radio-copilot

1.8k

openclaw

Predict satellite passes (NOAA APT, METEOR LRPT, ISS) for a configured latitude/longitude and send WhatsApp alerts with manual dish alignment info (AOS/LOS azimuth+elevation, track direction, inclination). Use when setting up or operating a zero-AI pass scheduler/orchestrator for SDR satellite reception, including configuring NORAD IDs, minimum elevation, alert lead time, and optional remote capture/decode hooks (Pi RTL-SDR capture + Jetson SatDump decode).

hunt-apt

87

dandye

Hunt for a specific APT/threat actor in your environment. Use when you have a threat actor name or GTI collection ID and want to search for their TTPs and IOCs. Gathers intelligence from GTI, searches SIEM for IOCs and TTP-based indicators, and documents findings.

aptos

58

raintree-technology

Aptos blockchain and Move language expert. Covers Move programming (abilities, generics, resources), Aptos framework modules, smart contract development, token standards (Coin, Fungible Asset, Digital Asset), object model, gas optimization, and dApp integration. Triggers on Aptos, Move language, Move smart contract, Aptos blockchain, abilities, generics, resources, fungible asset, digital asset.

shelby

58

raintree-technology

Shelby Protocol expert for decentralized blob storage on Aptos blockchain. Covers erasure coding (Clay Codes), TypeScript SDK, smart contracts, CLI tools, storage providers, and dApp integration. High-performance storage for video streaming, AI training, and large datasets. Triggers on Shelby, Shelby Protocol, decentralized storage, Aptos storage, blob storage, ShelbyNodeClient, erasure coding, Clay Codes.

move-prover

58

raintree-technology

Move Prover formal verification expert for Aptos smart contracts. Write specifications (MSL), preconditions (requires), postconditions (ensures), invariants, abort conditions (aborts_if), quantifiers, schemas, and pragmas. Debug verification failures. Triggers on Move Prover, formal verification, spec, invariant, ensures, requires, aborts_if, precondition, postcondition.

decibel

58

raintree-technology

Decibel on-chain perpetual futures trading platform on Aptos. Covers trading engine, orderbook, TypeScript SDK, REST APIs, WebSocket streams, market data, position management, TWAP orders, and vault operations. Triggers on Decibel, perpetual futures, Aptos trading, on-chain trading, perps, orderbook, TWAP, market data, trading API.

dotnet-install

28

rysweet

.NET SDK and runtime installation across Windows, macOS, and Linux. Handles version detection, platform-specific installers (WinGet, Homebrew, apt, dnf), SDK vs runtime selection, offline installation, Docker setup, and troubleshooting. Auto-activates for .NET installation, setup, version management, and multi-platform deployment.

policyengine-healthcare

21

PolicyEngine

Healthcare program modeling in PolicyEngine-US — Medicaid, ACA marketplace, CHIP, and Medicare. Covers encoding rules, running analyses, and navigating the unique complexity of US healthcare programs. Triggers: "healthcare", "health insurance", "Medicaid", "ACA", "CHIP", "Medicare", "marketplace", "premium tax credit", "APTC", "PTC", "SLCSP", "benchmark plan", "rating area", "age curve", "family tier", "coverage gap", "Medicaid expansion", "MAGI", "medicaid_magi", "aca_magi", "medicaid_income_level", "medicaid_category", "enrollment", "takeup", "take-up", "per capita", "CSR", "cost sharing", "insurance premium", "second lowest silver", "required contribution percentage", "42 CFR", "IRC 36B", "categorical eligibility", "expansion adult", "healthcare reform", "healthcare analysis", "health policy".

Extension Guide V3

10

pacphi

Create Sindri V3 extensions for the Rust CLI platform. Use this guide when authoring V3 extensions, understanding the V3 extension.yaml structure, validating manifests against the V3 schema, using collision‑handling and project‑context features, adding extensions to the compatibility matrix, or upgrading extension software versions. It covers supported install methods — mise, apt, binary, npm, npm-global, script, and hybrid — and best practices for packaging and multi-distribution delivery.

sindri-extension-guide

10

pacphi

Guide users through creating Sindri extensions. Use when creating new extensions, understanding extension.yaml structure, validating extensions against schemas, or learning about extension installation methods (mise, apt, binary, npm, script, hybrid). Includes NEW capabilities system for project-init, authentication (multi-method API key + CLI auth), lifecycle hooks, and MCP integration. Helps with extension development, registry updates, and category assignment.

Extension Guide V2

10

pacphi

Create Sindri V2 extensions for the Bash/Docker platform. Use this when authoring V2 extensions, understanding the V2 extension.yaml structure, validating against the V2 schema, or working with VisionFlow extensions. Covers the mise, apt, binary, npm, script, and hybrid install methods, as well as the capabilities system.

hyperbolic-bulk

7

plurigrid

On-chain GF(3) entropy storage via Aptos Move - bulk-boundary correspondence where entropy lives in the interior and observables project to agents

braindance-worlds

7

plurigrid

GF(3)-conserved distribution of Claude threads across Aptos worlds

aptos-agent

7

plurigrid

Interact with Aptos blockchain - check balances, transfer APT, swap tokens, stake, and execute Move view functions. Features game-theoretic decision analysis with Nash equilibrium detection. All transactions require explicit approval.

aptos-society

7

plurigrid

Aptos Society Scale

threat-report-evaluation

6

refractionPOINT

Evaluate threat reports, breach analyses, and IOC reports to search for compromise indicators across LimaCharlie organizations. Extract IOCs (hashes, domains, IPs, file paths), perform IOC searches, identify malicious behaviors, generate LCQL queries, create D&R rules and lookups. Use when investigating threats, APT reports, malware analysis, breach postmortems, or threat intelligence feeds. Emphasizes working ONLY with data from the report and organization, never making assumptions.

pixi-install-nvidia

6

igamenovoer

Use when the user says "use pixi to install <some nvidia tool>" (or similar) and wants NVIDIA/CUDA/GPU packages installed via Pixi (no sudo/apt), e.g., CUDA toolkit pieces, cuDNN/NCCL, PyTorch CUDA builds, RAPIDS.

profiling-threat-actor-groups

2

mukul975

Develops comprehensive threat actor profiles for APT groups, criminal organizations, and hacktivist collectives by aggregating TTP documentation, historical campaign data, tooling fingerprints, and attribution indicators from multiple intelligence sources. Use when briefing executives on sector-specific threats, updating threat model assumptions, or prioritizing defensive controls against specific adversaries. Activates for requests involving MITRE ATT&CK Groups, Mandiant APT profiles, CrowdStrike adversary naming, or sector-specific threat briefings.

detecting-stuxnet-style-attacks

2

mukul975

This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying PLC logic while spoofing sensor readings to hide the manipulation from operators. It addresses PLC logic integrity monitoring, physics-based process anomaly detection, engineering workstation compromise indicators, USB-borne attack vectors, and multi-stage attack chain detection spanning IT-to-OT lateral movement through to process manipulation.

analyzing-apt-group-with-mitre-navigator

2

mukul975

Analyze advanced persistent threat (APT) group techniques using MITRE ATT&CK Navigator to create layered heatmaps of adversary TTPs for detection gap analysis and threat-informed defense.

hunting-advanced-persistent-threats

2

mukul975

Proactively hunts for Advanced Persistent Threat (APT) activity within enterprise environments using hypothesis-driven searches across endpoint telemetry, network logs, and memory artifacts. Use when conducting scheduled threat hunting cycles, investigating anomalous behavior flagged by UEBA, or validating that known APT TTPs are not present in the environment. Activates for requests involving MITRE ATT&CK, Velociraptor, osquery, Zeek, or threat hunting playbooks.

cyber_sovereignty

1

finskylin

【功能】分析网络安全威胁态势和数字主权政策动态 【数据源】MITRE ATT&CK威胁框架(STIX JSON)、GDELT网络安全新闻、Cloudflare Radar实时攻击趋势 【输出数据】APT组织列表、攻击技术分类(TTP)、网络安全新闻、DDoS/L3攻击趋势、威胁评估报告 【耗时】~15-60秒 【适用场景】用户问"APT组织分析"、"网络攻击态势"、"DDoS趋势"时使用

os-awareness

1

crucenojmc

Evita errores por comandos incompatibles verificando SIEMPRE el SO antes de sugerir instalaciones. Trigger: "instalar", "upgrade", "apt", "brew", "winget", "configurar sistema", "error de comando".

dotnet-cli-packaging

1

wshaddix

Publishing to package managers: Homebrew, apt/deb, winget, Scoop, and Chocolatey manifests.

go-installer

httprunner

Install and verify the Go toolchain on macOS, Linux, and Windows. Use when Go is required but not present, or when a specific Go version must be installed. Prefer system package managers (homebrew, apt, etc.) and fall back to official Go downloads when needed.

Terminal CLI

roebi

Reference for operating in a Linux terminal. Use when the user or agent needs to run bash commands, combine commands with && or pipes, read files, sort and deduplicate output, write and execute shell scripts, work with the filesystem (files, links, mounts, permissions), install or update packages, get help on commands, manage containers with Podman, make HTTP requests with curl, manage Kubernetes clusters with kubectl, manage Helm charts, handle environment variables, or launch AI coding agents (aider-chat, Claude). Activate this skill for any task involving: bash, shell, terminal, CLI, script, pipe, podman, kubectl, helm, curl, apt, pip, environment variable, aider, or any Unix command.

package-auditor

faahim

Audit installed system packages for known vulnerabilities, orphaned packages, and outdated dependencies. Supports apt, dnf, and brew.