Skill UI

This tool provides a comprehensive framework for analyzing web server logs (Apache/Nginx) to detect various security threats. It uses advanced regex matching against OWASP attack signatures to identify SQL injection, Local File Inclusion, and Directory Traversal attempts, alongside behavioral analysis for brute-force attacks and web scanner fingerprints. The system also enriches data using GeoIP for source attribution, generating a prioritized report for SOC analysts.

AuraKit converts a single /aura command into a secure full-stack Claude pipeline with 34 modes, OWASP SEC-01~15 safeguards, runtime hooks, tiered models, token savings, and multilingual reviewers.

This skill provides the OWASP Top 10 for Agentic Applications 2026 (ASI) framework for classifying security risks in AI agent systems. It maps detection findings to standardized risk categories like goal hijacking, tool misuse, and identity abuse, enabling consistent security assessment and remediation prioritization for agentic workflows.

This skill provides a repeatable assessment for RAG systems, testing for critical vulnerabilities in vector stores and embedding models. It specifically addresses embedding inversion, cross-tenant data leakage, and knowledge-base poisoning, aligning with OWASP LLM08:2025. Use when performing authorized security audits of retrieval layers and multi-tenant isolation.

Secure LLM-powered applications against prompt injection, data leakage, and abuse using input validation, output controls, and tenant isolation. Implements OWASP LLM Top 10 mitigations with Python and Node.js examples.

Conduct authorized security assessments for LLM applications and AI agents. Covers prompt injection, tool abuse, RAG exposure, memory poisoning, and system prompt extraction following OWASP LLM/ASI Top 10 guidelines. Includes red-teaming, vulnerability mapping, and compliance engineering for AI systems to ensure safety and robustness.

Authorized Android/iOS reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP MASTG.