Skill UI

A specialized review tool for identifying critical performance bottlenecks within Django applications. It focuses on validating issues such as N+1 queries, unbounded querysets, missing database indexes, and write loops. Use this when you suspect database slowdowns or memory exhaustion due to inefficient ORM usage, ensuring findings are provable and actionable.

Diagnose and fix Odoo performance bottlenecks by tuning PostgreSQL queries, adjusting worker/memory limits, and applying profiling insights to achieve faster page loads and stable production behavior.

This tool allows users to explicitly save critical, project-specific facts, conventions, or debugging insights to a dedicated auto-memory file. Use it when the knowledge is too important or specialized to rely on the AI's automatic context capture. It ensures persistent recall of architectural decisions, tool gotchas, or team preferences across multiple sessions and projects.

A specialized tool for auditing source code (C/C++/Rust) to ensure sensitive data (keys, passwords, PII) is properly zeroized. It analyzes memory handling at the assembly and IR level to detect if compiler optimizations, such as dead-store elimination, have accidentally removed or weakened the secure cleanup process. Essential for maintaining security in critical codebases.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

Walks through analyzing RAM dumps with Volatility 3/2 to uncover injected code, hidden processes, network activity, and credentials when responding to compromised hosts.

This skill outlines the comprehensive process of memory forensics on compromised Linux systems. It guides users through acquiring volatile memory using the LiME kernel module and analyzing the resulting image with the Volatility 3 framework. Key artifacts extracted include process lists, network connections, bash history, and loaded kernel modules, making it an essential technique for incident response, threat hunting, and security investigations.

This skill provides comprehensive guidance and detection rules for identifying fileless malware, in-memory attacks, and living-off-the-land techniques. It covers detecting PowerShell exploitation, reflective DLL injection, WMI abuse, and registry-resident threats, enabling security teams to build robust detections when traditional antivirus fails.

This script detects and analyzes sophisticated fileless malware techniques that operate entirely in system memory. It specializes in identifying threats that utilize Living Off the Land Binaries (LOLBins), WMI event subscriptions, and registry-resident payloads, bypassing traditional file-based security controls. It is ideal for forensic investigations, threat hunting, and building advanced detection rules in modern enterprise environments.

A comprehensive guide and methodology for detecting process hollowing (T1055.012). It involves advanced memory forensics, analyzing memory-mapped sections, and correlating parent-child process anomalies using EDR and Sysmon data to identify fileless and in-memory malware threats.

A comprehensive skill for detecting advanced malware techniques, including DLL injection, process hollowing, APC injection, and thread hijacking. Utilizes memory forensics (Volatility), API monitoring (Sysmon), and behavioral analysis to identify malicious code artifacts and suspicious process activities in a deep defense context.

Learn how to integrate AFL++ (American Fuzzy Lop Plus Plus) into Continuous Integration/Continuous Deployment (CI/CD) pipelines. This guide details the process of using coverage-guided fuzzing to discover critical vulnerabilities, such as memory corruption, input handling flaws, and logic bugs, in compiled C/C++ applications that process untrusted input.