Skill UI

A comprehensive toolkit for navigating, optimizing, and managing large monorepos built with JavaScript/TypeScript. It supports industry-leading tools like Turborepo, Nx, pnpm, and Lerna. Key features include cross-package impact analysis, selective builds, remote caching, dependency graph visualization, and structured migrations, ensuring fast, reliable CI/CD pipelines for complex codebases.

This skill performs comprehensive static analysis of Android APK malware. It utilizes industry-standard tools like androguard and apktool to decompile resources, inspect manifests, and identify dangerous permissions, obfuscated code patterns, dynamic loading mechanisms, and suspicious API calls without executing the sample. It is essential for security analysts, SOC teams, and threat hunters building detection rules or triaging suspicious malware samples.

This tool parses and analyzes Cobalt Strike Malleable C2 profiles, extracting critical network indicators such as HTTP/DNS transforms, URIs, headers, jitter, and sleep cycles. It is essential for reverse-engineering captured profiles or building robust network detection signatures for threat hunting and incident response.

A deep-dive tool for cybersecurity professionals to analyze malware Command and Control (C2) communication across multiple protocols (HTTP, HTTPS, DNS, custom). It helps reverse-engineer beaconing patterns, decode proprietary protocols, and map threat actor infrastructure, making it crucial for building robust detection signatures and attributing threats.

This tool parses NetFlow v9 and IPFIX records to conduct deep network security analysis. It is crucial for investigating security incidents by building traffic baselines and applying statistical methods. Key detection capabilities include identifying port scanning, data exfiltration attempts, command and control (C2) beaconing patterns, and general volumetric anomalies in network traffic.

This skill provides a structured methodology and tools for investigating sophisticated supply chain attacks. It focuses on detecting trojanized software updates, compromised build pipelines, and hidden dependencies by performing deep binary comparison, code signing verification, and anomaly detection. Use it during incident response to map out intrusion vectors and assess the full scope of a security breach.

This tool detects critical anomalies in DNP3 communications used within SCADA and ICS environments. It employs deep packet inspection and machine learning to monitor for unauthorized control commands, protocol violations, firmware update attempts, and deviations from established network baselines. It is essential for securing critical infrastructure, such as energy grids and industrial control networks, and building robust anomaly-based Intrusion Detection Systems (IDS).

This tool automates the discovery and comprehensive inventory of all privileged accounts across an enterprise infrastructure. It identifies domain administrators, local accounts, service accounts, cloud IAM roles, and application admins. It supports risk classification, enabling organizations to build accurate inventories, onboard accounts to PAM solutions, and scope necessary privileged access controls for compliance and security assessments.

This tool monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance for owned domains, discover hidden subdomains, and track suspicious certificate activity. By querying public CT logs and APIs (like crt.sh), it helps build continuous security pipelines, identify potential phishing infrastructure, and map the external attack surface for comprehensive threat intelligence.

This tool provides comprehensive integration for Reolink security cameras, supporting both RTSP streaming and HTTP API access. It allows users to discover cameras via ONVIF, capture live streams, take snapshots, and even capture motion-triggered video clips. It is ideal for developers building robust, networked surveillance or monitoring systems.

A specialized, read-only tool designed for penetration testing and red teaming. It performs comprehensive enumeration across AWS and Azure, allowing users to build a deep situational awareness of an environment. Key functions include identifying internet-exposed endpoints, retrieving sensitive secrets, and mapping critical trust relationships (like sts:AssumeRole) necessary for planning lateral movement or privilege escalation.

This comprehensive tool provides a multi-stage verification pipeline for the RuView system. It executes full Rust workspace tests, runs a deterministic Python proof (Trust Kill Switch) to detect behavioral drift, and generates a detailed ADR-028 witness bundle. Use this before merging pull requests or when creating an official attestation package for recipients.