Risk Assessment Bundle

Browse all skill bundles

Included Skills (27)

1. Detection Engineering Coverage Evaluation — Detection Engineering Coverage Evaluation automates the entire detection engineering workflow in Google SecOps, from fetching threat intelligence and generating Threat Detection Opportunities to simulating attacker behavior with synthetic UDM events. It evaluates rule coverage and deploys gap-closing rules, enabling security teams to strengthen their detection capabilities efficiently. This skill is ideal for SecOps professionals seeking streamlined, end-to-end coverage assessment rather than standalone rule authoring or threat hunting.
2. Ransomware Leak Monitor — This tool monitors ransomware data leak sites to extract victim data and generate actionable threat intelligence reports for cybersecurity analysts and risk managers.
3. GCP Cost Optimizer — This skill evaluates Google Cloud workloads using the Well-Architected Framework to recommend FinOps practices for cost optimization.
4. Gke Cost Optimization — Optimizes GKE cluster and workload costs by rightsizing CPU and memory requests, configuring Spot VMs, CUDs, cost allocation, and resource quotas. It benefits DevOps and cloud architects who need precise cost control and efficient resource usage in GKE environments. The skill is not intended for general compute class provisioning or GPU selection, which are handled by a separate service.
5. AWS Cost Optimizer — Helps developers and FinOps teams reduce AWS spending through rightsizing and commitment planning.
6. Analyzing Mft For Deleted File Recovery — Analyze the NTFS Master File Table ($MFT) with MFTECmd, analyzeMFT,
7. AlloyDB Management Skill — Provision and manage AlloyDB PostgreSQL clusters/instances on Google Cloud, enabling HA clusters, read pools, and Terraform-managed deployments for developers.
8. Jira Automation — Automate Jira tasks via Rube MCP (Composio): issues, projects, sprints, boards, comments, users. Always search tools first for current schemas.
9. Vulnerability Prioritization Assistant — This tool helps security professionals calculate and interpret CVSS scores to effectively prioritize vulnerability remediation efforts based on industry-standard risk assessment frameworks.
10. Diamond Model Analyzer — This tool enables cybersecurity professionals to programmatically classify intrusion events and correlate threat data using the structured Diamond Model framework for actionable intelligence.
11. Hunting For Persistence Via Wmi Subscriptions — Hunts for adversary persistence via WMI event subscriptions (MITRE T1546.003)
12. Performing Automated Malware Analysis With Cape — Deploy and operate the CAPEv2 malware sandbox (a Cuckoo derivative) to run samples in a
13. LP Deal Analyzer — Screens private investment deals for passive LPs, highlighting risks, fees, and key questions for further diligence.
14. DNS Tunneling Detector — This tool identifies covert data exfiltration by analyzing DNS traffic patterns, query entropy, and record payloads to assist security analysts in threat detection.
15. Dependency Analysis — Analyze internal and package dependencies using Ontoly graph traversal.
16. API Change Detector — Identifies API changes in Python dependencies since the model's training cutoff and documents their impact.
17. DNS Exfiltration Detector — This tool analyzes Zeek DNS logs to identify data exfiltration and tunneling attempts by detecting high-entropy subdomains and anomalous query patterns for security analysts.
18. Database Dependency Analyzer — This tool traces references to database objects across SQL and application code to help developers safely assess the impact of schema modifications.
19. SpiderFoot OSINT Automator — This skill automates threat intelligence gathering and attack surface mapping by leveraging SpiderFoot's extensive module library to profile targets and analyze security data.
20. Privileged Account Discovery — This tool automates the identification and risk classification of privileged accounts across enterprise infrastructure to assist security teams in managing access controls.
21. Apple HIG Assistant — This tool helps developers implement Apple Human Interface Guidelines by leveraging existing design context to ensure consistent and accessible component usage.
22. Product Risk Assessor — This tool helps product teams stress-test feature ideas by identifying critical assumptions across value, usability, viability, and feasibility using multi-perspective analysis.
23. Interface Design Guidelines — Provides opinionated constraints and design patterns to help AI agents build high-quality, consistent, and effective user interfaces for modern web applications.
24. Codebase Context Mapper — This tool generates a comprehensive dependency and impact analysis map to help developers safely plan and execute complex codebase modifications.
25. Steve Jobs Persona — This agent simulates Steve Jobs to provide expert guidance on product design, innovative thinking, and high-impact presentation strategies for developers and entrepreneurs.
26. Launch Risk Manager — This tool helps project managers and engineering leads identify, track, and mitigate launch risks through structured governance and real-time escalation planning.
27. Community Sentiment Analyzer — This tool interprets qualitative feedback and community trends to help teams prioritize responses, manage risks, and prepare data-driven updates for stakeholders.