AI Agent Workflow Collection

API authentication for the F5 Distributed Cloud platform. Supports API token header authentication and P12 certificate authentication. Includes token validation procedure. Use when the user says "check token", "validate token", "API authentication", or when any API workflow requires verified credentials.

Intent router for F5 XC REST API operations. When the user's request involves the platform API but does not clearly match a specific skill trigger, this skill determines the correct skill to invoke. API operations delegate to the api-operator subagent; configuration analysis delegates to the config-analyzer subagent. Both keep large JSON payloads out of the main session.

Spec-aware API CRUD operations for F5 Distributed Cloud platform resources. Covers 98 resource types across 38 domains with precise endpoints, payload templates, dependency ordering, and multi-step workflow compositions. Use when user wants to list, get, create, update, delete, or deploy any F5 XC resource via API — including HTTP load balancers, origin pools, WAF policies, DNS zones, certificates, cloud sites, and more. Also use for multi-step deployments like "deploy an HTTPS load balancer with WAF" or "set up a DNS zone with records." Even if the user doesn't say "API" explicitly, if they want to create, configure, or manage platform resources, this skill provides the spec knowledge the api-operator agent needs.

Web archives, cached pages, and historical internet data retrieval. Use when the user mentions: web archive, wayback machine, cached page, internet archive, historical web.

Container-adapted AWS CLI authentication. Supports environment variable credentials, SSO login, IAM instance profiles, and interactive configure for headless environments. Use when the user says "login to aws", "aws login", "aws sso login", "configure aws", or when any AWS operation fails with auth/credential errors.

Top-level intent router for AWS operations. Routes auth requests to aws-auth, service queries to the cli-operator agent, and generic AWS CLI operations to the cli-operator. Use when the user mentions AWS, aws CLI, S3, EC2, Lambda, IAM, or any AWS topic but the request does not clearly match a specific skill trigger.

Top-level intent router for Azure operations. Routes auth requests to azure-auth, resource queries to the cli-operator agent, and help/discovery to the azhelp tool. Use when the user mentions Azure, az CLI, subscriptions, resource groups, VMs, or any Azure topic but the request does not clearly match a specific skill trigger.

Blockchain analysis, cryptocurrency tracing, wallet investigation, and transaction tracking. Use when the user mentions: blockchain, cryptocurrency, bitcoin, ethereum, wallet lookup, crypto tracing, transaction analysis.

Corporate filings, annual reports, SEC data, company research, and organizational intelligence. Use when the user mentions: company research, business lookup, SEC filing, corporate records, annual report, company information, OpenCorporates, Companies House, Crunchbase, corporate structure.

Test whether your internal contact is a true MEDDPICC champion. Use when the user says "test the champion", "champion test", "is this person a real champion", "validate the champion", or "champion check". Applies a structured assessment with actionable recommendations.

Classified ad search across platforms like Craigslist, eBay, and marketplace sites. Use when the user mentions: classified ads, Craigslist search, marketplace, eBay lookup, online listings, OfferUp, auction search, buy/sell listings, secondhand.

Cloud asset discovery — AWS, Azure, GCP enumeration, S3/Blob/GCS bucket scanning, cloud configuration analysis, and SaaS footprinting. Use when the user wants to enumerate cloud resources, find exposed storage buckets, audit cloud security posture, or discover cloud infrastructure tied to a target. Activates for "cloud recon", "AWS enumeration", "S3 bucket", "Azure blob", "GCP bucket", "cloud infrastructure", "cloud security audit", "storage exposure", "cloud misconfiguration", "cloud posture".

Sanctions screening, PEP checks, regulatory compliance, and risk assessment tools. Use when the user mentions: sanctions check, PEP screening, compliance, AML, KYC, regulatory risk, OFAC, beneficial ownership, offshore, money laundering, watchlist.

Configuration analysis and advisory for F5 XC platform resources. Analyzes customer JSON configurations to answer questions about security posture, feature enablement, mode settings, exclusions, and best practices. Supports multi-turn Q&A within agent dispatch. Use when user provides a JSON config and asks questions about it, or asks to analyze, review, or audit a configuration.

Multi-provider authentication for the F5 Distributed Cloud console. Auto-detects login type: native F5 XC login, Azure SSO with cached session, or Azure SSO with DUO verified push MFA. Use when the user says "log in", "authenticate", "sign in to the console", or when any console workflow requires an active session.

Crawl the F5 Distributed Cloud console navigation tree and discover all menu sections, routes, and page types. Outputs YAML catalog entries matching the console repo schemas (navigation tree, route definitions). Use when populating or refreshing the console catalog with the full menu structure.

Intent router for F5 XC console automation. When the user's request involves the console but does not clearly match a specific skill trigger, this skill determines the correct skill to invoke. All console operations MUST be delegated to the console-operator subagent to keep browser automation tokens out of the main session.

Inspect a specific F5 XC console route and extract detailed screen metadata: form fields, table columns, controls, selectors, and API field mappings. Outputs resource and workflow YAML catalog entries. Use when cataloging a specific console page or resource in detail.

Deterministic navigation to F5 Distributed Cloud console sections. Translates section names to URL paths, verifies session health, and confirms page load. Foundation for all console workflow skills. Use when the user says "navigate to", "go to", "open", or references a console section by name.

Execute an F5 Distributed Cloud console workflow from the catalog. Drives a browser through the steps defined in a workflow YAML file — navigate, click, fill forms, verify results. Use when the user asks to "create", "delete", "edit", "clone", or perform any CRUD operation on an F5 XC resource via the console UI.

Dark web monitoring, onion service analysis, and anonymous network intelligence — Tor, Freenet, I2P. Use when the user wants to investigate hidden services, scan onion sites, crawl the dark web, or monitor dark web activity. Activates for "dark web", "onion", "tor", "darknet", "hidden service", "dark web monitoring", "i2p", "freenet", "onionscan", "torbot".

Score and qualify a deal using the MEDDPICC framework with structured JSON data capture. Use when the user says "qualify this deal", "score the deal", "how healthy is this deal", "deal health check", "MEDDPICC score", "assess this opportunity", or provides a Salesforce opportunity ID. Produces a structured JSON deal file and optional XLS spreadsheet. Supports fresh guided interviews, importing existing data, and resuming partial reviews.

Ingest unstructured intelligence into a MEDDPICC deal file. Accepts any source — meeting notes, email threads, call transcripts, OSINT reports, Salesforce updates, competitive intel briefs, presentation feedback, or any text containing deal-relevant information. Extracts MEDDPICC elements, proposes updates with a structured diff, and writes confirmed changes to the deal JSON. Use when the user says "here are my meeting notes", "update the deal with this", "I got an email from", "paste these transcript notes", "ran an OSINT scan", "got competitive intel", or provides any raw text to add to a deal.

Three-stage demo lifecycle (Execute, Q&A, Debrief). Use when the user says "run the demo", "execute the demo", "start the demo", "API demo", "Q&A", "question and answer", "debrief", or "lessons learned". Reads product-specific content from DEMOPRODUCTEXPERTISE.md and demo commands from docs/demo/.