Monitor for brand impersonation attacks across domains, social media, mobile apps, and dark web channels to detect phishing campaigns, fake sites, and unauthorized brand usage targeting your organization.
Discover and inventory all privileged accounts across enterprise infrastructure including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin account
Detect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT anomalies including mismatched encryption types, impossible ticket lifetimes, non-existent accounts, and forged PAC signatures in domain controller event logs.
Conduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identify privilege escalation chains, and discover misconfigurations in domain environments.
Implement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.
Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT, Domain Admin, and service account hashes for Golden Ticket creation.
Hunt for DNS-based persistence mechanisms including DNS hijacking, dangling CNAME records, wildcard DNS abuse, and unauthorized zone modifications using passive DNS databases, SecurityTrails API, and DNS audit log analysis.
Enumerates DNS records, attempts zone transfers, brute-forces subdomains, and maps DNS infrastructure during authorized reconnaissance to identify attack surface, misconfigurations, and information disclosure in target domains.
DNS configuration management utilities. View current DNS settings, list available DNS servers, and refresh DNS cache on the system. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
Predict the likely gender associated with a first name — with optional country-specific calibration via genderize.io
Set up email forwarding for custom domains to receive verification codes, password resets, and other emails at a domain you own but don't actively use for email. Covers GoDaddy, Namecheap, Cloudflare Email Routing, and ImprovMX. Use when recovering accounts linked to inactive domain emails, setting up catch-all forwarding, or routing domain email to Gmail/Outlook without paying for email hosting.
An investment portfolio tracker that runs entirely locally. All data stays in ~/.portfolio-tracker/.
Assess Active Directory identity attack paths including roasting, relay, and delegation abuse.
Provision instant temporary Postgres databases via Claimable Postgres by Neon (neon.new) with no login, signup, or credit card. Supports REST API, CLI, and SDK. Use when users ask for a quick Postgres environment, a throwaway DATABASE_URL for prototyping/tests, or "just give me a DB now". Triggers include: "quick postgres", "temporary postgres", "no signup database", "no credit card database", "instant DATABASE_URL", "npx neon-new", "neon.new", "neon.new API", "claimable postgres API".
Chinese sensitive word detection and content compliance checker (中文敏感词/违禁词检测). Scan text for banned, restricted, and risky words across Xiaohongshu (小红书), Douyin (抖音), Kuaishou (快手), and Bilibili (B站). Covers advertising law violations (广告法极限词), medical claims (医疗功效词), political, violent, gambling, and fraud-related terms. Returns risk levels (high/medium/low), word categories, and safe replacement suggestions. 100K+ daily-updated word dictionary with homophone detection (谐音变体), character-jumping detection (跳字检测), phone number & URL detection, and NER filtering. Free 10 requests/month, unlimited with token. Perfect for checking marketing copy, product descriptions, live-streaming scripts (直播话术), social media posts, and ad compliance (内容审核/文案合规).
Check domain availability via Vercel and buy/manage domains via Vercel CLI
飞书专属分享链接生成规范。当生成文档、多维表格、知识库等链接时，必须同时提供专属企业域名的链接和通用飞书根域名的链接，确保稳妥访问。支持多租户动态读取。
40-item CITE domain audit: citation, impact, trust, entity scoring with veto checks. 域名权威/网站可信度
AI-powered domain naming consultation — helps users go from a vague idea to a registrable domain name. Trigger when the user says things like "help me find a domain", "I need a domain for my project", "domain name ideas", "what should I name my startup", "I'm building an X and need a domain", "brand name suggestions", "naming ideas", or any variation where the user describes a project but doesn't have a specific keyword yet. Also trigger when the user says "I'm starting a coffee shop", "I'm building an AI writing tool" — any project description that implies they need a name. Do NOT trigger when the user already has a specific keyword and wants variations (use domain_generator), or when a target domain is taken and they want alternatives (use plan_b). This skill's entire point is to talk first, generate later.
