Skill UI

A comprehensive tool designed to simulate advanced Layer 2 network attacks, including VLAN hopping, switch spoofing (DTP attacks), and double tagging. This skill is critical for authorized penetration testing environments to validate the effectiveness of VLAN segmentation, analyze 802.1Q trunking robustness, and ensure switch port security configurations are correctly implemented against Layer 2 bypass attacks.

A comprehensive guide for analyzing .NET malware (C#, VB.NET, F#) using professional tools like dnSpy and de4dot. Learn to decompile code, identify obfuscation techniques (ConfuserEx, SmartAssembly), extract C2 configurations, and debug malicious behavior in stealers and RATs.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.

Kubesec is a powerful open-source tool designed to perform comprehensive security risk analysis on Kubernetes resource manifests (YAML/JSON). It automatically detects critical misconfigurations, potential privilege escalation vectors, and deviations from industry security best practices. It provides actionable scoring and hardening recommendations, making it essential for CI/CD pipelines, security auditing, and automated compliance checks.

This skill provides a comprehensive guide and methodology for identifying and exploiting Cross-Origin Resource Sharing (CORS) misconfigurations in web applications. It covers testing origin validation bypasses, analyzing preflight requests, and simulating data exfiltration during authorized penetration tests, crucial for assessing API security.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

This skill provides a comprehensive, read-only audit of a development workspace, including active repositories, installed plugins, connected services, and environment configurations. It analyzes existing capabilities against best practices to identify functional gaps and recommends the most valuable ECC-native skills, hooks, and workflows needed to enhance the development experience. Ideal for setup planning and architectural reviews.

This tool runs comprehensive diagnostics on the current context mode environment. It checks the status of critical components, including runtimes, hooks, FTS5, plugin registrations, and versions for npm and the marketplace. Use this skill to quickly identify potential technical issues or configuration inconsistencies, ensuring smooth system operation.

This guide outlines how to build new API connectors or providers that strictly adhere to the existing integration architecture and patterns of a target repository. It is designed for adding integrations while maintaining architectural consistency (e.g., layout, configuration schema, authentication model, and testing style), preventing the creation of novel, unsupported patterns.

This skill guides developers on integrating Firebase AI (Gemini) into Flutter applications. It covers essential topics including initial setup and configuration, generating text and managing multi-turn chat responses, implementing real-time streaming output, handling multimodal prompts (text and images), and ensuring robust error handling, security, and adherence to data privacy best practices.

This skill provides a comprehensive guide to integrating and managing Firebase Authentication within Flutter applications. It covers critical steps such as initial setup and configuration, implementing state management by listening to authentication streams, and executing various sign-in flows (email/password, phone, and major social providers like Google and Apple). Furthermore, it emphasizes robust error handling and applying security best practices.

A comprehensive guide on utilizing Firebase Remote Config within Flutter applications. Learn how to implement dynamic feature flags, execute A/B testing, manage remote parameter defaults, and fetch real-time configuration values. This skill allows developers to modify app behavior and user experiences without requiring an app store update, ensuring fast iteration and efficient product testing.