Skill UI

Simulates and detects software supply chain attacks by checking typosquatting risks with Levenshtein distance, probing dependency confusion across registries, verifying package hashes, and running pip-audit vulnerability scans for security assessments.

This guide details a comprehensive methodology for penetration testing desktop (thick client) applications. It covers static and dynamic analysis, focusing on identifying vulnerabilities such as hardcoded credentials, insecure local storage, DLL hijacking, memory manipulation, and API communication flaws. Tools like dnSpy, Procmon, and Burp Suite are utilized for in-depth security auditing of enterprise and banking software.

Guides capturing WPA/WPA2 handshakes with monitor-mode adapters, then using aircrack-ng, hashcat, and curated dictionaries to assess passphrase strength during authorized wireless security assessments and document the findings and cleanup.

Provides step-by-step procedures to detect and remediate misconfigured Amazon S3 buckets, including enabling public access blocks, auditing policies and ACLs, enforcing encryption, and automating fixes with AWS Config and Lambda for compliance or incident response scenarios.

Orchestrates WCAG 2.2 Level A/AA scans, fixes, and verifications across React, Next.js, Vue, Angular, Svelte, and plain HTML codebases, producing before/after diffs, contrast checks, compliance reports, and CI/CD-ready hooks.

A comprehensive 7-stage super workflow designed for advanced GitHub repository management. This tool automates deep audits to detect security secrets, junk files, and code quality issues. It further provides structured PR review capabilities, competitor benchmarking against similar projects, and synthesizes all findings into a prioritized, actionable plan, ensuring your repository is optimized and production-ready.

Analyze a codebase to assemble an interactive knowledge graph showing architecture, components, and relationships, enabling full rebuilds, incremental updates, or audits with optional auto-update control.

AegisOps-AI is a professional-grade 'Living Pipeline' that integrates advanced AI reasoning directly into the SDLC. It acts as an intelligent gatekeeper, automating high-stakes audits across three domains: identifying memory vulnerabilities in Linux Kernel patches, detecting massive cost drifts in Terraform plans, and translating natural language security intent into hardened Kubernetes manifests.

This skill systematically audits a given project by analyzing its historical memory, rollout summaries, and local skill definitions. It identifies repeated complex workflows, recurring operational patterns, or areas where existing skills are stale. The audit process guides the user to recommend the highest-value skills to either add (if a new pattern emerges) or update (if current skills are outdated or incomplete), ensuring the AI agent operates with the most accurate and context-specific knowledge base for optimal project execution.

This skill reviews code differences (diffs) to identify opportunities for improvement in clarity, reusability, efficiency, and overall quality. It employs multiple specialized sub-agents (e.g., Code Reuse, Efficiency, Quality) to audit changes. It can provide high-confidence, behavior-preserving fixes when requested, ensuring the code adheres to best practices without introducing regressions. Best used when refactoring, cleaning up, or auditing a specific code scope.

This skill provides a comprehensive audit workflow for diagnosing performance issues in SwiftUI applications. It begins with a code-first review, identifying common performance smells like invalidation storms or layout thrash. If code inspection is insufficient, it guides the user through collecting runtime profiling evidence (e.g., Instruments data) to pinpoint root causes such as janky scrolling, high CPU usage, or memory leaks.

Monitors Certificate Transparency logs via crt.sh and direct RFC 6962 API calls to spot unauthorized issuances, track CAs, discover subdomains, and alert on suspicious TLS certificates for owned domains.