Skill UI

This skill implements a sophisticated risk-based prioritization engine by combining three critical data sources: the CISA Known Exploited Vulnerabilities (KEV) catalog, the Exploit Prediction Scoring System (EPSS), and traditional CVSS scores. It allows security teams to move beyond simple severity ratings, focusing remediation efforts on vulnerabilities confirmed to be actively exploited in the wild or predicted to be highly exploitable. The workflow integrates fetching, enriching, and scoring vulnerabilities to generate an actionable remediation plan with defined SLAs.

This skill details how to conduct comprehensive Operational Technology (OT) vulnerability assessments using platforms like Claroty xDome. It covers passive asset discovery, correlating vulnerabilities against CISA/ICS-CERT advisories, calculating risk scores, and prioritizing remediation based on operational impact and compliance standards (e.g., IEC 62443, NERC CIP). The provided workflow uses Python to manage asset inventory and vulnerability matching for highly regulated industrial environments.

This tool guides the process of reviewing security findings from DAST and SAST scanners. It uses the OWASP risk rating methodology to classify vulnerabilities (true positive, false positive, needs review) and calculate a comprehensive risk score based on likelihood and impact, ensuring development teams prioritize the most critical issues.

Use the understand-diff skill to analyze git changes against the stored knowledge graph so you can quickly summarize modified files, affected components, and risk areas before reviewing or merging.

Creates comprehensive test strategies, task breakdowns, and quality validation plans using ISTQB and ISO 25010 for GitHub projects, ensuring risk-based coverage and CI/CD readiness for every feature delivery.

This comprehensive checklist details how to test for XML External Entity (XXE) injection vulnerabilities. It covers classic, blind, error-based, and out-of-band techniques, enabling testers to identify weaknesses in XML parsers. The methodology includes finding various injection points (e.g., file uploads, SOAP/REST endpoints) and exploiting potential risks like file disclosure, SSRF, and DoS. Use this guide for robust web application security testing and bug bounty hunting.

This skill generates a highly customized code review checklist for any pull request. Instead of using a generic template, it adapts the review depth and specific checks based on the target language (e.g., Python, TypeScript), the nature of the change (e.g., bug fix, refactor), and the associated risk level (low, medium, high, critical). It ensures comprehensive coverage, guiding reviewers to focus on critical areas like security, correctness, and architectural integrity.