Explore skills

This skill supports CIPP operational tooling, including GDAP role and invite management, scheduled tasks, server health checks, version reporting, and application logs. It focuses on maintaining CIPP's health and proper delegation to managed tenants.

Use this skill when working with Checkpoint Harmony Email security policies - DLP policies, anti-phishing rules, anti-malware settings, quarantine policies, allow/block lists, and policy configuration. Covers policy types, enable/disable workflows, policy effects, and policy tuning best practices. Essential for MSP administrators managing email security policies across customer tenants in Checkpoi

Use this skill when working with Checkpoint Harmony Email security incidents - incident lifecycle, status transitions, investigation workflows, notes and evidence collection, remediation tracking. Covers incident creation, triage, escalation, and closure workflows for email security events. Essential for MSP security analysts managing incident response across customer tenants in Checkpoint Harmony

Use this skill for managing Exchange Online mailboxes via CIPP, including listing, auditing permissions, configuring auto-replies, and setting email forwarding. It covers key MSP operations like offboarding, leave coverage, and BEC remediation.

Use this skill when working with M365 license assignments and CSP license inventory through CIPP, listing license usage per tenant, identifying unused licenses, surfacing license SKUs available for assignment, and reviewing CSP-level license commitments. It drives license-rightsizing reports for MSP billing reviews.

Use this skill when correlating data across multiple vendor tools during incident investigation. Combines PSA tickets, RMM device state, documentation platform assets, and configuration monitoring changes into a unified incident summary. Vendor-agnostic workflow applicable to Kaseya, ConnectWise, HaloPSA, Syncro, Atera, and other MSP stacks.

Use this skill when working with SentinelOne PowerQuery and the Singularity Data Lake - executing threat hunting queries, understanding PowerQuery pipeline syntax, managing time ranges, and analyzing query results. Covers the powerquery, get_timestamp_range, and iso_to_unix_timestamp tools, query syntax reference, common hunting scenarios, and integration with Purple AI for query generation.

Use this skill when working with SentinelOne Purple AI - natural language cybersecurity investigation, threat hunting, behavioral anomaly analysis, MITRE ATT&CK TTP mapping, and PowerQuery generation. Covers the purple_ai tool, best practices for prompting, common investigation queries, and integration with PowerQuery execution.

Use this skill when working with Rootly on-call management - viewing shift metrics, generating handoff summaries, reviewing shift incidents, detecting on-call health risk, and understanding schedule coverage. Covers the get_oncall_handoff_summary, get_oncall_shift_metrics, get_shift_incidents, and check_oncall_health_risk MCP tools.

Use this skill when working with RunZero assets — searching and browsing the asset inventory, inspecting asset attributes, OS fingerprinting, hardware details, and network interfaces.

Use this skill when working with QuickBooks Online reports - generating Profit & Loss, Balance Sheet, Accounts Receivable Aging, Accounts Payable Aging, General Ledger, and other financial reports. Covers report parameters, date ranges, column customization, and MSP-specific financial analysis patterns like client profitability and aged receivables for collections.

Use this skill when working with QuickBooks Online payments - recording customer payments, applying payments to invoices, handling overpayments, refunds, credit memos, and payment reconciliation. Covers payment methods, deposit tracking, unapplied payments, and MSP payment collection workflows.