Skill UI

A comprehensive tool designed to simulate advanced Layer 2 network attacks, including VLAN hopping, switch spoofing (DTP attacks), and double tagging. This skill is critical for authorized penetration testing environments to validate the effectiveness of VLAN segmentation, analyze 802.1Q trunking robustness, and ensure switch port security configurations are correctly implemented against Layer 2 bypass attacks.

A comprehensive guide for analyzing .NET malware (C#, VB.NET, F#) using professional tools like dnSpy and de4dot. Learn to decompile code, identify obfuscation techniques (ConfuserEx, SmartAssembly), extract C2 configurations, and debug malicious behavior in stealers and RATs.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.

Kubesec is a powerful open-source tool designed to perform comprehensive security risk analysis on Kubernetes resource manifests (YAML/JSON). It automatically detects critical misconfigurations, potential privilege escalation vectors, and deviations from industry security best practices. It provides actionable scoring and hardening recommendations, making it essential for CI/CD pipelines, security auditing, and automated compliance checks.

This skill provides a comprehensive guide and methodology for identifying and exploiting Cross-Origin Resource Sharing (CORS) misconfigurations in web applications. It covers testing origin validation bypasses, analyzing preflight requests, and simulating data exfiltration during authorized penetration tests, crucial for assessing API security.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

This skill provides a comprehensive, read-only audit of a development workspace, including active repositories, installed plugins, connected services, and environment configurations. It analyzes existing capabilities against best practices to identify functional gaps and recommends the most valuable ECC-native skills, hooks, and workflows needed to enhance the development experience. Ideal for setup planning and architectural reviews.

This tool runs comprehensive diagnostics on the current context mode environment. It checks the status of critical components, including runtimes, hooks, FTS5, plugin registrations, and versions for npm and the marketplace. Use this skill to quickly identify potential technical issues or configuration inconsistencies, ensuring smooth system operation.

This guide outlines how to build new API connectors or providers that strictly adhere to the existing integration architecture and patterns of a target repository. It is designed for adding integrations while maintaining architectural consistency (e.g., layout, configuration schema, authentication model, and testing style), preventing the creation of novel, unsupported patterns.

This skill guides developers on implementing Firebase Remote Config in Flutter. It allows for dynamic control of application behavior—such as toggling feature flags, running A/B tests, or changing parameter defaults—without deploying new app versions. It covers setup, fetching, activating, and handling real-time config updates for optimal user experience and controlled rollouts.

A comprehensive guide detailing how to correctly set up, initialize, and configure Firebase within Flutter applications. This skill covers running the `flutterfire configure` CLI, implementing secure initialization in `main.dart`, and advanced techniques for managing multiple application flavors (e.g., development, staging, and production) using environment-specific configurations.

A comprehensive guide for building production-quality, highly accessible, and responsive user interfaces. Covers advanced topics including component architecture (composition over configuration), robust state management patterns (Context, Redux, Server State), adherence to design systems, and meeting WCAG accessibility standards. Use this skill when developing or refining complex user-facing components that require professional polish and maintainability.