Skill UI

Analyzes Siemens SIMATIC S7comm and S7CommPlus traffic to spot replay, integrity-bypass, unauthorized CPU stops, and illicit downloads on S7-300/400/1200/1500 PLCs, supporting auditors and detection engineers during OT security assessments.

Use sslyze to audit HTTPS servers by inspecting supported TLS/SSL versions, cipher suites, certificates, HSTS, OCSP stapling, and known flaws like Heartbleed and ROBOT, producing a JSON compliance report with remediation notes.

Performs thick client desktop application pentests by analyzing local storage, binaries, memory, and API traffic with dnSpy, Procmon, Burp Suite, and supporting tools to surface hardcoded credentials, DLL hijacking, insecure encryption, and authentication flaws before release.

Guides building Progressive Web Apps with manifests, service workers, caching strategies, offline fallbacks, and install prompt handling so web projects feel native, survive unreliable networks, and support add-to-home-screen workflows.

Analyzes the repository to generate a knowledge graph that drives an interactive architecture explorer, supports full or incremental updates, auto-update configuration, and review-only paths via the `/understand` command.

Guides offensive security testing for web applications, APIs, infrastructure, dependencies, and secrets, including OWASP Top 10 audits, static/dependency scanning, API/infra checks, and report workflows that support authorized penetration tests.