Skill UI

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized container-security assessment. Use when executing an approved breakout test, demonstrating the real impact of a privileged or hostPath workload, or validating that escape mitigations actually hold. Keywords: container breakout, privileged, hostPath, docker.sock, runC CVE-2019-5736, CVE-2024-21626, release_agent, nsenter. Do not use for defensive detection of these techniques - use detecting-container-escape-attempts.

An open-source automation framework for conducting multi-turn, adversarial red-teaming against conversational LLMs. PyRIT simulates real-world attacker behavior using advanced orchestrators (Crescendo, TAP) and scorer feedback loops. It is designed for comprehensive security assessments of AI agents and chatbots, going far beyond single-shot prompt testing to evaluate robustness under gradual or adaptive attacks.

This skill provides a comprehensive tech debt assessment, identifying, classifying, and prioritizing core maintainability issues. By drawing on classic engineering principles, it helps teams build a structured refactoring roadmap, optimizing code health and development velocity.

A comprehensive presentation template designed for educational workshops and training sessions. It features a warm paper aesthetic, persistent learning objectives on the left sidebar, core content slides, interactive Multiple Choice Question (MCQ) self-assessment pages, and module wrap-ups, ensuring a structured and engaging learning experience.

This tool is designed to analyze source code by extracting core entities (classes, functions, modules, types) and mapping their complex relationships (imports, inheritance, calls, dependencies). It constructs a comprehensive Knowledge Graph (KG) in AgentDB. This is essential for detailed dependency analysis, understanding large codebase structures, and performing accurate impact assessments.

This skill provides a comprehensive fit assessment and checklist for clinical research targeting The American Journal of Gastroenterology. It guides authors on required evidence levels, reporting standards (e.g., CONSORT, STROBE), structuring the manuscript, and ensuring the study has clear, practice-relevant clinical implications for GI/Hepatology practitioners. It serves as a crucial pre-submission refinement aid.

A comprehensive guide for political science scholars to pressure-test their research ideas against the standards of the American Political Science Review (APSR). This skill emphasizes demonstrating general disciplinary significance (matters to the field) over mere subfield novelty, guiding users through framing, contribution type, and appropriate track selection.

This guide helps authors properly structure and position computer science manuscripts for submission to the IEEE International Symposium on Mixed and Augmented Reality (ISMAR). It covers conference fit assessment, required evidence (system, user, perceptual validation), effective paper framing, and strategic advice on rebuttal and scope definition within the AR/MR domain, ensuring the work meets top-tier venue expectations.

This skill provides a comprehensive framework for authors to assess the suitability of their manuscript for the Journal of Law, Economics, and Organization (JLEO). It guides the intersectional contribution, covering positive political theory, contract economics, and organizational economics. The tool details required methodologies (e.g., credible identification, robust modeling), structural requirements, and common pitfalls to ensure the paper delivers a genuine law-economics-organization contribution.

This skill provides a comprehensive checklist for auditing de-identified Protected Health Information (PHI) against the 18 categories required by HIPAA Safe Harbor (45 CFR 164.514(b)(2)). It maps detected PII entities to these categories, identifies gaps (e.g., age > 89, rare geography), and guides the assessment of residual re-identification risk. This is essential for proving the completeness and compliance of de-identification efforts.

A specialized downstream skill for CTF-sandbox workflows. Used to analyze complex security challenges driven by AI agent interactions, prompt injection, or infrastructure vulnerabilities. Focuses on tracing control chains involving untrusted input, tool side effects, deployment drift, container runtime issues, and CI/CD supply chain provenance. Ideal for rigorous vulnerability assessment in modern, distributed systems.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.