Skill UI

This specialized skill is designed for advanced forensic analysis and penetration testing within Windows environments. It focuses on extracting and proving the replayability of credentials, tickets, and secrets stored in LSASS memory, Kerberos ticket caches, DPAPI, and SSP artifacts. Use it to establish the minimal, actionable chain (host artifact -> extracted material -> accepted privilege) that proves a decisive edge for privilege escalation.

This skill is designed for deep forensic analysis of asynchronous processing chains, specifically focusing on 'drift'—behavioral or configuration differences between a synchronous request path and subsequent worker-executed tasks. Use it to trace payloads, inspect worker-only state, follow retry mechanisms, handle dead-letter queues, or connect enqueued items to eventual side effects (e.g., file writes, cache updates, emails). It is a specialized downstream tool, requiring prior orchestration context.

A specialized skill for analyzing and reproducing complex, timing-dependent bugs in concurrent systems. Use this to investigate race windows, ordering bugs, lock gaps, stale reads, or state inconsistencies where the final outcome depends critically on request timing or asynchronous execution order. Essential for deep security auditing and debugging of distributed transactions.

A specialized, downstream skill designed for forensic analysis within a confined sandbox environment, particularly for CTF challenges. It guides the user to inspect the full stack behavior, including API interactions, server routing, browser state (cookies, local storage), and asynchronous worker processes. Use this skill to trace complex, end-to-end request flows, debug authentication/session leaks, or diagnose discrepancies between frontend UI and backend enforcement.

This tool performs a comprehensive analysis of AI configuration file evolution within a Git repository. It tracks when specific AI configs were first introduced, charts monthly commit velocity related to AI features, highlights key PRs that shaped the development, and synthesizes the project's AI maturity phases. Ideal for mapping AI adoption timelines and assessing technical maturity.

A comprehensive, systematic workflow for reverse engineering client-side JavaScript. It guides users through five stages: Observation, Capture, Rebuilding, Patching, and Deep Dive. Applicable for locating API signatures, analyzing encryption parameters, tracking runtime function calls, and reconstructing complex web environments locally for evidence collection and reproduction. Utilizes advanced tools like jshookmcp and various js-reverse_* utilities.

This skill generates complete, deploy-ready static landing pages by analyzing a source code repository. It reads key files (README.md, CHANGELOG.md, etc.), extracts structured content (features, installation guides, FAQ), and compiles it into a professional, responsive HTML/CSS/JS site. Ideal for standardizing open-source project showcases, converting technical documentation into marketing pages, or quickly building a project homepage.

This comprehensive guide details the methodology for reverse engineering macOS and Mach-O binaries. It covers analyzing application bundles, deciphering Objective-C/Swift symbols, examining code signing and hardened runtime features, and performing both static (using tools like Ghidra, IDA) and dynamic analysis (using lldb, Frida) to aid in malware analysis and platform security research.

A powerful, dependency-free CLI tool designed for programmatically creating, reading, analyzing, and modifying Microsoft Office files (.docx, .xlsx, .pptx). It supports deep DOM editing (L2) and raw XML manipulation (L3), allowing users to extract structured data, validate schemas, and perform complex document automation tasks from a single binary.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.

A comprehensive, structured guide for reverse engineering and analyzing managed .NET/C# binaries. This skill covers the full workflow, including initial identification (CLR check), deobfuscation (using tools like de4dot), static analysis via IL view (dnSpyEx), and dynamic debugging. It is essential for analyzing malware, red team tools, and patching compiled C# applications.