Skill UI

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

This platform deploys continuous attack graph analysis to map how adversaries can chain together various exposures—including vulnerabilities, misconfigurations, identity risks, and credential weaknesses—toward critical business assets. It pinpoints 'choke points,' allowing security teams to prioritize remediation efforts for maximum risk reduction with minimal effort, ideal for CTEM programs.

A comprehensive guide to implementing advanced security measures in Google Workspace. This covers enhanced pre-delivery scanning, anti-spoofing detection, attachment protection, and setting up Enhanced Safe Browsing to safeguard against sophisticated phishing and malware attacks within organizational emails. Ideal for security administrators and compliance teams.

This skill guides users through performing sophisticated web cache deception attacks. It exploits path normalization discrepancies and cache key misconfigurations between Content Delivery Networks (CDNs) and origin servers. Use this methodology to test for sensitive data exposure, cache poisoning, and authentication bypass vulnerabilities in applications protected by aggressive caching layers like Cloudflare or Akamai.

Use this skill to pressure-test and de-risk a business or creative idea before committing time and capital. It simulates an adversarial panel of five independent experts—The Critic, The Champion, The Analyst, The Investigator, and The Customer—to attack, support, and validate your concept from every possible angle. The final Judge provides a decisive GO/RESHAPE/KILL verdict.

Translate cybersecurity findings into defensible 0-100 A-F risk scores, FAIR-aligned dollar loss estimates, and board-ready summaries. Passive analysis only, with ownership-aware confidence caps and attack-path amplification. Ideal for scoring risk, quantifying exposure, estimating breach cost, or explaining risk grades.

A comprehensive guide for authorized red team and penetration testing engagements, detailing techniques that exploit human trust and psychological vulnerabilities. Coverage includes pretexting, vishing, smishing, physical access attacks (e.g., badge cloning, tailgating), USB payload delivery, and OSINT-driven targeting. This methodology maps to key MITRE ATT&CK T-numbers, simulating real-world, multi-vector adversaries to test organizational defenses at the human layer.

This advanced tool maps an organization's complete internet footprint by tracing ownership directly from a legal entity (LEI), not just a single seed domain. It discovers owned domains, netblocks, ASNs, and subsidiaries, including 'dark' or unlinked IP space and M&A acquired assets. It provides auditable attribution scoring for robust intelligence gathering.

This advanced skill stress-tests legal submissions, motions, or arguments by generating an adversarial critique that survives multiple layers of challenge. It goes beyond superficial attacks, ensuring every point is load-bearing and defensible against a single-sentence reply. Ideal for red-teaming, stress-testing, or refining arguments to withstand rigorous scrutiny.