing Syslog Centralization with Rsyslog`) — hidden - Implementing Zero-Knowledge Proof for Authentication (`Implementing Zero-Knowledge Proof for Authentication`) — hidden - Implementing Zero Trust with HashiCorp Boundary (`Implementing Zero Trust with HashiCorp Boundary`) — hidden - Intercepting Mobile Traffic with Burp Suite (`Intercepting Mobile Traffic with Burp Suite`) — hidden - Performing Agentless Vulnerability Scanning (`Performing Agentless Vulnerability Scanning`) — hidden - Performing Authenticated Vulnerability Scan (`Performing Authenticated Vulnerability Scan`) — hidden - Performing Dynamic Analysis of Android App (`Performing Dynamic Analysis of Android App`) — hidden - Performing Hardware Security Module Integration (`Performing Hardware Security Module Integration`) — hidden - Performing JWT None Algorithm Attack (`Performing JWT None Algorithm Attack`) — hidden - Performing Mobile App Certificate Pinning Bypass (`Performing Mobile App Certificate Pinning Bypass`) — hidden - Performing Post-Quantum Cryptography Migration (`Performing Post-Quantum Cryptography Migration`) — hidden - Plugin Structure for Claude Code (`plugin-structure`) — hidden - Reverse Engineering iOS App with Frida (`Reverse Engineering iOS App with Frida`) — hidden - Securing Remote Access to OT Environment (`Securing Remote Access to OT Environment`) — hidden - Testing JWT Token Security (`Testing JWT Token Security`) — hidden - X API via XMCP (`x-api-mcp`) — hidden - **Skill** (group) - Build an MCP App (Interactive UI Widgets) (`build-mcp-app`) — hidden - Build an MCP Server (`build-mcp-server`) — hidden - Build an MCPB (Bundled Local MCP Server) (`build-mcpb`) — hidden - Hook Development (`Hook Development`) — hidden - HyperFrames CLI (`hyperframes-cli`) — visible - HyperFrames Registry (`hyperframes-registry`) — visible - Sentry Observability (Read-only) (`Sentry Observability (Read-only)`) — hidden - **Workflow** (group) - Command Plugin Integration (`Command Plugin Integration`) — hidden - Environment Manager (`Environment Manager`) — hidden - **Security Defensive** (category) - **Playbook** (group) - Agentic Actions Auditor (`agentic-actions-auditor`) — hidden - Analyzing Active Directory ACL Abuse (`Analyzing Active Directory ACL Abuse`) — hidden - Analyzing APT Group with MITRE ATT&CK Navigator (`Analyzing APT Group with MITRE ATT&CK Navigator`) — hidden - Analyzing Command-and-Control Communication (`Analyzing Command-and-Control Communication`) — hidden - Analyzing Golang Malware with Ghidra (`Analyzing Golang Malware with Ghidra`) — hidden - Analyzing Office 365 Audit Logs for Compromise (`Analyzing Office 365 Audit Logs for Compromise`) — hidden - Analyzing Threat Actor TTPs with MITRE ATT&CK (`Analyzing Threat Actor TTPs with MITRE ATT&CK`) — hidden - Analyzing Web Server Logs for Intrusion (`Analyzing Web Server Logs for Intrusion`) — hidden - Assessing Vector and Embedding Weaknesses (`assessing-vector-and-embedding-weaknesses`) — hidden - Auditing Cloud with CIS Benchmarks (`Auditing Cloud with CIS Benchmarks`) — hidden - Auditing Foundry Smart Contract Security (`auditing-foundry-smart-contract-security`) — hidden - Auditing MCP Servers for Tool Poisoning (`Auditing MCP Servers for Tool Poisoning`) — hidden - Auditing TLS Certificate Transparency Logs (`Auditing TLS Certificate Transparency Logs`) — hidden - Automating IOC Enrichment (`automating-ioc-enrichment`) — hidden - Building Attack Pattern Library from CTI Reports (`Building Attack Pattern Library from CTI Reports`) — hidden - Building Automated Malware Submission Pipeline (`Building Automated Malware Submission Pipeline`) — hidden - Building Cloud SIEM with Sentinel (`Building Cloud SIEM with Sentinel`) — hidden - Building Detection Rules with Splunk SPL (`Building Detection Rules with Splunk SPL`) — hidden - Building Detection Rules with Sigma (`building-detection-rules-with-sigma`) — hidden - Building Identity Federation with SAML Azure AD (`Building Identity Federation with SAML Azure AD`) — hidden - Building Incident Response Dashboard (`Building Incident Response Dashboard`) — hidden - Building IOC Defanging and Sharing Pipeline (`Building IOC Defanging and Sharing Pipeline`) — hidden - Building Malware Incident Communication Template (`Building Malware Incident Communication Template`) — hidden - Building Phishing Reporting Button Workflow (`Building Phishing Reporting Button Workflow`) — hidden - Building Ransomware Playbook with CISA Framework (`Building Ransomware Playbook with CISA Framework`) — hidden - Building SOC Escalation Matrix (`Building SOC Escalation Matrix`) — hidden - Building SOC Metrics and KPI Tracking (`Building SOC Metrics and KPI Tracking`) — hidden - Building SOC Playbook for Ransomware (`Building SOC Playbook for Ransomware`) — hidden - Building Threat Feed Aggregation with MISP (`building-threat-feed-aggregation-with-misp`) — hidden - Building Threat Hunt Hypothesis Framework (`building-threat-hunt-hypothesis-framework`) — hidden - Building Vulnerability Aging and SLA Tracking (`Building Vulnerability Aging and SLA Tracking`) — hidden - Building Vulnerability Exception Tracking System (`Building Vulnerability Exception Tracking System`) — hidden - Building Vulnerability Scanning Workflow (`Building Vulnerability Scanning Workflow`) — hidden - Configuring LDAP Security Hardening (`Configuring LDAP Security Hardening`) — hidden - Detecting Anomalies in Industrial Control Systems (`Detecting Anomalies in Industrial Control Systems`) — hidden - Detecting AWS CloudTrail Anomalies (`Detecting AWS CloudTrail Anomalies`) — hidden - Detecting DNP3 Protocol Anomalies (`Detecting DNP3 Protocol Anomalies`) — hidden - Detecting Insider Threat with UEBA (`Detecting Insider Threat with UEBA`) — hidden - Detecting RDP Brute Force Attacks (`Detecting RDP Brute Force Attacks`) — hidden - Detecting SQL Injection via WAF Logs (`Detecting SQL Injection via WAF Logs`) — hidden - Detecting Suspicious OAuth Application Consent (`Detecting Suspicious OAuth Application Consent`) — hidden - Hardening Linux Endpoint with CIS Benchmark (`Hardening Linux Endpoint with CIS Benchmark`) — hidden - Hunting Credential Stuffing Attacks (`Hunting Credential Stuffing Attacks`) — hidden - Hunting for Data Staging Before Exfiltration (`Hunting for Data Staging Before Exfiltration`) — hidden - Hunting for DNS-based Persistence (`Hunting for DNS-based Persistence`) — hidden - Hunting for NTLM Relay Attacks (`Hunting for NTLM Relay Attacks`) — hidden - Hunting for Registry Run Key Persistence (`Hunting for Registry Run Key Persistence`) — hidden - Hunting for Startup Folder Persistence (`Hunting for Startup Folder Persistence`) — hidden - Implementing DDoS Mitigation with Cloudflare (`Implementing DDoS Mitigation with Cloudflare`) — hidden - Implementing Device Posture Assessment in Zero Trust (`Implementing Device Posture Assessment in Zero Trust`) — hidden - Implementing Digital Signatures with Ed25519 (`Implementing Digital Signatures with Ed25519`) — hidden - Implementing Endpoint Detection with Wazuh (`Implementing Endpoint Detection with Wazuh`) — hidden - Implementing EPSS Score for Vulnerability Prioritization (`Implementing EPSS Score for Vulnerability Prioritization`) — hidden - Implementing File Integrity Monitoring with AIDE (`Implementing File Integrity Monitoring with AIDE`) — hidden - Implementing Privileged Access Workstation (`Implementing Privileged Access Workstation`) — hidden - Implementing Runtime Application Self-Protection (`Implementing Runtime Application Self-Protection`) — hidden - Implementing Runtime Security with Tetragon (`Implementing Runtime Security with Tetragon`) — hidden - Implementing SIEM Use Case Tuning (`Implementing SIEM Use Case Tuning`) — hidden - Implementing Vulnerability Management with Greenbone (`Implementing Vulnerability Management with Greenbone`) — hidden - Implementing Vulnerability Remediation SLA (`Implementing Vulnerability Remediation SLA`) — hidden - Monitoring SCADA Modbus Traffic Anomalies (`Monitoring SCADA Modbus Traffic Anomalies`) — hidden - Performing Bandwidth Throttling Attack Simulation (`Performing Bandwidth Throttling Attack Simulation`) — hidden - Performing Cloud Native Forensics with Falco (`Performing Cloud Native Forensics with Falco`) — hidden - Performing DNS Tunneling Detection (`Performing DNS Tunneling Detection`) — hidden - Performing Endpoint Vulnerability Remediation (`Performing Endpoint Vulnerability Remediation`) — hidden - Performing OT Vulnerability Assessment with Claroty (`Performing OT Vulnerability Assessment with Claroty`) — hidden - Performing OT Vulnerability Scanning Safely (`Performing OT Vulnerability Scanning Safely`) — hidden - Performing Packet Injection Attack (`Performing Packet Injection Attack`) — hidden - Performing Privileged Account Discovery (`Performing Privileged Account Discovery`) — hidden - Performing S7comm Protocol Security Analysis (`Performing S7comm Protocol Security Analysis`) — hidden - For authorized penetration testing and lab environments only (`For authorized penetration testing and lab environments only`) — hidden - Performing Threat Emulation with Atomic Red Team (`Performing Threat Emulation with Atomic Red Team`) — hidden - Performing Threat Modeling with OWASP Threat Dragon (`Performing Threat Modeling with OWASP Threat Dragon`) — hidden - Performing User Behavior Analytics (`Performing User Behavior Analytics`) — hidden - Performing Web Application Vulnerability Triage (`Performing Web Application Vulnerability Triage`) — hidden - Scanning Infrastructure with Nessus (`Scanning Infrastructure with Nessus`) — hidden - **Skill** (group) - Hook Security (`Hook Security`) — hidden - Prompt Injection Detection (`Prompt Injection Detection`) — hidden - **Workflow** (group) - Building Threat Intelligence Enrichment in Splunk (`Building Threat Intelligence Enrichment in Splunk`) — hidden - Building Threat Intelligence Feed Integration (`Building Threat Intelligence Feed Integration`) — hidden - Collecting Threat Intelligence with MISP (`Collecting Threat Intelligence with MISP`) — hidden - **Security Offensive** (category) - **Playbook** (group) - Abusing DPAPI for Credential Access (`abusing-dpapi-for-credential-access`) — hidden - Abusing Shadow Credentials for Privilege Escalation (`abusing-shadow-credentials-for-privesc`) — hidden - Analyzing Persistence Mechanisms in Linux (`Analyzing Persistence Mechanisms in Linux`) — hidden - Attacking Entra ID with ROADtools (`attacking-entra-id-with-roadtools`) — hidden - Attacking OAuth with Device-Code Phishing (`attacking-oauth-with-device-code-phishing`) — hidden - Auditing Entra ID with AADInternals (`auditing-entra-id-with-aadinternals`) — hidden - Building C2 Infrastructure with Sliver Framework (`building-c2-infrastructure-with-sliver-framework`) — hidden - Building C2 Redirector Infrastructure (`building-c2-redirector-infrastructure`) — hidden - Building Red Team C2 Infrastructure with Havoc (`building-red-team-c2-infrastructure-with-havoc`) — hidden - Implementing Memory Protection with DEP and ASLR (`Implementing Memory Protection with DEP and ASLR`) — hidden - Implementing Patch Management Workflow (`Implementing Patch Management Workflow`) — hidden - Moving Laterally with NetExec (`moving-laterally-with-netexec`) — hidden - Performing Credential Access with LaZagne (`performing-credential-access-with-lazagne`) — hidden - Performing Initial Access with EvilGinx3 (`performing-initial-access-with-evilginx3`) — hidden - Performing Kerberoasting Attack (`performing-kerberoasting-attack`) — hidden - Performing Privilege Escalation on Linux (`Performing Privilege Escalation on Linux`) — hidden - **Runbook** (group) - Coercing Authentication with Coercer and PetitPotam (`Coercing Authentication with Coercer and PetitPotam`) — hidden - **Software Engineering** (category) - **Playbook** (group) - AI SDK Provider Tool Safety (`ai-sdk-provider-tool-safety`) — hidden - Analyzing API Gateway Access Logs (`Analyzing API Gateway Access Logs`) — hidden - API Design Reviewer — Linting, Breaking Change Detection, and Scorecards (`API Design Reviewer — Linting, Breaking Change Detection, and Scorecards`) — hidden - Auditing Kubernetes RBAC Privilege Escalation (`Auditing Kubernetes RBAC Privilege Escalation`) — hidden - Auditing Terraform Infrastructure for Security (`Auditing Terraform Infrastructure for Security`) — hidden - Auditing UEFI Firmware with CHIPSEC (`Auditing UEFI Firmware with CHIPSEC`) — hidden - Benchmarking Kubernetes with kube-bench (`Benchmarking Kubernetes with kube-bench`) — hidden - Browser Trace (`Browser Trace`) — hidden - Building DevSecOps Pipeline with GitLab CI (`Building DevSecOps Pipeline with GitLab CI`) — hidden - Building Identity Governance Lifecycle Process (`Building Identity Governance Lifecycle Process`) — hidden - Building IOC Enrichment Pipeline with OpenCTI (`Building IOC Enrichment Pipeline with OpenCTI`) — hidden - Building Threat Intelligence Platform (`Building Threat Intelligence Platform`) — hidden - Building Vulnerability Dashboard with DefectDojo (`Building Vulnerability Dashboard with DefectDojo`) — hidden - Bypassing Authentication with Forced Browsing (`Bypassing Authentication with Forced Browsing`) — hidden - Capacity Planner — Ops Team Sizing with Erlang-C Queueing Theory (`Capacity Planner — Ops Team Sizing with Erlang-C Queueing Theory`) — hidden - Code Complexity Scanner (`Code Complexity Scanner`) — hidden - Code Review (`Code Review`) — hidden - Code Review Excellence (`Code Review Excellence`) — hidden - Codebase Design — Deep Modules (`codebase-design`) — visible - complexity-cuts — Lower Big-O on Existing Code (`complexity-cuts`) — hidden - Conducting API Security Testing (`Conducting API Security Testing`) — hidden - Configuring Active Directory Tiered Model (`Configuring Active Directory Tiered Model`) — hidden - cso (`cso`) — hidden - Database Lookup (`Database Lookup`) — hidden - Defending LLMs with Guardrails (`Defending LLMs with Guardrails`) — hidden - Deploying Tailscale for Zero Trust VPN (`Deploying Tailscale for Zero Trust VPN`) — hidden - Detecting API Enumeration Attacks (`Detecting API Enumeration Attacks`) — hidden - Detecting AWS Credential Exposure with TruffleHog (`Detecting AWS Credential Exposure with TruffleHog`) — hidden - Detecting Broken Object Property Level Authorization (`Detecting Broken Object Property Level Authorization`) — hidden - Detecting Container Escape Attempts (`Detecting Container Escape Attempts`) — hidden - Detecting Container Escape with Falco Rules (`Detecting Container Escape with Falco Rules`) — hidden - Detecting Shadow API Endpoints (`Detecting Shadow API Endpoints`) — hidden - Detecting Supply Chain Attacks in CI/CD (`Detecting Supply Chain Attacks in CI/CD`) — hidden - Detecting Typosquatting Packages (`Detecting Typosquatting Packages`) — hidden - Diagnosing Bugs (`Diagnosing Bugs`) — hidden - diagram (`diagram`) — hidden - Docker Development (`docker-development`) — hidden - Escaping Containers to Host (`Escaping Containers to Host`) — hidden - Exploiting API Injection Vulnerabilities (`Exploiting API Injection Vulnerabilities`) — hidden - Exploiting Excessive Data Exposure in API (`Exploiting Excessive Data Exposure in API`) — hidden - Exploiting Mass Assignment in REST APIs (`Exploiting Mass Assignment in REST APIs`) — hidden - Exploiting Prototype Pollution in JavaScript (`Exploiting Prototype Pollution in JavaScript`) — hidden - Exploiting SQL Injection with sqlmap (`Exploiting SQL Injection with sqlmap`) — hidden - Exploiting WebSocket Vulnerabilities (`Exploiting WebSocket Vulnerabilities`) — hidden - freeze (`freeze`) — hidden - Get Available Resources (`Get Available Resources`) — hidden - Setup Git Guardrails (`git-guardrails-claude-code`) — hidden - CEO Plan Review (`gstack-openclaw-ceo-review`) — hidden - Systematic Debugging (`gstack-openclaw-investigate`) — hidden - Weekly Engineering Retrospective (`gstack-openclaw-retro`) — hidden - guard (`guard`) — hidden - Hardening Docker Containers for Production (`Hardening Docker Containers for Production`) — hidden - Hunting for T1098 Account Manipulation (`Hunting for T1098 Account Manipulation`) — hidden - Hunting for Unusual Service Installations (`Hunting for Unusual Service Installations`) — hidden - Implementing API Abuse Detection with Rate Limiting (`Implementing API Abuse Detection with Rate Limiting`) — hidden - Implementing API Gateway Security Controls (`Implementing API Gateway Security Controls`) — hidden - Implementing API Rate Limiting and Throttling (`Implementing API Rate Limiting and Throttling`) — hidden - Implementing API Schema Validation Security (`Implementing API Schema Validation Security`) — hidden - Implementing API Security Posture Management (`Implementing API Security Posture Management`) — hidden - Implementing API Security Testing with 42Crunch (`Implementing API Security Testing with 42Crunch`) — hidden - Implementing Aqua Security for Container Scanning (`Implementing Aqua Security for Container Scanning`) — hidden - Implementing Attack Surface Management (`Implementing Attack Surface Management`) — hidden - Implementing Code Signing for Artifacts (`Implementing Code Signing for Artifacts`) — hidden - Implementing Deception-Based Detection with Canarytoken (`Implementing Deception-Based Detection with Canarytoken`) — hidden - Implementing Fuzz Testing in CI/CD with AFL++ (`Implementing Fuzz Testing in CI/CD with AFL++`) — hidden - Implementing GCP Binary Authorization (`Implementing GCP Binary Authorization`) — hidden - Implementing GitHub Advanced Security for Code Scanning (`Implementing GitHub Advanced Security for Code Scanning`) — hidden - Implementing HashiCorp Vault Dynamic Secrets (`Implementing HashiCorp Vault Dynamic Secrets`) — hidden - Implementing Honeytokens for Breach Detection (`Implementing Honeytokens for Breach Detection`) — hidden - Implementing Infrastructure as Code Security Scanning (`Implementing Infrastructure as Code Security Scanning`) — hidden - Implementing Kubernetes Network Policy with Calico (`Implementing Kubernetes Network Policy with Calico`) — hidden - Implementing Kubernetes Pod Security Standards (`Implementing Kubernetes Pod Security Standards`) — hidden - Implementing Log Forwarding with Fluentd (`Implementing Log Forwarding with Fluentd`) — hidden - Implementing Mobile Application Management (`Implementing Mobile Application Management`) — hidden - Implementing OPA Gatekeeper for Policy Enforcement (`Implementing OPA Gatekeeper for Policy Enforcement`) — hidden - Implementing PAM for Database Access (`Implementing PAM for Database Access`) — hidden - Implementing Pod Security Admission Controller (`Implementing Pod Security Admission Controller`) — hidden - Implementing Secret Scanning with Gitleaks (`Implementing Secret Scanning with Gitleaks`) — hidden - Implementing Secrets Management with Vault (`Implementing Secrets Management with Vault`) — hidden - Implementing Secrets Scanning in CI/CD (`Implementing Secrets Scanning in CI/CD`) — hidden - Implementing Supply Chain Security with in-toto (`Implementing Supply Chain Security with in-toto`) — hidden - Implementing Vulnerability SLA Breach Alerting (`Implementing Vulnerability SLA Breach Alerting`) — hidden - Implementing Web Application Logging with ModSecurity (`Implementing Web Application Logging with ModSecurity`) — hidden - Implementing Zero Trust for SaaS Applications (`Implementing Zero Trust for SaaS Applications`) — hidden - Integrating SAST into GitHub Actions Pipeline (`Integrating SAST into GitHub Actions Pipeline`) — hidden - Invariant-Guard — Correctness-First Coding (`invariant-guard`) — hidden - land-and-deploy (`land-and-deploy`) — hidden - Migrate to Shoehorn (`migrate-to-shoehorn`) — hidden - Monorepo Navigator (`monorepo-navigator`) — visible - Netlify Deployment (`netlify-deploy`) — hidden - Observability Designer — Production Observability Strategy (`Observability Designer — Production Observability Strategy`) — hidden - Obsidian Vault (`obsidian-vault`) — hidden - OKF Knowledge Format (`OKF Knowledge Format`) — hidden - OpenClaw Skills Framework (`openclaw-skills-framework`) — hidden - Performance Engineer (`performance-engineer`) — hidden - Performing Android App Static Analysis with MobSF (`Performing Android App Static Analysis with MobSF`) — hidden - Performing API Fuzzing with RESTler (`Performing API Fuzzing with RESTler`) — hidden - Performing API Inventory and Discovery (`Performing API Inventory and Discovery`) — hidden - Performing API Security Testing with Postman (`Performing API Security Testing with Postman`) — hidden - Performing ARP Spoofing Attack Simulation (`Performing ARP Spoofing Attack Simulation`) — hidden - Performing Binary Exploitation Analysis (`Performing Binary Exploitation Analysis`) — hidden - Performing Bluetooth Security Assessment (`Performing Bluetooth Security Assessment`) — hidden - Performing Container Escape Detection (`Performing Container Escape Detection`) — hidden - Performing Container Image Hardening (`Performing Container Image Hardening`) — hidden - Performing Docker Bench Security Assessment (`Performing Docker Bench Security Assessment`) — hidden - Performing Fuzzing with AFL++ (`Performing Fuzzing with AFL++`) — hidden - Performing GraphQL Depth Limit Attack (`Performing GraphQL Depth Limit Attack`) — hidden - Performing GraphQL Introspection Attack (`Performing GraphQL Introspection Attack`) — hidden - Performing OSINT with SpiderFoot (`Performing OSINT with SpiderFoot`) — hidden - Performing SCA Dependency Scanning with Snyk (`Performing SCA Dependency Scanning with Snyk`) — hidden - Performing SCADA HMI Security Assessment (`Performing SCADA HMI Security Assessment`) — hidden - Performing Serverless Function Security Review (`Performing Serverless Function Security Review`) — hidden - Performing Service Account Audit (`Performing Service Account Audit`) — hidden - Performing Service Account Credential Rotation (`Performing Service Account Credential Rotation`) — hidden - Performing Subdomain Enumeration with Subfinder (`Performing Subdomain Enumeration with Subfinder`) — hidden - Performing Supply Chain Attack Simulation (`Performing Supply Chain Attack Simulation`) — hidden - Performing Thick Client Application Penetration Test (`Performing Thick Client Application Penetration Test`) — hidden - Ponytail — Lazy Senior Dev Mode (`Ponytail — Lazy Senior Dev Mode`) — hidden - Ponytail Debt — Shortcut Ledger (`Ponytail Debt — Shortcut Ledger`) — hidden - Prompt Governance (`prompt-governance`) — hidden - Python Background Jobs & Task Queues (`python-background-jobs`) — hidden - python-debugpy (`python-debugpy`) — hidden - qa (`qa`) — hidden - qa-only (`qa-only`) — hidden - Deploy to Render (`render-deploy`) — hidden - Runaway Guard — $-Cost is the Third Complexity Dimension (`runaway-guard`) — hidden - Scanning Container Images with Grype (`Scanning Container Images with Grype`) — hidden - Scanning Kubernetes Manifests with Kubesec (`Scanning Kubernetes Manifests with Kubesec`) — hidden - Securing API Gateway with AWS WAF (`Securing API Gateway with AWS WAF`) — hidden - Securing Container Registry Images (`Securing Container Registry Images`) — hidden - Securing Container Registry with Harbor (`Securing Container Registry with Harbor`) — hidden - Securing GitHub Actions Workflows (`Securing GitHub Actions Workflows`) — hidden - Securing Helm Chart Deployments (`Securing Helm Chart Deployments`) — hidden - Securing Serverless Functions (`Securing Serverless Functions`) — hidden - setup-deploy (`setup-deploy`) — hidden - setup-gbrain (`setup-gbrain`) — hidden - Setup Pre-Commit Hooks (`setup-pre-commit`) — hidden - ship (`ship`) — hidden - Skill Lifecycle States (`skill-lifecycle-states`) — hidden - Source Discovery and Triage (`Source Discovery and Triage`) — hidden - Testing API for Broken Object Level Authorization (`Testing API for Broken Object Level Authorization`) — hidden - Testing API for Mass Assignment Vulnerability (`Testing API for Mass Assignment Vulnerability`) — hidden - Testing CORS Misconfiguration (`Testing CORS Misconfiguration`) — hidden - Testing for Sensitive Data Exposure (`Testing for Sensitive Data Exposure`) — hidden - Testing Mobile API Authentication (`Testing Mobile API Authentication`) — hidden - Testing OAuth2 Implementation Flaws (`Testing OAuth2 Implementation Flaws`) — hidden - Testing WebSocket API Security (`Testing WebSocket API Security`) — hidden - Using Agent Skills (`using-agent-skills`) — hidden - vercel-deploy-claimable (`vercel-deploy-claimable`) — hidden - Verifying Build Provenance with SLSA and Sigstore (`Verifying Build Provenance with SLSA and Sigstore`) — hidden - Vibe Code Auditor (`vibe-code-auditor`) — hidden - xurl (`xurl`) — hidden - **Reference** (group) - OKF Pipeline Pattern (`okf-pipeline-pattern`) — hidden - **Runbook** (group) - Chaos Engineering (`chaos-engineering`) — hidden - Database Backup & Disaster Recovery (`Database Backup & Disaster Recovery`) — hidden - **Skill** (group) - apple-macos-apps (`apple-macos-apps`) — hidden - Authentication & Authorization Implementation Patterns (`auth-implementation-patterns`) — hidden - Browser Testing with DevTools (`browser-testing-with-devtools`) — hidden - C4 Architecture Documentation Workflow (`c4-architecture`) — hidden - Code Documentation Generator (`Code Documentation Generator`) — hidden - Hook Debugging (`Hook Debugging`) — hidden - Python Anti-Patterns Checklist (`Python Anti-Patterns Checklist`) — hidden - Python Packaging (`Python Packaging`) — hidden - Python Resilience Patterns (`Python Resilience Patterns`) — hidden - Resolving Merge Conflicts (`Resolving Merge Conflicts`) — hidden - Schema Versioning (`Schema Versioning`) — hidden - SQL Optimization Patterns (`SQL Optimization Patterns`) — hidden - **Workflow** (group) - Performance Profiler (`Systematic Performance Profiling`) — hidden - SLO Implementation (`SLO Implementation`) — hidden - **Uncategorized** (category) - **Playbook** (group) - Anti-Sycophancy (`anti-sycophancy`) — hidden - architecture-review-loop (`architecture-review-loop`) — hidden - autoplan (`autoplan`) — hidden - canary (`canary`) — hidden - CI Fix Workflow (`ci-fix-workflow`) — hidden - Claude API Reference (`claude-api-reference`) — hidden - Claude Automation Recommender (`claude-automation-recommender`) — hidden - CLAUDE.md Improver (`claude-md-improver`) — hidden - Clean Code Discipline (`clean-code-discipline`) — hidden - Codebase Automation Recommender (`codebase-automation-recommender`) — hidden - Conducting Cloud Incident Response (`Conducting Cloud Incident Response`) — hidden - Conducting Cloud Penetration Testing (`Conducting Cloud Penetration Testing`) — hidden - Conducting Domain Persistence with DCSync (`Conducting Domain Persistence with DCSync`) — hidden - Conducting External Reconnaissance with OSINT (`Conducting External Reconnaissance with OSINT`) — hidden - Conducting Full-Scope Red Team Engagement (`Conducting Full-Scope Red Team Engagement`) — hidden - Conducting Internal Network Penetration Test (`Conducting Internal Network Penetration Test`) — hidden - Conducting Internal Reconnaissance with BloodHound CE (`Conducting Internal Reconnaissance with BloodHound CE`) — hidden - Conducting Man-in-the-Middle Attack Simulation (`Conducting Man-in-the-Middle Attack Simulation`) — hidden - Conducting Memory Forensics with Volatility (`Conducting Memory Forensics with Volatility`) — hidden - Conducting Pass-the-Ticket Attack (`Conducting Pass-the-Ticket Attack`) — hidden - Conducting Phishing Incident Response (`Conducting Phishing Incident Response`) — hidden - Conducting Post-Incident Lessons Learned (`Conducting Post-Incident Lessons Learned`) — hidden - Conducting Social Engineering Penetration Test (`Conducting Social Engineering Penetration Test`) — hidden - Conducting Social Engineering Pretext Call (`Conducting Social Engineering Pretext Call`) — hidden - Conducting Spearphishing Simulation Campaign (`Conducting Spearphishing Simulation Campaign`) — hidden - Configuring Host-Based Intrusion Detection (`Configuring Host-Based Intrusion Detection`) — hidden - Configuring Microsegmentation for Zero Trust (`Configuring Microsegmentation for Zero Trust`) — hidden - Configuring Multi-Factor Authentication with Duo (`Configuring Multi-Factor Authentication with Duo`) — hidden - Configuring Network Segmentation with VLANs (`Configuring Network Segmentation with VLANs`) — hidden - Configuring pfSense Firewall Rules (`Configuring pfSense Firewall Rules`) — hidden - Configuring Suricata for Network Monitoring (`Configuring Suricata for Network Monitoring`) — hidden - Configuring Windows Defender Advanced Settings (`Configuring Windows Defender Advanced Settings`) — hidden - Configuring Windows Event Logging for Detection (`Configuring Windows Event Logging for Detection`) — hidden - Containing Active Breaches (`Containing Active Breaches`) — hidden - Continuous LLM Red Teaming with Promptfoo (`Continuous LLM Red Teaming with Promptfoo`) — hidden - Correlating Security Events in QRadar (`Correlating Security Events in QRadar`) — hidden - Correlating Threat Campaigns (`Correlating Threat Campaigns`) — hidden - Data-Intensive Design (`data-intensive-design`) — hidden - Data Pipeline Architecture (`data-pipeline-architecture`) — hidden - Data Quality Frameworks (`data-quality`) — hidden - Data Quality Auditor (`data-quality-auditor`) — hidden - Data Structure Protocol (DSP) (`data-structure-protocol`) — hidden - Decision Mapping (`decision-mapping`) — hidden - Deobfuscating JavaScript Malware (`Deobfuscating JavaScript Malware`) — hidden - Deobfuscating PowerShell Obfuscated Malware (`Deobfuscating PowerShell Obfuscated Malware`) — hidden - Deploying Active Directory Honeytokens (`Deploying Active Directory Honeytokens`) — hidden - Deploying Cloud Deception with Decoy Resources (`Deploying Cloud Deception with Decoy Resources`) — hidden - Deploying Cloudflare Access for Zero Trust (`Deploying Cloudflare Access for Zero Trust`) — hidden - Deploying Decoy Files for Ransomware Detection (`Deploying Decoy Files for Ransomware Detection`) — hidden - Deploying EDR Agent with CrowdStrike (`Deploying EDR Agent with CrowdStrike`) — hidden - Deploying Honeytokens and Canarytokens (`Deploying Honeytokens and Canarytokens`) — hidden - Deploying Osquery for Endpoint Monitoring (`Deploying Osquery for Endpoint Monitoring`) — hidden - Deploying Palo Alto Prisma Access Zero Trust (`Deploying Palo Alto Prisma Access Zero Trust`) — hidden - Deploying Ransomware Canary Files (`Deploying Ransomware Canary Files`) — hidden - Deploying Software-Defined Perimeter (`Deploying Software-Defined Perimeter`) — hidden - Designing Adversary Engagement with MITRE Engage (`Designing Adversary Engagement with MITRE Engage`) — hidden - Detecting Anomalous Authentication Patterns (`Detecting Anomalous Authentication Patterns`) — hidden - Detecting ARP Poisoning in Network Traffic (`Detecting ARP Poisoning in Network Traffic`) — hidden - Detecting Attacks on Historian Servers (`Detecting Attacks on Historian Servers`) — hidden - Detecting Attacks on SCADA Systems (`Detecting Attacks on SCADA Systems`) — hidden - Detecting AWS GuardDuty Findings Automation (`Detecting AWS GuardDuty Findings Automation`) — hidden - Detecting Azure Service Principal Abuse (`Detecting Azure Service Principal Abuse`) — hidden - Detecting Beaconing Patterns with Zeek (`Detecting Beaconing Patterns with Zeek`) — hidden - Detecting Bluetooth Low Energy Attacks (`Detecting Bluetooth Low Energy Attacks`) — hidden - Detecting Business Email Compromise (`Detecting Business Email Compromise`) — hidden - Detecting Cloud Threats with GuardDuty (`Detecting Cloud Threats with GuardDuty`) — hidden - Detecting Command and Control Over DNS (`Detecting Command and Control Over DNS`) — hidden - Detecting Container Drift at Runtime (`Detecting Container Drift at Runtime`) — hidden - Detecting Container Runtime Threats with Falco (`Detecting Container Runtime Threats with Falco`) — hidden - Detecting Credential Dumping Techniques (`Detecting Credential Dumping Techniques`) — hidden - Detecting Cryptomining in Cloud (`Detecting Cryptomining in Cloud`) — hidden - Detecting Data and Model Poisoning (`Detecting Data and Model Poisoning`) — hidden - Detecting DCSync Attack in Active Directory (`Detecting DCSync Attack in Active Directory`) — hidden - Detecting Deepfake Audio in Vishing Attacks (`Detecting Deepfake Audio in Vishing Attacks`) — hidden - Detecting DLL Sideloading Attacks (`Detecting DLL Sideloading Attacks`) — hidden - Detecting DNS Exfiltration with DNS Query Analysis (`Detecting DNS Exfiltration with DNS Query Analysis`) — hidden - Detecting Email Forwarding Rules Attack (`Detecting Email Forwarding Rules Attack`) — hidden - Detecting Entra Offensive Tools in Graph Logs (`Detecting Entra Offensive Tools in Graph Logs`) — hidden - Detecting Evasion Techniques in Endpoint Logs (`Detecting Evasion Techniques in Endpoint Logs`) — hidden - Detecting Exfiltration over DNS with Zeek (`Detecting Exfiltration over DNS with Zeek`) — hidden - Detecting Fileless Attacks on Endpoints (`Detecting Fileless Attacks on Endpoints`) — hidden - Detecting Fileless Malware Techniques (`Detecting Fileless Malware Techniques`) — hidden - Detecting Golden Ticket Attacks in Kerberos Logs (`Detecting Golden Ticket Attacks in Kerberos Logs`) — hidden - Detecting Golden Ticket Forgery (`Detecting Golden Ticket Forgery`) — hidden - Detecting Insider Data Exfiltration via DLP (`Detecting Insider Data Exfiltration via DLP`) — hidden - Detecting Insider Threat Behaviors (`Detecting Insider Threat Behaviors`) — hidden - Detecting Kerberoasting Attacks (`Detecting Kerberoasting Attacks`) — hidden - Detecting Lateral Movement in Network (`Detecting Lateral Movement in Network`) — hidden - Detecting Lateral Movement with Splunk (`Detecting Lateral Movement with Splunk`) — hidden - Detecting Living Off the Land Attacks (`Detecting Living Off the Land Attacks`) — hidden - Detecting Malicious npm Packages (`Detecting Malicious npm Packages`) — hidden - Detecting Malicious Scheduled Tasks with Sysmon (`Detecting Malicious Scheduled Tasks with Sysmon`) — hidden - Detecting Mimikatz Execution Patterns (`Detecting Mimikatz Execution Patterns`) — hidden - Detecting Mobile Malware Behavior (`Detecting Mobile Malware Behavior`) — hidden - Detecting Modbus Command Injection Attacks (`Detecting Modbus Command Injection Attacks`) — hidden - Detecting Model Extraction Attacks (`Detecting Model Extraction Attacks`) — hidden - Detecting Network Anomalies with Zeek (`Detecting Network Anomalies with Zeek`) — hidden - Detecting Network Scanning with IDS Signatures (`Detecting Network Scanning with IDS Signatures`) — hidden - Detecting NTLM Relay with Event Correlation (`Detecting NTLM Relay with Event Correlation`) — hidden - Detecting OAuth Token Theft (`Detecting OAuth Token Theft`) — hidden - Detecting Pass The Hash Attacks (`Detecting Pass The Hash Attacks`) — hidden - Detecting Privilege Escalation Attempts (`Detecting Privilege Escalation Attempts`) — hidden - Detecting Privilege Escalation in Kubernetes Pods (`Detecting Privilege Escalation in Kubernetes Pods`) — hidden - Detecting Process Hollowing Technique (`Detecting Process Hollowing Technique`) — hidden - Detecting Process Injection Techniques (`Detecting Process Injection Techniques`) — hidden - Detecting QR Code Phishing with Email Security (`Detecting QR Code Phishing with Email Security`) — hidden - Detecting Ransomware Encryption Behavior (`Detecting Ransomware Encryption Behavior`) — hidden - Detecting Ransomware Precursors in Network Traffic (`Detecting Ransomware Precursors in Network Traffic`) — hidden - Detecting Rootkit Activity (`Detecting Rootkit Activity`) — hidden - Detecting Secure Boot Bypass (`Detecting Secure Boot Bypass`) — hidden - Detecting Serverless Function Injection (`Detecting Serverless Function Injection`) — hidden - Detecting Service Account Abuse (`Detecting Service Account Abuse`) — hidden - Detecting Spearphishing with Email Gateway (`Detecting Spearphishing with Email Gateway`) — hidden - Detecting Stuxnet-Style Attacks (`Detecting Stuxnet-Style Attacks`) — hidden - Detecting Suspicious Powershell Execution (`Detecting Suspicious Powershell Execution`) — hidden - Detecting T1003 Credential Dumping with EDR (`Detecting T1003 Credential Dumping with EDR`) — hidden - Detecting T1055 Process Injection with Sysmon (`Detecting T1055 Process Injection with Sysmon`) — hidden - Detecting T1548 Abuse Elevation Control Mechanism (`Detecting T1548 Abuse Elevation Control Mechanism`) — hidden - Detecting WMI Persistence (`Detecting WMI Persistence`) — hidden - Distributed Tracing (`distributed-tracing`) — hidden - Enumerating Cloud with CloudFox (`Enumerating Cloud with CloudFox`) — hidden - Eradicating Malware from Infected Systems (`Eradicating Malware from Infected Systems`) — hidden - Event Sourcing Architect (`event-sourcing-architect`) — hidden - Event Store Design (`event-store-design`) — hidden - Executing Active Directory Attack Simulation (`Executing Active Directory Attack Simulation`) — hidden - Executing the NIST RMF to an Authorization to Operate (ATO) (`Executing the NIST RMF to an Authorization to Operate (ATO)`) — hidden - Executing Red Team Engagement Planning (`Executing Red Team Engagement Planning`) — hidden - Executing Red Team Exercise (`Executing Red Team Exercise`) — hidden - Exploiting Active Directory Certificate Services ESC1 (`Exploiting Active Directory Certificate Services ESC1`) — hidden - Exploiting Active Directory with BloodHound (`Exploiting Active Directory with BloodHound`) — hidden - Exploiting AD CS with Certipy (`Exploiting AD CS with Certipy`) — hidden - Exploiting AWS with Pacu (`Exploiting AWS with Pacu`) — hidden - Exploiting Broken Function Level Authorization (`Exploiting Broken Function Level Authorization`) — hidden - Exploiting Broken Link Hijacking (`Exploiting Broken Link Hijacking`) — hidden - Exploiting Constrained Delegation Abuse (`Exploiting Constrained Delegation Abuse`) — hidden - Exploiting HTTP Request Smuggling (`Exploiting HTTP Request Smuggling`) — hidden - Exploiting Insecure Deserialization (`Exploiting Insecure Deserialization`) — hidden - Exploiting Kerberoasting with Impacket (`Exploiting Kerberoasting with Impacket`) — hidden - Exploiting MS17-010 EternalBlue Vulnerability (`Exploiting MS17-010 EternalBlue Vulnerability`) — hidden - Exploiting noPac (CVE-2021-42278 / CVE-2021-42287) (`Exploiting noPac (CVE-2021-42278 / CVE-2021-42287)`) — hidden - Exploiting OAuth Misconfiguration (`Exploiting OAuth Misconfiguration`) — hidden - Exploiting Race Condition Vulnerabilities (`Exploiting Race Condition Vulnerabilities`) — hidden - Exploiting SMB Vulnerabilities with Metasploit (`Exploiting SMB Vulnerabilities with Metasploit`) — hidden - Exploiting Zerologon Vulnerability (CVE-2020-1472) (`Exploiting Zerologon Vulnerability (CVE-2020-1472)`) — hidden - Extracting Config from Agent Tesla RAT (`Extracting Config from Agent Tesla RAT`) — hidden - Extracting IOCs from Malware Samples (`Extracting IOCs from Malware Samples`) — hidden - Extracting Memory Artifacts with Rekall (`Extracting Memory Artifacts with Rekall`) — hidden - Feature Flags Architect (`feature-flags-architect`) — hidden - Generating Threat Intelligence Reports (`Generating Threat Intelligence Reports`) — hidden - Git Worktree Manager (`git-worktree-manager`) — hidden - GitHub Actions Templates (`github-actions-templates`) — hidden - github-deep-research (`github-deep-research`) — hidden - GitLab CI Patterns (`gitlab-ci-patterns`) — hidden - GitOps Workflow (`gitops-workflow`) — hidden - GPU Acceleration for Python (`gpu-acceleration-python`) — hidden - Grafana Dashboards (`grafana-dashboards`) — hidden - grill-me (`grill-me`) — hidden - grill-with-docs (`grill-with-docs`) — hidden - gstack-upgrade (`gstack-upgrade`) — hidden - Hacker News front-page scraper (`hackernews-frontpage`) — hidden - Hardening Docker Daemon Configuration (`Hardening Docker Daemon Configuration`) — hidden - health (`health`) — hidden - Helm Chart Builder (`helm-chart-builder`) — hidden - HR-Pro (`hr-pro`) — hidden - Hunting Advanced Persistent Threats (`Hunting Advanced Persistent Threats`) — hidden - Hunting Bootkits in the EFI System Partition (`Hunting Bootkits in the EFI System Partition`) — hidden - Hunting EVTX with Chainsaw (`Hunting EVTX with Chainsaw`) — hidden - Hunting for Anomalous PowerShell Execution (`Hunting for Anomalous PowerShell Execution`) — hidden - Hunting for Beaconing with Frequency Analysis (`Hunting for Beaconing with Frequency Analysis`) — hidden - Hunting for Cobalt Strike Beacons (`Hunting for Cobalt Strike Beacons`) — hidden - Hunting for Command and Control Beaconing (`Hunting for Command and Control Beaconing`) — hidden - Hunting for Data Exfiltration Indicators (`Hunting for Data Exfiltration Indicators`) — hidden - Hunting for DCOM Lateral Movement (`Hunting for DCOM Lateral Movement`) — hidden - Hunting for DCSync Attacks (`Hunting for DCSync Attacks`) — hidden - Hunting for Defense Evasion via Timestomping (`Hunting for Defense Evasion via Timestomping`) — hidden - Hunting for DNS Tunneling with Zeek (`Hunting for DNS Tunneling with Zeek`) — hidden - Hunting for Domain Fronting C2 Traffic (`Hunting for Domain Fronting C2 Traffic`) — hidden - Hunting for Lateral Movement via WMI (`Hunting for Lateral Movement via WMI`) — hidden - Hunting For Living Off The Cloud Techniques (`Hunting For Living Off The Cloud Techniques`) — hidden - Hunting for Living-off-the-Land Binaries (LOLBins) (`Hunting for Living-off-the-Land Binaries (LOLBins)`) — hidden - Hunting for LOLBins Execution in Endpoint Logs (`Hunting for LOLBins Execution in Endpoint Logs`) — hidden - Hunting for Persistence Mechanisms in Windows (`Hunting for Persistence Mechanisms in Windows`) — hidden - Hunting for Persistence via WMI Subscriptions (`Hunting for Persistence via WMI Subscriptions`) — hidden - Hunting For Registry Persistence Mechanisms (`Hunting For Registry Persistence Mechanisms`) — hidden - Hunting For Scheduled Task Persistence (`Hunting For Scheduled Task Persistence`) — hidden - Hunting For Shadow Copy Deletion (`Hunting For Shadow Copy Deletion`) — hidden - Hunting For Spearphishing Indicators (`Hunting For Spearphishing Indicators`) — hidden - Hunting For Supply Chain Compromise (`Hunting For Supply Chain Compromise`) — hidden - Hunting for Suspicious Scheduled Tasks (`Hunting for Suspicious Scheduled Tasks`) — hidden - Hunting For Unusual Network Connections (`Hunting For Unusual Network Connections`) — hidden - Hunting For Webshell Activity (`Hunting For Webshell Activity`) — hidden - Hunting SaaS SSO Token Abuse (`Hunting SaaS SSO Token Abuse`) — hidden - i18n & Localization (`i18n-localization`) — hidden - implement (`implement`) — hidden - Implementing Alert Fatigue Reduction (`Implementing Alert Fatigue Reduction`) — hidden - Implementing Anti-Phishing Training Program (`Implementing Anti-Phishing Training Program`) — hidden - Implementing Anti-Ransomware Group Policy (`Implementing Anti-Ransomware Group Policy`) — hidden - Implementing Attack Path Analysis with XM Cyber (`Implementing Attack Path Analysis with XM Cyber`) — hidden - Implementing AWS Nitro Enclave Security (`Implementing AWS Nitro Enclave Security`) — hidden - Implementing BeyondCorp Zero Trust Access Model (`Implementing BeyondCorp Zero Trust Access Model`) — hidden - Implementing Browser Isolation for Zero Trust (`Implementing Browser Isolation for Zero Trust`) — hidden - Implementing Canary Tokens for Network Intrusion Detection (`Implementing Canary Tokens for Network Intrusion Detection`) — hidden - Implementing CISA Zero Trust Maturity Model (`Implementing CISA Zero Trust Maturity Model`) — hidden - Implementing Container Image Minimal Base with Distroless (`Implementing Container Image Minimal Base with Distroless`) — hidden - Implementing Continuous Security Validation with BAS (`Implementing Continuous Security Validation with BAS`) — hidden - Implementing DevSecOps Security Scanning (`Implementing DevSecOps Security Scanning`) — hidden - Implementing Diamond Model Analysis (`Implementing Diamond Model Analysis`) — hidden - Implementing DMARC, DKIM, and SPF Email Security (`Implementing DMARC, DKIM, and SPF Email Security`) — hidden - Implementing Dragos Platform for OT Monitoring (`Implementing Dragos Platform for OT Monitoring`) — hidden - Implementing eBPF Security Monitoring (`Implementing eBPF Security Monitoring`) — hidden - Implementing Email Sandboxing with Proofpoint (`Implementing Email Sandboxing with Proofpoint`) — hidden - Implementing Google Workspace Phishing Protection (`Implementing Google Workspace Phishing Protection`) — hidden - Implementing Hardware Security Key Authentication (`Implementing Hardware Security Key Authentication`) — hidden - Implementing HIPAA Security Rule Safeguards (`Implementing HIPAA Security Rule Safeguards`) — hidden - Implementing Honeypot for Ransomware Detection (`Implementing Honeypot for Ransomware Detection`) — hidden - Implementing Identity Verification for Zero Trust (`Implementing Identity Verification for Zero Trust`) — hidden - Implementing IEC 62443 Security Zones (`Implementing IEC 62443 Security Zones`) — hidden - Implementing Immutable Backup with Restic (`Implementing Immutable Backup with Restic`) — hidden - Implementing LLM Guardrails for Security (`Implementing LLM Guardrails for Security`) — hidden - Implementing Log Integrity with Blockchain (`Implementing Log Integrity with Blockchain`) — hidden - Implementing Microsegmentation with Guardicore (`Implementing Microsegmentation with Guardicore`) — hidden - Implementing Mimecast Targeted Attack Protection (`Implementing Mimecast Targeted Attack Protection`) — hidden - Implementing MITRE ATT&CK Coverage Mapping (`Implementing MITRE ATT&CK Coverage Mapping`) — hidden - Implementing NERC CIP Compliance Controls (`Implementing NERC CIP Compliance Controls`) — hidden - Implementing Network Access Control (`Implementing Network Access Control`) — hidden - Implementing Network Deception with Honeypots (`Implementing Network Deception with Honeypots`) — hidden - Implementing Network Intrusion Prevention with Suricata (`Implementing Network Intrusion Prevention with Suricata`) — hidden - Implementing Network Policies for Kubernetes (`Implementing Network Policies for Kubernetes`) — hidden - Implementing Network Segmentation for OT (`Implementing Network Segmentation for OT`) — hidden - Implementing Network Segmentation with Firewall Zones (`Implementing Network Segmentation with Firewall Zones`) — hidden - Implementing Network Traffic Analysis with Arkime (`Implementing Network Traffic Analysis with Arkime`) — hidden - Implementing Network Traffic Baselining (`Implementing Network Traffic Baselining`) — hidden - Implementing Next-Generation Firewall with Palo Alto (`Implementing Next-Generation Firewall with Palo Alto`) — hidden - Implementing OT Incident Response Playbook (`Implementing OT Incident Response Playbook`) — hidden - Implementing Passwordless Auth with Microsoft Entra (`Implementing Passwordless Auth with Microsoft Entra`) — hidden - Implementing Policy as Code with Open Policy Agent (`Implementing Policy as Code with Open Policy Agent`) — hidden - Implementing Privileged Session Monitoring (`Implementing Privileged Session Monitoring`) — hidden - Implementing Proofpoint Email Security Gateway (`Implementing Proofpoint Email Security Gateway`) — hidden - Implementing Ransomware Backup Strategy (`Implementing Ransomware Backup Strategy`) — hidden - Implementing Ransomware Kill Switch Detection (`Implementing Ransomware Kill Switch Detection`) — hidden - Implementing Rapid7 InsightVM for Scanning (`Implementing Rapid7 InsightVM for Scanning`) — hidden - Implementing RBAC Hardening for Kubernetes (`Implementing RBAC Hardening for Kubernetes`) — hidden - Implementing Security Chaos Engineering (`Implementing Security Chaos Engineering`) — hidden - Implementing Security Information Sharing with STIX 2.1 (`Implementing Security Information Sharing with STIX 2.1`) — hidden - Implementing SIEM Correlation Rules for APT (`Implementing SIEM Correlation Rules for APT`) — hidden - Implementing SIEM Use Cases for Detection (`Implementing SIEM Use Cases for Detection`) — hidden - Implementing Sigstore for Software Signing (`Implementing Sigstore for Software Signing`) — hidden - Implementing SOAR Automation with Phantom (`Implementing SOAR Automation with Phantom`) — hidden - Implementing SOAR Playbook for Phishing (`Implementing SOAR Playbook for Phishing`) — hidden - Implementing SOAR Playbook with Palo Alto XSOAR (`Implementing SOAR Playbook with Palo Alto XSOAR`) — hidden - Implementing STIX/TAXII Feed Integration (`Implementing STIX/TAXII Feed Integration`) — hidden - Implementing TAXII Server with OpenTAXII (`Implementing TAXII Server with OpenTAXII`) — hidden - Implementing Threat Intelligence Lifecycle Management (`Implementing Threat Intelligence Lifecycle Management`) — hidden - Implementing Threat Modeling with MITRE ATT&CK (`Implementing Threat Modeling with MITRE ATT&CK`) — hidden - Implementing Ticketing System for Incidents (`Implementing Ticketing System for Incidents`) — hidden - Implementing USB Device Control Policy (`Implementing USB Device Control Policy`) — hidden - Implementing Velociraptor for IR Collection (`Implementing Velociraptor for IR Collection`) — hidden - Implementing Zero Trust DNS with NextDNS (`Implementing Zero Trust DNS with NextDNS`) — hidden - Implementing Zero Trust in Cloud (`Implementing Zero Trust in Cloud`) — hidden - Incident Response (`incident-response`) — hidden - Insecure Defaults Detection (`Insecure Defaults Detection`) — hidden - Integrating DAST with OWASP ZAP in Pipeline (`Integrating DAST with OWASP ZAP in Pipeline`) — hidden - Interview Me (`interview-me`) — hidden - Investigate (`Investigate`) — hidden - Investigating Insider Threat Indicators (`Investigating Insider Threat Indicators`) — hidden - Investigating Phishing Email Incident (`Investigating Phishing Email Incident`) — hidden - ios-clean (`ios-clean`) — hidden - ios-fix (`ios-fix`) — hidden - ios-qa (`ios-qa`) — hidden - ios-sync (`ios-sync`) — hidden - ISO 27001 ISMS Audit Prep (`iso27001-audit-prep`) — hidden - Jupyter Notebook Creation (`jupyter-notebook-creation`) — hidden - Kubernetes Operator (`Kubernetes Operator Development`) — hidden - macos-computer-use (`macos-computer-use`) — hidden - Managed Agent Launch (`Managed Agent Launch`) — hidden - Managing Cloud Identity with Okta (`Managing Cloud Identity with Okta`) — hidden - Managing Intelligence Lifecycle (`Managing Intelligence Lifecycle`) — hidden - Managing Third-Party Vendor Risk (`Managing Third-Party Vendor Risk`) — hidden - Mapping Attack Paths with BloodHound CE (`Mapping Attack Paths with BloodHound CE`) — hidden - Mapping MITRE ATT&CK Techniques (`Mapping MITRE ATT&CK Techniques`) — hidden - MCP Integration for Claude Code Plugins (`mcp-integration`) — hidden - MCP Security Review (`MCP Security Review`) — hidden - MCP Server Builder (`mcp-server-builder`) — hidden - Migrating to Post-Quantum Cryptography (`Migrating to Post-Quantum Cryptography`) — hidden - Migration Architect (`migration-architect`) — hidden - minecraft-modpack-server (`minecraft-modpack-server`) — hidden - MockHunter — Live Page Reality Check (`mock-hunter`) — hidden - Modeling Threats with OpenCTI (`Modeling Threats with OpenCTI`) — hidden - Monitoring Dark Web Sources (`Monitoring Dark Web Sources`) — hidden - MPP Agent (`mpp-agent`) — hidden - On-Call Handoff Patterns (`on-call-handoff-patterns`) — hidden - Operating Havoc C2 (`Operating Havoc C2`) — hidden - Operating Sliver C2 (`Operating Sliver C2`) — hidden - Operationalizing MISP Threat Feeds (`Operationalizing MISP Threat Feeds`) — hidden - Patent — Prior-Art + Landscape Intelligence (`patent`) — hidden - Performing Active Directory BloodHound Analysis (`Performing Active Directory BloodHound Analysis`) — hidden - Performing Active Directory Compromise Investigation (`Performing Active Directory Compromise Investigation`) — hidden - Performing Active Directory Forest Trust Attack (`Performing Active Directory Forest Trust Attack`) — hidden - Performing Active Directory Penetration Test (`Performing Active Directory Penetration Test`) — hidden - Performing Active Directory Vulnerability Assessment (`Performing Active Directory Vulnerability Assessment`) — hidden - Performing Adversary-in-the-Middle Phishing Detection (`Performing Adversary-in-the-Middle Phishing Detection`) — hidden - Performing AI-Driven OSINT Correlation (`Performing AI-Driven OSINT Correlation`) — hidden - Performing Alert Triage with Elastic SIEM (`Performing Alert Triage with Elastic SIEM`) — hidden - Performing API Rate Limiting Bypass (`Performing API Rate Limiting Bypass`) — hidden - Performing Authenticated Scan with OpenVAS (`Performing Authenticated Scan with OpenVAS`) — hidden - Performing Automated Malware Analysis with CAPE (`Performing Automated Malware Analysis with CAPE`) — hidden - Performing Blind SSRF Exploitation (`Performing Blind SSRF Exploitation`) — hidden - Performing Brand Monitoring for Impersonation (`Performing Brand Monitoring for Impersonation`) — hidden - Performing Container Security Scanning with Trivy (`Performing Container Security Scanning with Trivy`) — hidden - Performing Content Security Policy Bypass (`Performing Content Security Policy Bypass`) — hidden - Performing Dark Web Monitoring for Threats (`Performing Dark Web Monitoring for Threats`) — hidden - Performing Deception Technology Deployment (`Performing Deception Technology Deployment`) — hidden - Performing DMARC Policy Enforcement Rollout (`Performing DMARC Policy Enforcement Rollout`) — hidden - Performing Dynamic Analysis with ANY.RUN (`Performing Dynamic Analysis with ANY.RUN`) — hidden - Performing External Network Penetration Test (`Performing External Network Penetration Test`) — hidden - Performing False Positive Reduction in SIEM (`Performing False Positive Reduction in SIEM`) — hidden - Performing Firmware Extraction with Binwalk (`Performing Firmware Extraction with Binwalk`) — hidden - Performing Firmware Malware Analysis (`Performing Firmware Malware Analysis`) — hidden - Performing HTTP Parameter Pollution Attack (`Performing HTTP Parameter Pollution Attack`) — hidden - Performing Indicator Lifecycle Management (`Performing Indicator Lifecycle Management`) — hidden - Performing IOC Enrichment Automation (`Performing IOC Enrichment Automation`) — hidden - Performing IP Reputation Analysis with Shodan (`Performing IP Reputation Analysis with Shodan`) — hidden - Performing Kubernetes CIS Benchmark with kube-bench (`Performing Kubernetes CIS Benchmark with kube-bench`) — hidden - Performing Kubernetes Penetration Testing (`Performing Kubernetes Penetration Testing`) — hidden - Performing Lateral Movement Detection (`Performing Lateral Movement Detection`) — hidden - Performing Lateral Movement with WMIExec (`Performing Lateral Movement with WMIExec`) — hidden - Performing Log Source Onboarding in SIEM (`Performing Log Source Onboarding in SIEM`) — hidden - Performing Malware Hash Enrichment with VirusTotal (`Performing Malware Hash Enrichment with VirusTotal`) — hidden - Performing Malware IOC Extraction (`Performing Malware IOC Extraction`) — hidden - Performing Malware Triage with YARA (`Performing Malware Triage with YARA`) — hidden - Performing Memory Forensics with Volatility3 Plugins (`Performing Memory Forensics with Volatility3 Plugins`) — hidden - Performing Network Packet Capture Analysis (`Performing Network Packet Capture Analysis`) — hidden - Performing Network Traffic Analysis with TShark (`Performing Network Traffic Analysis with TShark`) — hidden - Performing OAuth Scope Minimization Review (`Performing OAuth Scope Minimization Review`) — hidden - Performing Open Source Intelligence Gathering (`Performing Open Source Intelligence Gathering`) — hidden - Performing Paste Site Monitoring for Credentials (`Performing Paste Site Monitoring for Credentials`) — hidden - Performing Phishing Simulation with GoPhish (`Performing Phishing Simulation with GoPhish`) — hidden - Performing Physical Intrusion Assessment (`Performing Physical Intrusion Assessment`) — hidden - Performing PLC Firmware Security Analysis (`Performing PLC Firmware Security Analysis`) — hidden - Performing Purple Team Atomic Testing (`Performing Purple Team Atomic Testing`) — hidden - Performing Purple Team Exercise (`Performing Purple Team Exercise`) — hidden - Performing Ransomware Response (`Performing Ransomware Response`) — hidden - Performing Ransomware Tabletop Exercise (`Performing Ransomware Tabletop Exercise`) — hidden - For authorized penetration testing and lab environments only (`For authorized penetration testing and lab environments only`) — hidden - Performing Red Team Operations with Covenant C2 (`Performing Red Team Operations with Covenant C2`) — hidden - Performing Second-Order SQL Injection (`Performing Second-Order SQL Injection`) — hidden - Performing SQLite Database Forensics (`Performing SQLite Database Forensics`) — hidden - Performing SSL/TLS Inspection Configuration (`Performing SSL/TLS Inspection Configuration`) — hidden - Performing Static Malware Analysis with PEStudio (`Performing Static Malware Analysis with PEStudio`) — hidden - Performing Threat Hunting with YARA Rules (`Performing Threat Hunting with YARA Rules`) — hidden - Performing Threat Intelligence Sharing with MISP (`Performing Threat Intelligence Sharing with MISP`) — hidden - Performing Threat Landscape Assessment for Sector (`Performing Threat Landscape Assessment for Sector`) — hidden - Performing VLAN Hopping Attack (`Performing VLAN Hopping Attack`) — hidden - Performing Vulnerability Scanning with Nessus (`Performing Vulnerability Scanning with Nessus`) — hidden - Performing Web Application Scanning with Nikto (`Performing Web Application Scanning with Nikto`) — hidden - Performing Web Cache Deception Attack (`Performing Web Cache Deception Attack`) — hidden - Performing WiFi Password Cracking with Aircrack-ng (`Performing WiFi Password Cracking with Aircrack-ng`) — hidden - Performing Windows Artifact Analysis with Eric Zimmerman Tools (`Performing Windows Artifact Analysis with Eric Zimmerman Tools`) — hidden - Performing Wireless Security Assessment with Kismet (`Performing Wireless Security Assessment with Kismet`) — hidden - Performing YARA Rule Development for Detection (`Performing YARA Rule Development for Detection`) — hidden - Phase-Gated Debugging (`phase-gated-debugging`) — hidden - plan-design-review (`plan-design-review`) — hidden - Playground Builder (`playground`) — hidden - plugin-creator (`plugin-creator`) — hidden - podcast-generation (`podcast-generation`) — hidden - Post-Exploiting Microsoft Graph with GraphRunner (`Post-Exploiting Microsoft Graph with GraphRunner`) — hidden - Postmortem Writing (`postmortem-writing`) — hidden - PR Comment Handler (`pr-comment-handler`) — hidden - PR to HyperFrames (`pr-to-video`) — hidden - Pricing Strategy (`pricing-strategy`) — hidden - Prioritizing Vulnerabilities with CVSS Scoring (`Prioritizing Vulnerabilities with CVSS Scoring`) — hidden - Processing STIX/TAXII Feeds (`Processing STIX/TAXII Feeds`) — hidden - Product Discovery (`product-discovery`) — hidden - Product Launch to HyperFrames (`product-launch-video`) — hidden - Profiling Threat Actor Groups (`Profiling Threat Actor Groups`) — hidden - Progressive Estimation (`progressive-estimation`) — hidden - project-artifact — an opinionated project status page (`project-artifact`) — hidden - Prometheus Configuration (`prometheus-configuration`) — hidden - Prototype (`prototype`) — hidden - Pulse — Multi-Source Recency Research (`pulse`) — hidden - Python Observability (`python-observability`) — hidden - python-patch-safety (`python-patch-safety`) — hidden - Python Performance Optimization (`python-performance-optimization`) — hidden - RAG Architect (`rag-architect`) — hidden - RAG Implementation (`rag-implementation`) — hidden - Railway Deploy (`railway-deploy`) — hidden - Recovering from Ransomware Attack (`Recovering from Ransomware Attack`) — hidden - Refactoring Patterns (`refactoring-patterns`) — hidden - Relaying NTLM for ADCS ESC8 (`Relaying NTLM for ADCS ESC8`) — hidden - Remotion to HyperFrames (`remotion-to-hyperframes`) — hidden - Repository Audit Loop (`repository-audit-loop`) — hidden - Research — Hybrid Router + Fallback (`research-router`) — hidden - Reverse Engineering Android Malware with JADX (`Reverse Engineering Android Malware with JADX`) — hidden - Reverse Engineering .NET Malware with dnSpy (`Reverse Engineering .NET Malware with dnSpy`) — hidden - Reverse Engineering Malware with Ghidra (`Reverse Engineering Malware with Ghidra`) — hidden - Reverse Engineering Ransomware Encryption Routine (`Reverse Engineering Ransomware Encryption Routine`) — hidden - Reverse Engineering Rust Malware (`Reverse Engineering Rust Malware`) — hidden - Saga Orchestration (`saga-orchestration`) — hidden - Scanning Containers with Trivy in CI/CD (`Scanning Containers with Trivy in CI/CD`) — hidden - Scanning Docker Images with Trivy (`Scanning Docker Images with Trivy`) — hidden - Scanning Network with Nmap Advanced Techniques (`Scanning Network with Nmap Advanced Techniques`) — hidden - Scenario War Room (`scenario-war-room`) — hidden - scrape (`scrape`) — hidden - Screenshot Automation (`screenshot-automation`) — hidden - Securing Agentic AI Tool Invocation (`Securing Agentic AI Tool Invocation`) — hidden - Securing AWS IAM Permissions (`Securing AWS IAM Permissions`) — hidden - Securing Azure with Microsoft Defender (`Securing Azure with Microsoft Defender`) — hidden - Securing Kubernetes on Cloud (`Securing Kubernetes on Cloud`) — hidden - Security Best Practices (`Security Best Practices`) — hidden - Self-Improving Champion Loop (`Self-Improving Champion Loop`) — hidden - Session Report (`session-report`) — hidden - Session Usage Report (`session-usage-report`) — hidden - simmer-refinement (`simmer-refinement`) — hidden - Site Architecture (`site-architecture`) — hidden - Skill Contract Schema (`skill-contract-schema`) — hidden - skill-creator (`skill-creator`) — hidden - skill-factory-review (`skill-factory-review`) — hidden - skill-installer (`skill-installer`) — hidden - skill-library-evolution (`skill-library-evolution`) — hidden - SkillOpt-Sleep Pattern (`skillopt-sleep`) — hidden - Slack GIF Creator (`slack-gif-creator`) — hidden - slides (`slides`) — hidden - Slideshow authoring contract (`slideshow`) — hidden - Snowflake Development (`Snowflake Data Pipeline Development`) — hidden - SOC 2 Type II Audit Prep (`soc2-audit-prep`) — hidden - spreadsheets (`spreadsheets`) — hidden - Stripe Link CLI (`stripe-link-cli`) — hidden - Stripe Projects (`stripe-projects`) — hidden - Syllabus — Course Supplementary Reading List (`syllabus`) — hidden - sync-gbrain (`sync-gbrain`) — hidden - Talking Head Recut (`talking-head-recut`) — hidden - Test-Driven Development (`tdd`) — hidden - Terraform Patterns (`terraform-patterns`) — hidden - Testing API Authentication Weaknesses (`Testing API Authentication Weaknesses`) — hidden - Testing API Security with OWASP Top 10 (`Testing API Security with OWASP Top 10`) — hidden - Testing for Broken Access Control (`Testing for Broken Access Control`) — hidden - Testing for Business Logic Vulnerabilities (`Testing for Business Logic Vulnerabilities`) — hidden - Testing for Email Header Injection (`Testing for Email Header Injection`) — hidden - Testing for JSON Web Token Vulnerabilities (`Testing for JSON Web Token Vulnerabilities`) — hidden - Testing for Open Redirect Vulnerabilities (`Testing for Open Redirect Vulnerabilities`) — hidden - Testing for System Prompt Leakage (`Testing for System Prompt Leakage`) — hidden - Testing for XML Injection Vulnerabilities (`Testing for XML Injection Vulnerabilities`) — hidden - Testing for XSS Vulnerabilities with Burp Suite (`Testing for XSS Vulnerabilities with Burp Suite`) — hidden - Testing Ransomware Recovery Procedures (`Testing Ransomware Recovery Procedures`) — hidden - Theme Factory (`theme-factory`) — hidden - Validating Backup Integrity for Recovery (`Validating Backup Integrity for Recovery`) — hidden - Validating TPM Measured Boot and Attestation (`Validating TPM Measured Boot and Attestation`) — hidden - vendor-skill-packaging (`vendor-skill-packaging`) — hidden - video-generation (`video-generation`) — hidden - Web Artifacts Builder (`web-artifacts-builder`) — hidden - web-design-guidelines (`web-design-guidelines`) — hidden - Website to HyperFrames (`website-to-video`) — hidden - Workflow Builder (`Multi-Agent Workflow Orchestration`) — hidden - Workflow Orchestration Patterns (`workflow-orchestration`) — hidden - **Reference** (group) - Indexing Issue Auditor & Technical SEO Architect (`indexing-issue-auditor`) — hidden - Performing CVE Prioritization with KEV Catalog (`Performing CVE Prioritization with KEV Catalog`) — hidden - Plugin Settings Pattern for Claude Code Plugins (`plugin-settings`) — hidden - **Writing** (category) - **Playbook** (group) - Detecting Email Account Compromise (`Detecting Email Account Compromise`) — hidden - devex-review (`devex-review`) — hidden - EU AI Act Compliance Specialist (`eu-ai-act-specialist`) — hidden - Idea Lineage — Single-Idea Evolution (`idea-lineage`) — hidden - Implementing GDPR Data Subject Access Request (DSAR) Workflow (`Implementing GDPR Data Subject Access Request (DSAR) Workflow`) — hidden - Internal Communications (`Internal Communications`) — hidden - OKF Knowledge Extraction (`OKF Knowledge Extraction`) — hidden - Performing Cryptographic Audit of Application (`Performing Cryptographic Audit of Application`) — hidden - Performing DNS Enumeration and Zone Transfer (`Performing DNS Enumeration and Zone Transfer`) — hidden - Performing Privileged Account Access Review (`Performing Privileged Account Access Review`) — hidden - plan-tune (`plan-tune`) — hidden - Skill Writing Style (`Skill Writing Style`) — hidden - Testing Android Intents for Vulnerabilities (`Testing Android Intents for Vulnerabilities`) — hidden - writing-beats (`writing-beats`) — hidden - writing-fragments (`writing-fragments`) — hidden - writing-shape (`writing-shape`) — hidden - **Skill** (group) - Changelog Generator (`changelog-generator`) — hidden - document-generate (`document-generate`) — hidden - docx (`docx`) — hidden - edit-article (`edit-article`) — hidden - make-pdf (`make-pdf`) — hidden - **Workflow** (group) - Doc Co-Authoring Workflow (`Doc Co-Authoring Workflow`) — hidden - document-release (`document-release`) — hidden - Dossier — Decision-Grade Entity Research (`dossier`) — hidden - newsletter-generation (`newsletter-generation`) — hidden ## Supersession edges - `AI SEO` → `AI Search Visibility Audit` - `frontend-design` → `Interface Design` - `HyperFrames Media` → `media-use`