Skill UI

Automates code injection detection guidance as part of Security Fundamentals, offering step-by-step advice, best-practice patterns, and production-ready snippets for authentication, input validation, and secure coding scenarios.

Automates HIPAA audit helper workflows within Security Advanced, offering guided best practices, production-ready configurations, and compliance validation for penetration testing and threat modeling scenarios.

Provides automated guidance and production-ready artifacts for key rotation manager workflows within advanced security scenarios.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

Guides users through advanced network security scanning tasks by offering best-practice workflows, code/config generation, and validation for compliance, penetration testing, and enterprise security scenarios.

Automates security benchmark runner workflows by triggering on relevant terminology, guiding pen testing/compliance tasks, generating production-ready configs, and validating outputs against industry standards within advanced enterprise security scenarios.

Guides AWS users through generating secure security group configurations with best practices, automating code and configuration creation plus validation across compute, storage, and networking scenarios.

Auto-activating security assistant that steps through SQL injection detector tasks, enforces best practices on authentication, input validation, and secure coding, and produces validated code/configuration for Security Fundamentals scenarios.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

A comprehensive guide for conducting penetration testing on iOS and Android mobile applications, adhering to the OWASP MASTG. This skill covers the full mobile attack surface, including static analysis of binaries, dynamic runtime testing, and deep API security assessment. Techniques taught include bypassing certificate pinning, analyzing local data storage (Keychain, SQLite), and identifying vulnerabilities in authentication and network communication.

A comprehensive skill designed for advanced security analysis, detecting malicious behaviors across mobile applications (Android/iOS). It performs multi-layered analysis, including static indicator checks (permissions, manifest), dynamic instrumentation via Frida, network traffic monitoring (C2 communication, exfiltration), and automated scanning (MobSF). Use this when investigating suspicious apps, detecting trojans, or performing malware triage.

A comprehensive skill for assessing mobile applications (Android and iOS) for vulnerabilities related to deep links, custom URI schemes, and intent handling. This skill identifies risks such as unauthorized access, data injection, intent hijacking, and improper validation of App Links or Universal Links, crucial for robust mobile security testing.