Skill UI

A comprehensive toolkit designed for cybersecurity professionals to deobfuscate malicious JavaScript code. It reverses complex encoding layers (Base64, Hex, Unicode), eval chains, and control flow obfuscation techniques found in phishing pages, web skimmers, and dropper scripts, revealing the original malicious logic for thorough forensic analysis and threat intelligence gathering.

This skill provides systematic methods and advanced techniques to deobfuscate multi-layered PowerShell malware. It utilizes Abstract Syntax Tree (AST) analysis, dynamic execution tracing, and specialized tools to reveal hidden payloads, C2 infrastructure, and the original malicious logic. It is essential for security analysts, red teamers, and incident response teams performing deep malware analysis.

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

This guide details how to implement multi-layered API threat protection using Google Apigee. It covers critical security policies including JSON/XML content validation, OAuth 2.0 enforcement, SpikeArrest rate limiting, and advanced regex patterns to defend against OWASP Top 10 threats. Ideal for establishing robust API security controls and meeting compliance requirements.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

A comprehensive guide for security professionals detailing how to exploit web cache mechanisms (CDNs, reverse proxies) to inject malicious content. It covers identifying caching layers, discovering unkeyed headers (like X-Forwarded-Host), and executing poisoning attacks for authorized penetration testing.

Helps developers answer codebase questions by leveraging the `.understand-anything/knowledge-graph.json` graph; walks through project metadata, nodes, edges, and layers to explain dependencies and contexts.

Provide step-by-step explanations of specific files, functions, or modules, leveraging the understand-explain workflow to map graph context, layer placement, internal structure, and data flow for developers needing deep clarity.

Creates a comprehensive onboarding guide for new teammates by extracting project context from the knowledge graph, layering architecture descriptions, guiding tours, and highlighting complex files so newcomers can ramp up quickly.

A comprehensive guide detailing how to refactor large, complex SwiftUI views into smaller, more stable, and explicit components. It emphasizes adopting a lightweight state approach (favoring local state and environment variables over excessive view model layers) to improve data flow, readability, and overall code maintainability in modern iOS development.

Guides building Spring Boot apps with layered architecture, REST controllers, JPA repositories, transactional services, global exception handling, DTO mappers, and testing checkpoints.

A comprehensive guide for developing robust, Unix-native Command Line Interfaces (CLIs) using Go. It details best practices for command structure, flag handling, configuration layering (Viper), and argument validation using Cobra. Learn how to build, extend, and review professional-grade Go tools that behave predictably in shell environments.