0x-Professor/Agent-Skills-Hub Skills

Scaffold MCP server projects and baseline tool contract checks. Use for defining tool schemas, generating starter server layouts, and validating MCP-ready structure.

Generate reusable multi-step agent workflow blueprints. Use for trigger/action orchestration, deterministic workflow definitions, and automation handoff artifacts.

Build incident response timelines and report packs from event logs. Use for detection-to-recovery reporting, phase tracking, and stakeholder-ready incident summaries.

Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting.

Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level prioritization.

Build transformer fine-tuning run plans with task settings, hyperparameters, and model-card outputs. Use for repeatable Hugging Face or PyTorch finetuning workflows.

Build repeatable data-to-Docs pipelines from Sheets and Drive sources. Use for automated status reports, template-based document assembly, and scheduled publishing workflows.

Design Gmail, Drive, Sheets, and Calendar automations with scope-aware plans. Use for repeatable daily task automation with explicit OAuth scopes and audit-ready outputs.

Plan reproducible ML experiment runs with explicit parameters, metrics, and artifacts. Use before model training to standardize tracking-ready experiment definitions.

Compare model candidates using weighted metrics and deterministic ranking outputs. Use for benchmark leaderboards and model promotion decisions.

Plan and orchestrate authorized Nmap host discovery, port and service enumeration, NSE profiling, and reporting artifacts for in-scope targets.

Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.

Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.

Test authentication and session management controls for bypass and account takeover scenarios.

Set up authorized C2 simulation workflows and measure defensive detection outcomes.

Assess AWS, Azure, and GCP controls for IAM escalation and cloud service exposure.

Test Docker and Kubernetes security controls for RBAC abuse, breakout, and secret exposure.

Test egress and DLP controls using synthetic canary data across authorized exfiltration channels.

Define legal scope, rules of engagement, and authorization artifacts for downstream pentest execution.