Database

XSS, SQLi, command injection, and template injection testing for authorized security assessments

Use this skill when securing or reviewing a Next.js application. Activate when users mention next.js typescript security, App Router security, server actions, server components, middleware auth, NEXT_PUBLIC env leaks, SSRF in image optimization, CVE-2025 middleware bypass, route handler validation, or hardening a Vercel/self-hosted Next deployment.

Security headers, CORS, CSP, cookie flags, and TLS configuration review for authorized assessments

Bluetooth and BLE security assessment, pairing weakness analysis, sniffing, and device enumeration

Guest network isolation testing, captive portal bypass, and visitor network security assessment

Home and small business network security assessment, router posture, smart device review, and WFH security

IoT device exposure assessment, default credential testing, firmware review, and protocol analysis

Wi-Fi security configuration review, WPA enterprise testing, rogue AP detection, and wireless attack surface analysis

Monitor mentions of brands, domains, and employee emails across dark web sources

Ransomware leak-site monitoring, extortion workflow tracking, and victim notification

Onion service structure, abuse patterns, hosting indicators, and scam typologies

Study productized crime trends including access sales, stealer logs, and fraud services (research-only)

Detect credential leaks, stealer-log references, and breach monitoring for organizational accounts

Detect customer data mentions, PII exposure, and data dump analysis for breach assessment

Assess doxxing risk, credential reuse, and public digital footprint for high-risk individuals

Detect source code exposure, config dumps, and secret leaks in public repositories

Monitor for typosquat packages, dependency abuse, malicious updates, and fake repositories

Detect app sideload abuse, marketplace scams, and unauthorized application distribution

Automated brand monitoring, alert triage, and takedown workflow orchestration

Detect counterfeit sites, pirated applications, and fake login portals impersonating your brand

Ransomware resilience testing, backup validation, recovery planning, and readiness assessment

Detect fake domains, spoofed support channels, and counterfeit sites impersonating your brand

Wallet clustering, scam campaign tracking, sanction screening, and payment flow review

Deploy honey assets, canary tokens, decoy credentials, and sinkhole infrastructure for threat detection

Phishing kit tracking, lure analysis, sender clustering, and landing page fingerprinting

Detect fake social accounts, executive impersonation, and marketplace fraud impersonation

Simulate BEC attacks to test financial controls, authorization procedures, and executive impersonation defenses

Build authorized credential harvesting pages for phishing simulations using GoPhish, Evilginx, and transparent proxies

Build organizational awareness and verification procedures against deepfake voice, video, and AI-generated content threats

Test helpdesk and IT support social engineering resilience through authorized identity verification bypass assessments

Assess insider threat program maturity through gap analysis of behavioral indicators, DLP, and access controls

Use this skill when analyzing, preventing, or responding to phishing attacks. Activate when users mention phishing, spear phishing, smishing, vishing, suspicious emails, lookalike domains, credential-theft lures, QR-code phishing (quishing), MFA fatigue, or when they need to build phishing awareness programs, triage a reported message, or harden mail authentication (SPF, DKIM, DMARC).

Execute full-scope red team social engineering campaigns combining email, phone, physical, and technical vectors

Conduct social media OSINT for authorized engagements to map organizational exposure and employee data leakage

Assess supply chain and third-party social engineering risks through vendor impersonation and trusted relationship abuse testing

Design and execute customer onboarding flows that drive activation and retention. Covers activation metrics, journey mapping, friction reduction, email sequences, and measuring onboarding success.

Startup mindset coach that helps founders upgrade their thinking patterns, detect anti-patterns, apply mental models like PMF levels and the 4Ps framework, and build accountability through weekly challenges.

Close the first customers as a founder — outbound prospecting, discovery calls, demo strategy, objection handling, and closing without a sales team. Use this skill when the user asks about early-stage sales, getting first customers, founder-led selling, cold outreach, sales calls, pricing conversations, or closing deals pre-sales-hire. Also trigger for "how do I get my first customers," "nobody is buying," "cold email strategy," "how to sell as a founder," "sales process," "close a deal," or any task involving a founder personally driving revenue before a dedicated sales team exists.

Drive early-stage growth with creative, resource-efficient tactics — viral loops, referral mechanics, content-led growth, community building, and scrappy acquisition channels. Use this skill when the user asks about growth hacking, early growth, user acquisition, virality, referral programs, organic growth, or scaling on a tight budget. Also trigger for "how do we grow," "get more users," "growth strategy," "viral loop," "customer acquisition on no budget," "content marketing strategy," "community-led growth," or any task involving driving user or revenue growth at an early stage with limited resources.

Build the founding team — early-stage hiring, compensation design, culture building, and organizational decisions for startups from 1 to 50 people. Use this skill when the user asks about hiring, recruiting, team building, compensation, equity, culture, org design, or making their first hires. Also trigger for "who should I hire first," "how to recruit," "equity for employees," "startup compensation," "culture building," "job descriptions," "interview process," or any task involving finding, evaluating, hiring, and retaining early team members.

Run lean startup operations — burn rate management, resource allocation, tool selection, process design, and doing more with less. Use this skill when the user asks about startup operations, burn rate, runway management, budgeting, resource allocation, or operational efficiency. Also trigger for "we're running out of money," "how to extend runway," "what tools should we use," "operational efficiency," "startup budget," "cut costs," or any task involving managing limited resources, cash flow, and operational decisions at an early-stage company.

Navigate startup legal fundamentals — incorporation, equity structure, co-founder agreements, IP protection, fundraising documents, and compliance. Use this skill when the user asks about incorporating a company, legal structure, co-founder agreements, equity splits, vesting, SAFEs, term sheets, IP assignment, or startup legal basics. Also trigger for "how do I incorporate," "co-founder equity split," "SAFE vs convertible note," "term sheet," "vesting schedule," "LLC vs C-Corp," "legal checklist," or any task involving the legal foundations of starting and funding a company.

Build minimum viable products fast — ruthless scoping, rapid prototyping, and shipping the smallest thing that tests the riskiest assumption. Use this skill when the user asks about building an MVP, launching a first version, prototyping, scoping a product, or shipping fast. Also trigger for "what should V1 look like," "how do I scope this down," "build a prototype," "ship something fast," "what's the MVP," "we're over-engineering," or any task involving deciding what to build first and getting it to users as quickly as possible.

Build and manage successful open source projects or contribute effectively to existing ones. Use this skill when the user asks about open source strategy, starting an open source project, building a contributor community, choosing licenses, managing pull requests, or wants guidance on open source governance, sustainability, or business models around open source software.

Craft compelling pitch decks and fundraising materials that get meetings, close rounds, and tell a startup's story with clarity and conviction. Use this skill when the user asks about pitch decks, fundraising, investor presentations, startup storytelling, or raising capital. Also trigger for "help me with my pitch deck," "I'm raising a round," "investor deck," "Series A deck," "how to pitch VCs," "fundraising narrative," or any task involving creating materials to persuade investors, partners, or stakeholders to back a startup.

Find and validate product-market fit — customer discovery, hypothesis testing, iteration strategy, and the signals that tell you when you've found it. Use this skill when the user asks about product-market fit, customer validation, idea validation, pivot decisions, customer discovery, or early-stage product strategy. Also trigger for "do we have PMF," "how do I validate this idea," "customer interviews," "should we pivot," "nobody is buying," "are we building the right thing," or any task involving determining whether a product genuinely solves a problem people will pay for.

Define and execute product strategy for startups — roadmap prioritization, feature scoping, saying no, competitive feature decisions, and building products that win in the market. Use this skill when the user asks about product strategy, roadmap planning, feature prioritization, product decisions, or what to build next. Also trigger for "what should we build next," "how to prioritize features," "product roadmap," "should we build this feature," "we're building too much," "focus the product," or any task involving strategic product decisions at an early-stage or growth-stage company.

Track the metrics that matter at each startup stage — from pre-PMF signals through growth-stage unit economics and investor-ready dashboards. Use this skill when the user asks about startup metrics, KPIs, dashboards, cohort analysis, unit economics, or what to measure. Also trigger for "what should we track," "are our metrics good," "investor metrics," "SaaS metrics," "cohort analysis," "startup dashboard," "growth rate," or any task involving defining, measuring, and interpreting the numbers that determine whether a startup is succeeding or failing.

Apply structured adversarial analysis to generate, critique, fix, validate, and consolidate solutions for complex problems. Forces deep analysis of failure modes, edge cases, and unintended consequences before committing.

Lead a full brand strategy engagement — from brand audit and identity architecture to rebranding execution for established tech companies. Use this skill when the user asks about branding, rebranding, brand identity, brand architecture, visual identity systems, brand voice, brand positioning, brand refresh, or company identity overhaul. Also trigger for "rebrand this company," "our brand feels outdated," "brand audit," "brand guidelines," "we need a new identity," or any task involving defining, evolving, or overhauling how a company presents itself to the market. Especially suited for existing tech companies that need to modernize, differentiate, or pivot their brand in crowded markets.

Lead organizational change management — guiding companies through rebrands, restructures, mergers, technology transitions, and cultural transformations. Use this skill when the user asks about change management, organizational transformation, culture change, stakeholder alignment, restructuring, merger integration, or adoption strategy. Also trigger for "how do we get buy-in," "resistance to change," "organizational redesign," "culture transformation," "adoption strategy," "stakeholder management," or any task involving managing the human side of significant organizational change.

Craft corporate communications and PR strategies — narrative development, media relations, thought leadership, crisis communications, and stakeholder messaging for technology companies. Use this skill when the user asks about PR strategy, corporate communications, press releases, media pitching, thought leadership, analyst relations, crisis communications, or public narratives. Also trigger for "write a press release," "PR strategy," "how do we get press coverage," "crisis communication plan," "thought leadership," "analyst briefing," "corporate narrative," or any task involving how a company communicates its story to external audiences including media, analysts, and the public. Especially relevant for rebrands, product launches, and market repositioning.

Design and optimize customer experiences — journey mapping, experience auditing, retention strategy, and customer-centric growth for technology companies. Use this skill when the user asks about customer experience, journey mapping, retention strategy, churn reduction, onboarding optimization, NPS improvement, or customer satisfaction. Also trigger for "improve customer experience," "reduce churn," "customer journey," "onboarding flow," "why are customers leaving," "NPS," "customer success strategy," or any task involving understanding, measuring, and improving how customers experience a product or service throughout their lifecycle.

Design data and analytics strategies — KPI frameworks, measurement systems, data-driven decision making, and analytics capability building for technology companies. Use this skill when the user asks about analytics strategy, data-driven decisions, KPI design, dashboards, measurement frameworks, A/B testing, data infrastructure, or business intelligence. Also trigger for "what should we measure," "build a dashboard," "analytics framework," "data strategy," "KPIs for this initiative," "A/B testing strategy," or any task involving designing how an organization measures, analyzes, and acts on data.

Guide digital transformation initiatives for established companies — technology modernization, process digitization, organizational capability building, and strategic technology adoption. Use this skill when the user asks about digital transformation, technology modernization, legacy system migration, digital strategy, or technology-driven business model change. Also trigger for "modernize our tech stack," "digital strategy," "migrate from legacy," "adopt AI/cloud/automation," "technology roadmap," or any task involving guiding an established organization through significant technology-driven change.

Organize, structure, and manage documents and files for maximum retrievability and team collaboration. Use this skill when the user asks about organizing documents, creating filing systems, managing digital paperwork, converting between document formats, establishing naming conventions, or wants strategies for reducing document clutter and improving information retrieval.

Build financial models, analyze unit economics, design pricing strategies, and create investor-ready financial plans for technology companies. Use this skill when the user asks about financial modeling, unit economics, SaaS metrics, revenue forecasting, fundraising strategy, valuation, or M&A analysis. Also trigger for "financial model," "unit economics," "CAC/LTV," "SaaS metrics," "revenue forecast," "pitch deck financials," "burn rate," or any task involving financial analysis, modeling, or strategy for technology businesses.

Design and execute go-to-market strategies — launch planning, pricing, channel strategy, sales motions, and growth models for tech products and companies. Use this skill when the user asks about GTM strategy, product launch, pricing strategy, sales motion design, channel partnerships, demand generation, or market entry. Also trigger for "how do we launch this," "pricing model," "sales strategy," "go-to-market plan," "demand gen," "PLG vs sales-led," or any task involving bringing a product to market, reaching customers, and generating revenue.

Apply top-tier management consulting frameworks to business strategy — competitive analysis, growth strategy, operational excellence, and strategic planning. Use this skill when the user asks about business strategy, competitive analysis, market entry, growth planning, strategic frameworks, or business model design. Also trigger for "business strategy," "competitive advantage," "growth strategy," "strategic analysis," "Porter's five forces," "BCG matrix," "McKinsey 7S," or any task involving structured strategic thinking applied to business decisions. Works across industries with emphasis on technology companies.

Develop competitive market positioning strategies for tech companies operating in saturated markets — finding whitespace, creating differentiation, and building defensible positions. Use this skill when the user asks about competitive positioning, market differentiation, saturated market strategy, competitive analysis, value proposition design, or category creation. Also trigger for "how do we stand out," "our market is crowded," "competitive differentiation," "positioning strategy," "category design," "blue ocean," or any task involving finding and defending a unique market position against established and emerging competitors.