Skill UI

This skill provides systematic methods and advanced techniques to deobfuscate multi-layered PowerShell malware. It utilizes Abstract Syntax Tree (AST) analysis, dynamic execution tracing, and specialized tools to reveal hidden payloads, C2 infrastructure, and the original malicious logic. It is essential for security analysts, red teamers, and incident response teams performing deep malware analysis.

This skill provides a direct, fast shell invocation to capture the current git diff (staged, working-tree, or specific file list) as raw text. It is designed to replace slower LLM agent steps that merely execute 'git diff' commands, significantly speeding up CI/CD workflows and meta-steps that require repository state analysis.

Provides a comprehensive workflow and tooling (GuardDog) to triage npm packages and dependency trees for signs of malicious activity. It focuses on static analysis of install scripts, detecting credential exfiltration, reverse shells, and worming behavior, thereby safeguarding against software supply-chain attacks.