Skill UI

Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur during a red-team engagement. Triggers on recheck failures, timing shifts, new WAF cookies, and lockout anomalies. Provides investigation discipline, WAF-evasion confirmation, and positive finding templates for IR responsiveness.

Authorized Android/iOS reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP MASTG.

Analyzes options chain data by separating real calls and puts from lottery-like speculative contracts to produce more reliable put/call sentiment, anomaly detection, and expiry breakdowns for watchlists, sectors, and event-driven names.

Monitor and evaluate Retrieval-Augmented Generation (RAG) systems using measurable metrics. This skill covers retrieval quality checks like Recall@k, hallucination detection, and groundedness scoring. It enables continuous regression testing and production monitoring for AI pipelines using Python libraries like RAGAS and OpenTelemetry.

This skill evaluates code diffs against a specific rubric to determine issue detection and resolution. It reads diff files, rubrics, and original fixtures, then answers detection and fix questions for specific problems. Results are appended to a CSV file. Ideal for automated testing and quality assurance workflows in software development.

This skill creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. It guides users through a strict workflow including test-first development, AST analysis, and validation. Ideal for building static analysis detections, enforcing coding standards, and identifying data flow issues using taint mode.

This skill enables detection, response, and prevention of software supply chain attacks targeting package registries, container images, and CI/CD pipelines. It includes lockfile auditing, provenance verification using tools like Cosign and SLSA, and emergency response playbooks for compromised dependencies.

Proactive threat hunting and detection engineering using Sigma/YARA rules, SIEM queries, and ATT&CK mapping for blue-team operations. Includes hypothesis-driven workflows, rule validation, and toolchain guidance.

Voice agents enable natural human-AI conversation through speech recognition and synthesis. This skill covers low-latency architectures like speech-to-speech pipelines and STT-LLM-TTS workflows. It includes optimization strategies for sub-800ms response times, voice activity detection, and integration with tools like Deepgram, ElevenLabs, and OpenAI. Ideal for building production-ready voice assistants with natural interaction flows.

Detects data exfiltration via URL path encoding and chained web_fetch navigation, covering fake trusted UI injection, indirect prompt injection, letter-level path exfiltration, and multi-hop navigation hijacking in agent memory/context scenarios.

A comprehensive asset discovery pipeline for authorized security assessments. It automates subdomain enumeration, live host detection, URL crawling, and vulnerability scanning using tools like subfinder, httpx, nuclei, and katana, delivering prioritized URL lists for penetration testing.

Analyze weight loss data, calculate BMR/TDEE, track energy deficits, and manage weight loss stages. Ideal for BMI, body fat, waist-to-hip ratio, metabolic rate, plateau detection, and personalized weight management progress reports.