Skill UI

A specialized skill for writing highly efficient, memory-safe, and robust C code. This guide focuses on best practices for systems programming, including rigorous memory management (malloc/free), advanced pointer arithmetic, POSIX compliance, multi-threading (pthreads), and embedded systems constraints. It emphasizes using static analysis tools, implementing comprehensive error handling, and ensuring performance through proper profiling. Ideal for complex, low-level system tasks.

Guides engineers through initializing MCUs, crafting RTOS-aware drivers, and tuning power/timing for STM32, ESP32, and bare-metal targets; covers constraint analysis, interrupt safety, resource tracking, and validation with static analysis and real-time debugging.

Security guardrails embedded in the mortgage plugin that block prompt injection and social-engineering tricks, stop system prompt extraction, guard PII and pricing logic, enforce workflow phases, and ensure conversational inputs stay within refinance scope.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.

A comprehensive workflow for performing static and dynamic analysis of malicious PDF documents. It utilizes tools like peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects. Ideal for triaging phishing attachments, analyzing exploit documents, and building threat signatures in a controlled forensic environment.

This tool automates the extraction of embedded configuration details from Agent Tesla Remote Access Trojan (RAT) samples. It is designed to recover crucial exfiltration credentials (SMTP, FTP, Telegram), keylogger settings, and Command and Control (C2) endpoints by analyzing and deobfuscating the .NET assembly structure. Essential for threat intelligence, incident response, and malware reverse engineering.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

This guide details how to perform pre-execution static analysis of Windows PE malware samples using tools like PEStudio, Python's pefile, and FLOSS. It focuses on examining file headers, section entropy, import address tables (IAT), and embedded strings to identify malicious functionalities, packing techniques, and indicators of compromise (IOCs) without running the binary. Ideal for initial triage of suspicious executables.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

This skill provides comprehensive functionality for reading, creating, editing, and downloading content from Lark Feishu Docs (Docx/Wiki). Whether accessing via URL or token, it supports structured content manipulation using both XML and Markdown formats (v2 API). Use it for fetching document details, updating specific blocks, and managing embedded media and resources like whiteboards and images. Note that it requires prerequisite knowledge for advanced operations.

A powerful tool for managing whiteboard content embedded in Lark cloud documents. It allows users to query the board, exporting content as a preview image, retrieving raw node structures, or updating the board using various formats (Mermaid, PlantUML). Ideal for generating, viewing, or modifying complex diagrams like architecture diagrams and flowcharts.

A comprehensive guide for configuring and troubleshooting Jenkins when embedded within KubeSphere DevOps. Learn how to manage Jenkins via Configuration as Code (CasC), integrate advanced authentication methods like LDAP and OIDC, customize agent images, and connect to external sources such as GitLab. Covers everything from initial access to backup and recovery.