Skill UI

A comprehensive guide for designing and presenting highly rigorous technical evaluations for database or system papers. It covers establishing baseline necessity, proving mechanism causality through ablation, testing scalability across data sizes, and mandating the disclosure of loss cases to satisfy skeptical academic reviewers.

This SDK allows asynchronous Python programming to control a live web browser, simulating user interactions for web automation, testing, and data extraction. Users can navigate pages, locate elements, fill forms, click buttons, and capture snapshots of the current page's content. It enforces a 'perceive → act → verify' cycle, making it ideal for building robust web scrapers and end-to-end testing tools.

A comprehensive, 10-phase methodology for authorized security assessment of modern APIs, including REST, GraphQL, WebSocket, and SOAP. This guide covers the entire testing lifecycle—from endpoint discovery and authentication bypass (JWT/OAuth 2.0) to sophisticated authorization flaws (BOLA/IDOR/BFLA), input validation, rate limiting, and CI/CD integration testing.

This tool provides a unified interface to run test suites for various programming stacks (Python, Node.js, Rust) within a CI/CD pipeline. It automatically detects the project's environment (by checking lock files or config) and executes the appropriate testing framework (e.g., pytest, vitest, cargo test), ensuring consistent code quality checks regardless of the underlying language. Ideal for pre-commit or CI/CD integration.

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.

A specialized skill for analyzing client-side persistence mechanisms, including cookies, localStorage, sessionStorage, IndexedDB, and Service Workers. It is crucial for security testing and CTF environments where application behavior or critical decision branches are determined by stored session state, cached data, or local client-side variables. Use this to trace the smallest stateful sequence leading to a decisive outcome.

This specialized skill is designed for advanced security analysis, tracing the complete trust chain from cloud metadata services to accepted privilege. It is used in penetration testing or CTF environments to meticulously prove how metadata-derived credentials (such as instance identities or tokens) are issued and subsequently accepted by a cloud or control plane API, thereby exposing the decisive trust edge.

This specialized skill is designed for advanced forensic analysis and penetration testing within Windows environments. It focuses on extracting and proving the replayability of credentials, tickets, and secrets stored in LSASS memory, Kerberos ticket caches, DPAPI, and SSP artifacts. Use it to establish the minimal, actionable chain (host artifact -> extracted material -> accepted privilege) that proves a decisive edge for privilege escalation.

A specialized downstream skill for analyzing security vulnerabilities in complex agentic systems. This tool is designed for red teaming and penetration testing, focusing on detecting prompt injection, retrieval poisoning, memory contamination, planner drift, and tool boundary abuse within multi-step LLM chains. Use when proving how untrusted inputs compromise system integrity.

A specialized skill for analyzing complex, host-to-host lateral movement chains within a Windows environment. It focuses on tracing protocols like WinRM, SMB, and RDP, replaying captured Kerberos tickets, understanding privilege edges, and identifying the exact accepting service or host that facilitates credential movement. Used in advanced penetration testing and digital forensics scenarios.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.