Skill UI

This comprehensive tool generates high-quality Mermaid diagram code (including flowcharts, sequence diagrams, ER diagrams, etc.) directly from natural language user requirements. It handles complex structured output, mandatory syntax validation using dedicated CLI tools, and detailed visual review to ensure the accuracy of all components and connections.

This tool monitors Modbus TCP communication within SCADA and ICS environments to detect security anomalies. It performs deep packet inspection, baselines normal communication patterns (e.g., typical function code distribution, register access), and applies statistical analysis to identify unauthorized register writes, reconnaissance attempts, or denial-of-service attacks targeting industrial control devices.

This comprehensive skill guides the user through the entire process of creating a deep, multi-layered AI persona (Soul.md). It helps define the identity, core rules, name, and visual prompts for agents designed for the OpenClaw platform. Users can initiate character creation via guided prompts or a random 'gacha' draw, ensuring a cohesive and compelling character profile.

This sophisticated tool generates publication-quality AI illustrations and diagrams for academic papers. It implements a multi-stage, iterative workflow, using advanced LLMs (like Claude and Gemini) to parse user requests, optimize complex layouts, verify academic styling (e.g., CVPR/NeurIPS standards), and render high-fidelity figures. Ideal for researchers needing professional, complex visuals for their manuscripts.

This skill utilizes AI/LLM reasoning capabilities combined with industry-standard OSINT tools (Sherlock, theHarvester, SpiderFoot). It correlates fragmented data—including usernames, emails, domain records, and breach data—from multiple sources into unified, confidence-scored intelligence profiles. It is ideal for deep target profiling, identity resolution, and mapping complex threat landscapes.

This skill provides a comprehensive guide and structured SQL templates for performing deep forensic investigations on AWS cloud logs. It utilizes AWS Athena to query massive datasets from CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs. Ideal for detecting unauthorized access, data exfiltration, and privilege escalation during security incident response.

A comprehensive guide detailing the workflow for firmware reverse engineering. It uses tools like binwalk to identify embedded filesystems (e.g., SquashFS, CramFS), perform entropy analysis to locate hidden data, and extract components. The process covers deep inspection, credential discovery, and reporting for IoT and embedded security assessments.

This comprehensive skill provides a systematic framework for performing deep security assessments on iOS applications. It covers static analysis of IPA packages, dynamic instrumentation using Frida and Objection, SSL pinning bypass for traffic interception, extraction and auditing of sensitive data from the Keychain, and runtime method hooking. Use this for authorized penetration testing against standards like OWASP MASTG.

This tool automates the entire Privacy Impact Assessment (PIA) workflow. It systematically maps data flows, calculates privacy risk scores using established matrices (NIST PRAM, ICO DPIA), and checks compliance against major regulations like GDPR and CCPA/CPRA. It is essential for organizations launching new systems or preparing for regulatory audits to ensure data privacy compliance.

This utility executes atomic Red Team tests mapped to the MITRE ATT&CK framework. It is essential for purple team exercises, allowing security teams to assess detection coverage gaps, validate SIEM/EDR rules, and generate detailed ATT&CK coverage heatmaps. Use it to build continuous detection validation loops and measure blue team visibility against known adversary techniques.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

A comprehensive workflow for preparing and maintaining grounded, venue-compliant rebuttals to external academic reviews. It handles strict text-only character limits, manages responses for multiple reviewers (e.g., OpenReview style), supports follow-up rounds, and enforces safety gates against fabrication or overpromising. Ideal for the post-submission phase of research publishing.