Skill UI

This comprehensive profiler provides systematic performance analysis for modern applications built with Node.js, Python, and Go. It detects critical bottlenecks across CPU, memory, and I/O dimensions. Key features include generating flamegraphs, analyzing bundle sizes, optimizing database queries (N+1 detection), and running rigorous load tests using k6 and Artillery. It mandates before-and-after measurements to ensure verifiable performance improvements.

A comprehensive guide for analyzing PCAP files captured during malware execution. It demonstrates advanced techniques using Wireshark, Zeek, Suricata, and Python (scapy) to identify Command and Control (C2) communications, data exfiltration channels, Domain Generation Algorithms (DGA), and periodic beaconing patterns. Essential for malware reverse engineering and network threat detection.

A comprehensive guide for security professionals on detecting and preventing ARP spoofing and poisoning attacks. The skill covers multiple layers of defense, including implementing Dynamic ARP Inspection (DAI) on managed switches, utilizing ARPWatch for continuous monitoring, performing deep packet inspection with Wireshark, and developing custom Python scripts for real-time anomaly detection. Essential for mitigating Man-in-the-Middle (MitM) attacks at Layer 2.

This skill provides comprehensive anomaly detection for Modbus/TCP and Modbus RTU traffic in Operational Technology (OT) and Industrial Control Systems (ICS). It monitors function codes, validates register access, analyzes timing, and detects unauthorized clients. By utilizing advanced tools like Zeek, Suricata, and custom Python models, it helps establish behavioral baselines and identify potential cyber threats.

This skill guides threat hunters in detecting Cobalt Strike Command and Control (C2) beacons. It utilizes advanced network forensic techniques, including analyzing default TLS certificate serials, JA3/JA3S/JARM fingerprints, beacon jitter, and HTTP profile matching. Detection is achieved by correlating data from Zeek logs, Suricata rules, and Python PCAP analysis to identify suspicious outbound communications.

Detects persistence mechanisms (T1547.001) by monitoring critical Windows startup directories. This skill analyzes autoruns entries, monitors for real-time file system changes using Python watchdog, and examines file metadata (like creation timestamps and digital signatures) to identify suspicious implants and unauthorized execution points.

This guide details the process of deploying and configuring Tofino industrial firewalls for critical OT/ICS environments. It provides architectural blueprints and Python-based rule generators to implement deep packet inspection (DPI) for key industrial protocols like Modbus, EtherNet/IP, and S7comm. This ensures granular, protocol-aware access control and robust zone segmentation for safeguarding SCADA and PLCs.

This skill assesses Bluetooth Low Energy (BLE) device security by scanning nearby devices, enumerating GATT services, and analyzing characteristics. It detects critical vulnerabilities such as unencrypted sensitive data exposure, weak pairing configurations, and known vulnerable device fingerprints, making it essential for IoT and medical device security auditing.

This skill demonstrates how to integrate Hardware Security Modules (HSMs) using the standard PKCS#11 interface. It covers secure key generation, signing, encryption, and verification operations directly on the hardware. Ideal for security assessments, compliance audits (FIPS 140-2/3), and validating cryptographic controls using tools like python-pkcs11, AWS CloudHSM, and YubiHSM2.

A comprehensive guide and framework for assessing real-time WebSocket APIs (ws:// or wss://). This skill covers critical security checks, including Cross-Site WebSocket Hijacking (CSWSH), authentication bypass, message injection attacks, input validation flaws, and denial-of-service (DoS) via message flooding. It utilizes tools like Burp Suite and Python for simulating malicious payloads and ensuring secure real-time communication channels.

This guide provides a comprehensive framework for investigating production issues on the Nexu platform using the Datadog Logs API. It details how to query crash events, analyze OpenClaw stderr output, check gateway startup status, and review API request logs (including 5xx errors). It includes best practices for authentication, filtering by pod/time, and parsing raw JSON logs using Python for actionable insights.

This skill generates standardized, production-ready `mise.toml` configurations. It helps developers standardize runtime versions across mixed-language projects (e.g., Node.js, Python, Go, etc.) and CI/CD pipelines, eliminating the need for multiple legacy version managers like asdf or nvm. Ideal for ensuring reproducible, consistent development environments.