Skill UI

This skill provides comprehensive methodologies for capturing, analyzing, and documenting network protocols. It is crucial for security researchers, developers ensuring interoperability, and engineers debugging complex network communications by understanding the underlying data exchange mechanisms.

This skill details the process of reverse engineering Go-compiled malware using Ghidra. It involves parsing Go-specific metadata structures like buildinfo and pclntab to recover stripped or obfuscated function names. Users can also extract embedded module paths and dependency strings, providing critical insight into the malware's capabilities and third-party dependencies.

Open Source Intelligence (OSINT) is the critical first phase of red team engagements. This guide details how to systematically collect publicly available data about a target organization. It covers mapping network assets (domains, IPs), identifying personnel for social engineering, discovering credential leaks, and mapping the entire technology stack. Use this skill during authorized security assessments to build comprehensive attack surface maps and initial access strategies.

This guide details how to use GoPhish, an open-source framework, to conduct authorized phishing simulations. You will learn the complete lifecycle, from deploying the tool and configuring SMTP profiles, to creating realistic email templates and cloning secure landing pages. The skill culminates in analyzing campaign results to assess organizational security posture and improve employee resilience against social engineering attacks.

This skill analyzes accumulated usage logs from a complex research harness (ARIS) to propose structural optimizations. It identifies areas for improvement in SKILL scripts, default parameters, workflow ordering, and reviewer prompts. It is designed to automate the meta-level engineering process, ensuring that system efficiency is continuously improved based on real-world usage data.

This skill generates a formal Architecture Decision Record (ADR) following industry-standard formats. It guides users through documenting the full rationale behind significant technical choices, ensuring that the context, alternatives considered, chosen option, and resulting trade-offs are all captured. Ideal for maintaining architectural integrity and knowledge transfer within engineering teams.

A comprehensive guide for engineering the migration from classical public-key cryptography to quantum-resistant standards. This skill covers building a Cryptographic Bill of Materials (CBOM) to inventory assets, prioritizing migration based on Harvest-Now-Decrypt-Later (HNDL) risk, and deploying hybrid PQC key exchange (e.g., X25519MLKEM768) on critical channels like TLS, VPN, and SSH. Essential for achieving long-term quantum readiness and crypto-agility.

This skill provides comprehensive guidelines for submitting manuscripts to IEEE Transactions on Biomedical Engineering (TBME). It covers the required balance between a sound engineering method and rigorous biomedical validation, specific scope areas (e.g., biosignal processing, neural engineering), structural requirements, and official submission checklists. It helps authors re-frame their work to meet the journal's high standards.

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

An expert advisor trained in PCI DSS standards (v4.0.1 current) and QSA methodology. This skill provides deep guidance on compliance requirements, including CDE scoping, SAQ selection, gap assessment roadmaps, network segmentation, data tokenization, and general best practices for protecting cardholder data. Essential for security, compliance, and engineering teams.

This adapter acts as a specialized entry point for authorized security analysis, reverse engineering, and CTF tasks using the 'reverse-skill' repository. It guides users through a systematic, multi-step workflow, ensuring that all actions—from setting initial scope to resolving tools—are executed within the defined security contract of the repository. Ideal for defensive testing and deep technical investigations.

This skill assists in constructing or auditing formal models for the Journal of Systems Engineering. It ensures consistency among system boundaries, variables, constraints, objectives, and information structures. It guides users to define actors, timing, and assumptions rigorously, checking for identifiability and solvability before submission.