Skill UI

This skill guides the development of EarLLM One, a complex Android application. The app captures real-time audio from Bluetooth earbuds, transcribes the voice using STT, sends the text input to a Large Language Model (LLM) via a robust pipeline, and plays the response back using TTS. It requires deep knowledge of Kotlin, Android development, Bluetooth profiles (A2DP/HFP), and advanced audio routing.

A comprehensive guide to building highly performant and reusable UIs across multiple platforms (Android, iOS, Desktop, Web) using Compose Multiplatform and Jetpack Compose. It details advanced patterns for state management (Single State Object, Event Sink), type-safe navigation, slot-based composables, platform adaptation (Expect/Actual), and crucial performance optimization techniques.

Creates concise Architecture Decision Records (ADRs) that capture context, decision, and consequences whenever a significant technical choice has been finalized so future engineers understand why the architecture looks the way it does.

This command executes the entire AgentHub lifecycle in a single, chained invocation. It automates complex development tasks by sequentially handling initialization, capturing performance baselines, spawning multiple specialized agents, evaluating the results (via metrics or LLM judging), and finally presenting a winner for merging. Use this when running an end-to-end competition or complex refactoring task.

This skill provides a programmatic method for analyzing Advanced Persistent Threat (APT) groups using the MITRE ATT&CK framework. By querying TTPs and generating multi-layer JSON files compatible with ATT&CK Navigator, analysts can visualize threat actor coverage, map detection capabilities, and identify critical security gaps to build highly targeted, threat-informed defenses.

A comprehensive toolset for analyzing Cobalt Strike Malleable C2 profiles. It parses advanced C2 communication configurations to extract crucial Indicators of Compromise (IOCs) such as HTTP headers, DNS settings, URI patterns, and user agents. The analysis is vital for threat hunting, developing network detection signatures (Suricata/Snort), and understanding evasion techniques used by advanced persistent threats (APTs).

Examines packet captures, Zeek logs, and NetFlow data to uncover C2 channels, lateral movement, and exfiltration during security incidents, guiding analysts through capture, filtering, and IOC extraction workflows.

A dedicated tool for forensic analysis of Windows PowerShell Script Block Logs (Event ID 4104) captured in EVTX files. It reconstructs multi-block scripts, applying advanced detection heuristics such as entropy analysis and pattern matching to identify obfuscated commands, encoded payloads (Base64), download cradles, and AMSI bypass attempts, crucial for threat hunting and incident response.

A comprehensive guide for conducting authorized wireless network penetration tests. This skill assesses the overall security posture of WiFi infrastructure, covering weak encryption protocols, captive portal bypasses, Evil Twin attacks, WPA2/WPA3 handshake capture, and rogue access point detection. It evaluates wireless authentication methods, network segmentation, and the effectiveness of WIDS/WIPS systems.

A comprehensive guide for authorized penetration testing on detecting and exploiting HTTP Request Smuggling vulnerabilities. It details analyzing discrepancies between Content-Length and Transfer-Encoding header parsing in multi-tier architectures (e.g., CDN, reverse proxy, load balancers). Learn techniques to bypass access controls, capture subsequent user requests, and escalate attacks in a controlled environment.

A detailed methodology for proactive threat hunting focused on identifying deep-seated persistence mechanisms within Windows operating systems. This guide covers advanced techniques such as monitoring Run keys, analyzing Winlogon modifications, detecting IFEO injection, and identifying COM object hijacking. It is crucial for incident response, purple teaming, and ensuring system integrity against advanced persistent threats (APTs).

This guide details the implementation of robust API abuse detection mechanisms. It covers advanced rate limiting techniques, such as the Token Bucket and Sliding Window algorithms, to defend APIs against DDoS attacks, brute force attempts, and credential stuffing. It emphasizes using distributed stores like Redis for accurate, scalable, and adaptive security controls in an API gateway context.