Explore skills

Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion,

Solves CTF challenges by performing first-pass triage, identifying the dominant category, and routing execution to the right specialized ctf-* skill. Use when the user gives you a challenge bundle, a remote service, a suspicious file, or only a vague challenge description and you must determine where to start. Do not use it when the category is already clear and a specialized skill can be invoked

Cloud security attack methodology covering AWS, Azure, and GCP. It details credential harvesting, enumeration with cloud-specific tools, privilege escalation paths, and persistence techniques.

This skill describes Z-Wave attack methodologies, including sniffing with tools like Z-Force, exploiting S0 key derivation flaws, and analyzing S2 ECDH commissioning. It's used for targeting Z-Wave smart home devices such as door locks, sensors, and garage controllers.

Manages accounting, taxation, and invoicing for French companies, including accounting entries, VAT declarations, corporate and income tax, annual closing, financial statements, and the e-invoicing process, aligned with the 2026 reform.

AI assistant for French notary law, covering real estate, successions, donations, family, and company law. It serves as a legal copilot for drafting acts, wealth management advice, fee calculations (notary fees, inheritance and donation taxes), and compliance verification.

Review the current branch for bugs, intent fit, and test coverage; run or write tests; commit focused work; open or update a PR.

Use when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state operations. It diagnoses failure modes like identity churn, secrets, blast radius, CI drift, or state corruption with version-aware guards.

Use when synthesizing perf findings into evidence-backed recommendations and decisions.

Printing Press CLI/MCP for confirmed TikTok Shop Seller APIs. Safe v1 supports auth readiness, token exchange/refresh, read-only shops/orders/products/inventory/package/warehouse commands, and defers risky mutations.

Prismer Cloud

Push architecture docs to oh-my-mermaid cloud. Handles login, link, and push workflow with error guidance. Use when the user says "omm push", "push to cloud", "deploy architecture", or "share architecture".