Skill UI

Rigorously dissects code and architecture through advanced mathematics—graph theory, category theory, stochastic systems, information theory, and formal invariants—to uncover hidden structure and optimize performance.

Offers testing guidance covering TDD workflows, unit/integration/E2E organization, framework support, mocking strategy, and coverage to help teams deliver reliable, well-structured test suites.

A comprehensive technical module covering foundational deep learning principles and cutting-edge computer vision architectures, drawing from Yann LeCun's research. Topics include CNN fundamentals, backpropagation theory, and advanced self-supervised learning (SSL) models such as SimCLR, MAE, and the modern Joint Embedding Predictive Architecture (JEPA). Provides detailed theoretical explanations and complete PyTorch code for implementation.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

A comprehensive guide to writing reliable and maintainable tests for Kotlin projects. This skill covers modern testing patterns using Kotest for various spec styles (FunSpec, BehaviorSpec), MockK for dependency mocking, and enforces TDD principles (RED/GREEN/REFACTOR). Learn how to implement unit tests, property-based testing, and ensure high code coverage with Kover.

Security guardrails embedded in the mortgage plugin that block prompt injection and social-engineering tricks, stop system prompt extraction, guard PII and pricing logic, enforce workflow phases, and ensure conversational inputs stay within refinance scope.

This skill analyzes Active Directory (AD) Access Control Lists (ACLs) to detect dangerous misconfigurations. It uses the ldap3 Python library to query domain controllers, parse security descriptors (SDDL), and identify instances where non-privileged users or groups are granted dangerous permissions like GenericAll, WriteDACL, or WriteOwner on sensitive objects. Essential for security incident response and privilege escalation path discovery.

A comprehensive cybersecurity tool designed to analyze malicious VBA and XLM macros embedded within Microsoft Office documents (Word, Excel, PowerPoint). It facilitates deep forensic investigation by extracting, deobfuscating, and tracing the full attack chain, including identifying auto-execution triggers, payload download URLs, and file writing techniques. Useful for malware analysts investigating phishing campaigns and maldocs.

Walks through analyzing RAM dumps with Volatility 3/2 to uncover injected code, hidden processes, network activity, and credentials when responding to compromised hosts.

A comprehensive digital forensics technique used to investigate removable media usage. It parses artifacts from Windows registry (USBSTOR, MountedDevices), Event Logs, and SetupAPI logs to track which USB devices were connected, when they were used, and establishing a timeline for potential data exfiltration or insider threat activity.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.

MISP (Malware Information Sharing Platform) is an open-source platform designed for gathering, storing, and correlating Indicators of Compromise (IOCs). This skill guides users through deploying MISP using Docker, configuring various threat feeds (MISP, TAXII, CSV), and utilizing the PyMISP Python API. It enables the building of automated pipelines to aggregate diverse threat data, such as IP addresses, domains, and hashes, for enhanced security operations.