Skill UI

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

This command acts as a crucial product gate, forcing a deep, strategic review before any code is written. Instead of simply fulfilling the request, it guides users through three structured roles: Scope Expansion (finding the 10x vision), Hold Scope (stress-testing assumptions and failure modes), or Scope Reduction (defining the true MVP). It ensures that the developed solution solves the user's real job-to-be-done, not just the explicit feature request.

A comprehensive, multi-step framework for conducting systematic QA testing on web applications. This guide covers scope detection (diff-aware), tiered testing depth (Quick, Standard, Exhaustive), detailed issue taxonomy (Functional, Visual, UX, etc.), structured bug documentation, and the critical fix-and-verify loop, ensuring high code quality throughout the development cycle.

A sophisticated, multi-agent system designed to perform deep, comprehensive code reviews on pull requests. It covers core elements like code quality, functionality, security vulnerabilities, and testing coverage. Advanced features include detecting scope drift, enforcing SOLID principles, identifying DRY violations, and providing anti-hallucination safeguards for maintain high software integrity.

A comprehensive guide detailing advanced, authorized techniques for Active Directory security testing and red teaming. It covers critical attack vectors such as Kerberos exploitation, BloodHound path analysis, NTLM relay, and domain privilege escalation. Designed for security professionals to systematically map and exploit domain weaknesses.

This advanced methodology builds an evidence-linked causal chain from a localized fault to an actionable systemic root. It moves beyond simple proximate causes by requiring counterfactual testing, verifying multiple independent pathways, and prescribing countermeasures that eliminate enabling conditions, ensuring true recurrence prevention.

This methodology allows engineers and analysts to conduct controlled counterfactual simulations when real-world testing (such as catastrophic failures, extreme load, or irreversible changes) is too rare, costly, or impossible. By isolating a single variable and tracing the mechanistic chain step-by-step, it helps surface critical system breakpoints, invariants, and necessary controls before deployment.

Coordinates authorized multi-stage security assessments including full penetration testing, external-to-domain compromise, and attack path planning. The skill acts as a central orchestrator, routing reconnaissance, initial access, privilege escalation, lateral movement, and reporting tasks to specialized sub-skills. Intended for authorized engagements only.

This skill verifies completed work against acceptance criteria using a three-stage pipeline. It performs mechanical checks like linting and testing, semantic reviews for compliance, and multi-model consensus when uncertain. It supports automated fix loops and ensures code quality beyond simple test passing, providing proof of completion.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

A deep-dive methodology for authorized penetration testing targeting dependency confusion and namespace resolution vulnerabilities across major package ecosystems (npm, PyPI, NuGet, Maven, etc.). This skill details advanced reconnaissance techniques, from analyzing lock files and source maps to exploiting error messages, alongside safe Proof-of-Concept (PoC) creation using DNS canaries for discovery during penetration engagements.

This guide provides comprehensive, battle-tested techniques for expanding access across a compromised network. It covers credential-based movement (Pass-the-Hash, Pass-the-Ticket), NTLM relay attacks, and remote execution protocols (WMI, WinRM). Used exclusively in authorized red team engagements and penetration testing, it details command sequences and OPSEC considerations required to reach high-value targets while minimizing detection.