Skill UI

Privacy Mask is a CLI utility for detecting and redacting sensitive PII in screenshots and images locally. It supports various detection engines including regex and NER to identify IDs, financial data, and API keys. All processing is offline to ensure data security. Users can run dry-runs before masking. Ideal for debugging and sharing images without exposing private credentials or secrets.

Red team tactics principles based on MITRE ATT&CK framework. Covers attack phases, detection evasion, lateral movement, and reporting for authorized security assessments.

This skill creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. It guides users through a strict workflow including test-first development, AST analysis, and validation. Ideal for building static analysis detections, enforcing coding standards, and identifying data flow issues using taint mode.

This skill enables comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws and validate input sanitization. It supports detection of in-band, blind, and out-of-band attack vectors. Users can demonstrate exploitation techniques and extract data for authorized security testing purposes only. Requires explicit written permission before execution.