Skill UI

This skill automates the execution of red team phishing campaigns using the Python gophish library. It enables users to create sophisticated email templates with tracking pixels, configure SMTP profiles, import target lists from CSV, and launch full-scale simulations. The system tracks key metrics, including open rates, click rates, and submitted credentials, providing essential data for security awareness training and vulnerability assessments.

Reverse engineer malware binaries with Ghidra to decipher C2 protocols, cryptographic routines, and obfuscation, enabling analysts to extract embedded configs, map command dispatchers, and craft detection rules.

Identifies open redirect vulnerabilities in web apps by analyzing redirect parameters, applying bypass payloads, and chaining exploits for phishing or token theft during security assessments.

Automated harness for healthcare deployments that runs Jest suites across CDSS logic, PHI exposure, data integrity, clinical workflow, and integration gates, aborting releases on any critical failure to keep patient safety non-negotiable.

Patterns for protecting patient and clinician data across healthcare applications, covering classification, row-level access control, auditing, and deployment checklists to meet HIPAA, DISHA, GDPR, and other regulations.

Implements end-to-end FIDO2/WebAuthn hardware security key authentication, covering server configuration, registration and authentication ceremonies, YubiKey enrollment, and passkey migration so high-value accounts gain phishing-resistant, passwordless MFA.

This skill provides a comprehensive framework for validating the integrity and recoverability of critical data backups. It goes beyond simple file checks by implementing cryptographic hash verification (SHA-256), simulating automated restore tests in isolated environments, detecting silent data corruption (bit rot), and scanning for signs of ransomware artifacts. It is crucial for ensuring data reliability against cyberattacks and hardware failures, adhering to standards like NIST CSF.

AgentPhone is an API-first platform designed for developers building AI agents with advanced telephony capabilities. It allows agents to manage phone numbers, make/receive voice calls, and handle SMS messages. Developers can utilize hosted mode for simple AI interactions or webhook mode for custom, complex logic, making it ideal for building sophisticated customer support bots or virtual assistants.

Provides a HIPAA-specific entrypoint covering PHI handling, BAAs, auditability, and escalation steps for US healthcare software so requests explicitly invoking HIPAA trigger the right compliance review and guardrails.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

An advanced, AI-powered agent designed to generate comprehensive and workable unit tests for virtually any programming language (e.g., Python, C#, Java, Go, TypeScript). It operates via a sophisticated multi-agent pipeline (Research → Plan → Implement → Build → Test → Fix → Lint). This ensures generated tests are not only written following project conventions but also compile, pass all tests, and effectively improve code coverage.

This guide provides comprehensive patterns for migrating Enzyme unit tests to React Testing Library (RTL), especially when upgrading to React 18. It emphasizes the crucial philosophical shift from testing internal implementation details (like state or props) to asserting visible user behavior. Learn best practices for rewriting shallow/mount/simulate calls into modern, accessible, and resilient RTL queries, ensuring your tests reflect how a user genuinely interacts with the component.