Explore skills

Use this skill when working with ThreatLocker computer groups — the policy-scoping boundary that determines which allow/deny rules apply to which endpoints. Covers listing groups, mapping computer to group, and the difference between the dropdown and full list endpoints.

Use this skill when investigating events in the ThreatLocker Action Log (the API name is "audit") — building incident timelines, tracing a file's history across endpoints, identifying repeated denials, and correlating policy bypasses or audit-only matches with user/computer context.

Use this skill when triaging ThreatLocker application approval requests — the heart of day-to-day ThreatLocker operations. Covers pulling the pending queue, grouping requests by application/hash, applying signed-publisher heuristics, and recommending approve/deny decisions with audit-friendly reasoning.

Use this skill when working with the ThreatLocker MCP tools — raw-key authentication (NO Bearer prefix), multi-tenant routing via organizationId header, POST-heavy "GetByParameters" endpoints, pagination shape, and child-organization fan-out patterns.

Use this skill when working with Syncro MSP invoices - creating, managing, and tracking invoices and payments. Covers invoice fields, line items, payment processing, and billing workflows. Essential for MSP billing operations through Syncro.

Use this skill when working with Syncro MSP customers - creating, updating, searching, or managing customer records. Covers customer fields, contacts, sites/locations, and customer-related operations. Essential for MSP client management and onboarding through Syncro.

Use this skill when working with Syncro MSP assets - tracking hardware, software, and devices for customers. Covers asset fields, RMM integration, patch management, and asset-related operations. Essential for MSP inventory management and endpoint monitoring through Syncro.

Use this skill when working with SuperOps.ai runbooks and scripts - listing, executing, monitoring, and managing automated scripts on assets. Covers script types, execution parameters, scheduling, and result handling. Essential for MSP automation through SuperOps.ai RMM.

Use this skill when working with SuperOps.ai clients - creating, updating, searching, and managing client accounts. Covers client fields, sites, contacts, custom fields, and client lifecycle management. Essential for MSP account management through SuperOps.ai PSA.

Use this skill when working with SuperOps.ai assets - querying inventory, viewing asset details, running scripts, monitoring patches, and managing client/site associations. Covers asset fields, statuses, software inventory, disk usage, and activity tracking through the RMM integration. Essential for MSP technicians managing endpoints through SuperOps.ai.

Use this skill when working with SuperOps.ai alerts - listing, filtering, acknowledging, and resolving alerts from monitored assets. Covers alert types, severity levels, status management, and automated alert workflows. Essential for MSP technicians handling RMM monitoring through SuperOps.ai.

Use this skill when managing SpamTitan sender allowlists and blocklists — adding trusted senders to prevent false positives, blocking unwanted senders and domains, and reviewing existing list entries.