Skill UI

This skill provides a comprehensive, expert guide to the entire reverse engineering lifecycle. It covers advanced techniques for binary analysis, including static analysis (disassembly, metadata extraction, control flow mapping) and dynamic analysis (API hooking, memory tracing). Mastery includes utilizing industry-leading tools such as IDA Pro, Ghidra, radare2, and specialized frameworks like pwntools and angr. The methodology is structured for secure research, CTF challenges, and vulnerability assessment, emphasizing best practices and ethical use.

Scans container images and running containers using Trivy and Snyk to identify vulnerabilities, rank them by severity, and return remediation guidance whenever users ask for a security assessment before or after deployment.

Guide to mastering essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless checks, and compliance reporting, covering selection, configuration, and practical workflows.

This skill specializes in transforming theoretical threat models, risk assessments, and business context into concrete, actionable security requirements. It is essential for writing detailed security user stories, defining robust acceptance criteria, building comprehensive security test cases, and ensuring compliance requirement mapping. Use it when bridging the gap between identifying a vulnerability and specifying how the system must be secured.

This skill implements a robust, multi-layered security hardening process based on the Defense-in-Depth strategy and DevSecOps principles. It coordinates specialized agents to perform comprehensive security assessments (SAST, DAST, SBOM, Threat Modeling), identify critical vulnerabilities, and execute layered remediation. The process covers application code, backend APIs, frontend components, and mobile platforms, ensuring a resilient security posture across the entire development lifecycle.

Guides authorized practitioners through Nmap, Masscan, Nessus, OpenVAS, Burp Suite, and OWASP ZAP for network discovery, vulnerability assessment, web application testing, wireless security, and compliance reporting across diverse environments.

Analyzes existing Rails applications to provide a comprehensive and detailed upgrade assessment. This tool checks current gem and JavaScript dependencies, compares the running version against the latest stable release, fetches official upgrade guides, and generates diff reports. It assesses upgrade complexity (Small, Medium, Large) to ensure smooth and safe version migration for Ruby on Rails projects.

This skill provides a comprehensive guide for securely handling student audio data, assessment records, and learning progress within the Speak platform. It focuses on implementing robust data pipelines while ensuring compliance with international privacy regulations such as GDPR and COPPA. Essential for developers integrating or maintaining language learning applications.

This skill provides comprehensive observability for the Speak language learning platform. It monitors critical metrics such as API health status, assessment latency, session usage, and detailed pronunciation score distributions. It is essential for developers implementing robust, production-grade monitoring systems and managing large-scale language learning operations.

This guide provides the complete, production-grade reference architecture for integrating the Speak language learning platform. It covers all necessary components, including the client, API gateway, assessment engine, and progress store. Use this blueprint to ensure a robust, scalable, and reliable implementation for managing large-scale language learning operations.

This guide provides production-ready patterns for integrating the Speak language learning API. It covers managing conversation sessions, performing pronunciation assessment, preprocessing audio files using ffmpeg, implementing robust retry mechanisms (with backoff), and tracking user learning progress. Use this when developing a full-featured, high-reliability language learning application or troubleshooting complex API integrations.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.