Monitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.
Discover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin account
Detect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures in domain controller event logs.
Conduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identify privilege escalation chains, and discover misconfigurations in domain environments.
Implement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.
Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT, Domain Admin, and service account hashes for Golden Ticket creation.
Hunt for DNS-based persistence mechanisms including DNS hijacking, dangling CNAME records, wildcard DNS abuse, and unauthorized zone modifications using passive DNS databases, SecurityTrails API, and DNS audit log analysis.
Enumerates DNS records, attempts zone transfers, brute-forces subdomains, and maps DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.
DNS configuration management utilities. View current DNS settings, list available DNS servers, and refresh DNS cache on the system. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
Predict the likely gender associated with a first name โ with optional country-specific calibration via genderize.io
Set up email forwarding for custom domains to receive verification codes, password resets, and other emails at a domain you own but don't actively use for email. Covers GoDaddy, Namecheap, Cloudflare Email Routing, and ImprovMX. Use when recovering accounts linked to inactive domain emails, setting up catch-all forwarding, or routing domain email to Gmail/Outlook without paying for email hosting.
An investment portfolio tracker that runs entirely locally. All data stays in ~/.portfolio-tracker/.
Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.
Provision instant temporary Postgres databases via Claimable Postgres by Neon (neon.new) with no login, signup, or credit card. Supports REST API, CLI, and SDK. Use when users ask for a quick Postgres environment, a throwaway DATABASE_URL for prototyping/tests, or "just give me a DB now". Triggers include: "quick postgres", "temporary postgres", "no signup database", "no credit card database", "instant DATABASE_URL", "npx neon-new", "neon.new", "neon.new API", "claimable postgres API".
Chinese sensitive word detection and content compliance checker (ไธญๆๆๆ่ฏ/่ฟ็ฆ่ฏๆฃๆต). Scan text for banned, restricted, and risky words across Xiaohongshu (ๅฐ็บขไนฆ), Douyin (ๆ้ณ), Kuaishou (ๅฟซๆ), and Bilibili (B็ซ). Covers advertising law violations (ๅนฟๅๆณๆ้่ฏ), medical claims (ๅป็ๅๆ่ฏ), political, violent, gambling, and fraud-related terms. Returns risk levels (high/medium/low), word categories, and safe replacement suggestions. 100K+ daily-updated word dictionary with homophone detection (่ฐ้ณๅไฝ), character-jumping detection (่ทณๅญๆฃๆต), phone number & URL detection, and NER filtering. Free 10 requests/month, unlimited with token. Perfect for checking marketing copy, product descriptions, live-streaming scripts (็ดๆญ่ฏๆฏ), social media posts, and ad compliance (ๅ ๅฎนๅฎกๆ ธ/ๆๆกๅ่ง).
Check domain availability via Vercel and buy/manage domains via Vercel CLI
้ฃไนฆไธๅฑๅไบซ้พๆฅ็ๆ่ง่ใๅฝ็ๆๆๆกฃใๅค็ปด่กจๆ ผใ็ฅ่ฏๅบ็ญ้พๆฅๆถ๏ผๅฟ ้กปๅๆถๆไพไธๅฑไผไธๅๅ็้พๆฅๅ้็จ้ฃไนฆๆ นๅๅ็้พๆฅ๏ผ็กฎไฟ็จณๅฆฅ่ฎฟ้ฎใๆฏๆๅค็งๆทๅจๆ่ฏปๅใ
40-item CITE domain audit: citation, impact, trust, entity scoring with veto checks. ๅๅๆๅจ/็ฝ็ซๅฏไฟกๅบฆ
AI-powered domain naming consultation โ helps users go from a vague idea to a registrable domain name. Trigger when the user says things like "help me find a domain", "I need a domain for my project", "domain name ideas", "what should I name my startup", "I'm building an X and need a domain", "brand name suggestions", "naming ideas", or any variation where the user describes a project but doesn't have a specific keyword yet. Also trigger when the user says "I'm starting a coffee shop", "I'm building an AI writing tool" โ any project description that implies they need a name. Do NOT trigger when the user already has a specific keyword and wants variations (use domain_generator), or when a target domain is taken and they want alternatives (use plan_b). This skill's entire point is to talk first, generate later.
