Explore skills

Use this skill when working with ThreatLocker-protected endpoints for fleet inventory, identifying offline agents, drilling into a single computer's check-in history, and correlating computers across organizations and groups.

Use this skill when working with ThreatLocker computer groups — the policy-scoping boundary that determines which allow/deny rules apply to which endpoints. Covers listing groups, mapping computer to group, and the difference between the dropdown and full list endpoints.

Use this skill when investigating events in the ThreatLocker Action Log (the API name is "audit") — building incident timelines, tracing a file's history across endpoints, identifying repeated denials, and correlating policy bypasses or audit-only matches with user/computer context.

Use this skill when triaging ThreatLocker application approval requests — the heart of day-to-day ThreatLocker operations. Covers pulling the pending queue, grouping requests by application/hash, applying signed-publisher heuristics, and recommending approve/deny decisions with audit-friendly reasoning.

Use this skill when working with the ThreatLocker MCP tools — raw-key authentication (NO Bearer prefix), multi-tenant routing via organizationId header, POST-heavy "GetByParameters" endpoints, pagination shape, and child-organization fan-out patterns.

Use this skill when working with Syncro MSP invoices - creating, managing, and tracking invoices and payments. Covers invoice fields, line items, payment processing, and billing workflows. Essential for MSP billing operations through Syncro.

Use this skill when working with Syncro MSP customers - creating, updating, searching, or managing customer records. Covers customer fields, contacts, sites/locations, and customer-related operations. Essential for MSP client management and onboarding through Syncro.

Use this skill when working with Syncro MSP assets - tracking hardware, software, and devices for customers. Covers asset fields, RMM integration, patch management, and asset-related operations. Essential for MSP inventory management and endpoint monitoring through Syncro.

Use this skill when managing sales opportunities in Salesbuildr - searching the pipeline, creating new opportunities, updating stages, and tracking deal values. Opportunities link companies and contacts to potential revenue.

Use this skill when searching for companies or contacts in Salesbuildr, looking up customer information, or creating new contacts. Covers company search, contact filtering by company, and contact creation with required fields.

Use this skill when making API calls to Salesbuildr. It covers authentication via api-key header, offset-based pagination, error handling, and rate limiting (500 requests per 10 minutes).

Use this skill when working with RunZero scan tasks — creating scans, scheduling recurring scans, managing explorers, configuring scan parameters, and reviewing scan results.