Skill UI

Performs a comprehensive security audit of Model Context Protocol (MCP) implementations, including servers, clients, and tools. This skill reviews code against critical security baselines (MCP-01 to MCP-05), OWASP MCP Top 10, and common Remote Code Execution (RCE) vectors (e.g., command injection, deserialization, SSRF). The output provides a detailed report with file and line references, ensuring compliance and identifying vulnerabilities before release. Use this when auditing network-exposed services or client security posture.

This comprehensive guide outlines best practices for designing and auditing empirical evaluations of formal verification tools and algorithms. It stresses the use of shared, community-accepted benchmarks, ensuring fair comparison against the strongest baselines with equal resources, meticulous reporting of all metrics, validating results for soundness, and guaranteeing full reproducibility on clean virtual environments.

A comprehensive guide detailing the complex submission and evaluation pipeline for TACAS (Tools and Algorithms for Scientific Applications). It models key features such as category-specific blind review, the mandatory parallel artifact evaluation for tool papers, and the single-round conference decision-making process, helping authors strategically prepare their submissions.

webmcpify is a specialized pipeline designed to make existing web applications agent-ready. It extracts user-facing functionality and exposes it as WebMCP tools, allowing AI agents to interact with the application via structured, reliable tool calls rather than fragile DOM scraping. The tool guides developers through detection, inventory, integration, verification, and healing phases to ensure robust AI interoperability.

An AI SDK specifically designed for Dart and Flutter applications. Genkit provides a unified interface for building sophisticated AI agents, defining complex data flows, and integrating various Large Language Models (LLMs) like Gemini, OpenAI, and Anthropic. Use it to manage code generation, structured outputs, tools, and complex operational workflows in Dart.

This comprehensive guide details the methodology for reverse engineering macOS and Mach-O binaries. It covers analyzing application bundles, deciphering Objective-C/Swift symbols, examining code signing and hardened runtime features, and performing both static (using tools like Ghidra, IDA) and dynamic analysis (using lldb, Frida) to aid in malware analysis and platform security research.

A comprehensive guide for embedding OpenMed-powered tools into Electronic Health Records (EHRs) like Epic or Cerner. It covers the entire SMART on FHIR workflow, including OAuth2 PKCE authorization, granular scoping (e.g., patient/DocumentReference.rs), secure token handling, and processing clinical notes locally on-device for de-identification and Named Entity Recognition (NER).

This skill guides the researcher through the comprehensive process of updating the AI agent security threat intelligence database. It involves executing targeted searches for new malicious skills, CVEs, attack vectors, and defensive tools. The process mandates critical analysis, de-duplication, risk assessment, and structured version control to maintain a cutting-edge security posture for AI agents.