Skill UI

This skill simulates an autonomous, overnight development cycle by leveraging Git hooks to enforce Test-Driven Development (TDD). It ensures that all code changes, whether building new features, refactoring, or fixing bugs, are rigorously tested and meet high quality standards before commitment. Use this when high code reliability and comprehensive testing are critical requirements.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

Covers Bluetooth Low Energy attack workflows, including GATT enumeration, unauthenticated characteristic access, pairing downgrade checks, MITM during pairing, sniffing, and companion app reverse engineering for IoT and consumer BLE devices.

This comprehensive playbook details advanced techniques for exploiting Layer 2 and Layer 3 network protocols. It covers attacks such as ARP spoofing, LLMNR/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, and STP manipulation. Designed for penetration testers, it facilitates MitM positioning, credential harvesting (NTLM relay), and robust network environment exploitation.