unitoneai
8 skills with substantive source documentation and an official publisher or observed installation demand. Read each skill’s original documentation through its card.
unitoneaialert-triage
Guides structured triage of security alerts using a four-phase methodology (collect, correlate, classify, escalate) mapped to MITRE ATT&CK v16 and aligned with NIST SP 800-61 Rev 2 incident handling guidelines. Auto-invoked when the user discusses alert investigation, asks "is this a true positive?", or shares alert data requiring disposition. Produces a triage decision with priority assignment, disposition category, and escalation recommendation.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18
unitoneaicve-triage
Triages and prioritizes CVEs using CVSS 4.0, SSVC 2.1 decision trees, EPSS scores, and CISA KEV catalog cross-referencing. Auto-invoked when a CVE ID is mentioned, vulnerability scan results are shared, or the user asks "should we patch this?" Produces a prioritized remediation recommendation with SLA assignment and business risk context.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18
unitoneaiiam-review
Reviews identity and access management configurations against NIST SP 800-63B, NIST SP 800-207 zero trust principles, and CIS Controls v8. Auto-invoked when reviewing IAM policies, role definitions, user provisioning workflows, or when asked to assess identity security posture. Produces findings on least privilege violations, MFA gaps, stale accounts, and service account hygiene with prioritized remediation.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18
unitoneaiiso27001-gap
Performs an ISO 27001:2022 gap analysis against the full ISMS requirements (Clauses 4-10) and all 93 Annex A controls reorganized into four themes. Auto-invoked when discussing ISO 27001 certification readiness, ISMS implementation, or Statement of Applicability development. Identifies control gaps, scores implementation maturity, and produces a remediation roadmap aligned to the 2022 revision structure.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18
unitoneailog-analysis
Guides structured security log analysis across authentication, network, endpoint, and cloud audit log sources. Auto-invoked when the user shares log data, asks about suspicious events, needs help interpreting Windows Event IDs or Linux auth logs, or is establishing baselines for anomaly detection. Produces log source taxonomy, anomaly identification, baseline recommendations, and correlation findings mapped to MITRE ATT&CK v16 techniques.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18
unitoneaisoc2-gap
Performs a SOC 2 Type II readiness gap analysis against AICPA Trust Services Criteria. Auto-invoked when discussing SOC 2 compliance, audit preparation, or security program maturity. Walks through all Common Criteria (CC1-CC9) plus selected additional criteria, identifies gaps, and produces a remediation roadmap with evidence requirements and 90-day action plan.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18
unitoneaithreat-modeling
Runs a structured STRIDE threat model on any system design, API specification, or codebase. Auto-invoked when the user discusses architecture, shares a system diagram or design document, or asks "what could go wrong?" Produces threat actor profiles, component-threat matrix, a threat register with STRIDE classification, data-flow diagram template, trust boundary identification, and prioritized mitigations mapped to MITRE ATT&CK techniques.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18
unitoneaizero-trust-assessment
Performs a Zero Trust Architecture maturity assessment against NIST SP 800-207 and the CISA Zero Trust Maturity Model v2. Evaluates all five CISA ZT pillars (Identity, Devices, Networks, Applications & Workloads, Data) across maturity stages. Covers microsegmentation readiness, continuous verification, and produces a pillar-by-pillar maturity scorecard with remediation roadmap.
- installs
- 1
- GitHub stars
- 82
- Updated
- Jun 18