Skill UI

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

A comprehensive, systematic workflow for reverse engineering client-side JavaScript. It guides users through five stages: Observation, Capture, Rebuilding, Patching, and Deep Dive. Applicable for locating API signatures, analyzing encryption parameters, tracking runtime function calls, and reconstructing complex web environments locally for evidence collection and reproduction. Utilizes advanced tools like jshookmcp and various js-reverse_* utilities.

This tool provides a structured, multi-stage method for learning any technical concept, from basic definitions to advanced implementation details and common pitfalls. It progressively deepens the explanation, making complex topics easy to grasp.

A comprehensive framework for conducting authorized security assessments on Large Language Models (LLMs) and AI agents. It covers critical vulnerabilities including advanced prompt injection (OWASP Top 10), tool abuse, RAG data poisoning, memory manipulation, and system prompt extraction. Ideal for red teaming, security auditing, and ensuring the robustness of AI systems in production environments.

This skill implements an advanced reference pattern for integrating with Monitoring Control Platform (MCP) servers. It ensures accurate data retrieval by first reading a domain-specific 'gotchas' reference file, mitigating query failures caused by complex server behaviors, pagination limits, or subtle API quirks. It analyzes issue data, groups errors by root cause, and generates a structured, actionable markdown report for improved system health visibility.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

A comprehensive guide for installing, configuring, and validating the local long-term memory plugin (`memory-tencentdb`) within the OpenClaw environment. This guide covers everything from environment pre-checks to advanced configuration for data capture, information extraction, context recall, and vector embedding, ensuring robust, self-contained memory capabilities for RAG applications.

An advanced orchestrator that manages the entire software development lifecycle (SDLC) from initial concept vetting to final code deployment. It guides the process through distinct, sequential stages: Product Direction Review (CEO), Technical Architecture Review (Engineering), Detailed Planning, Validation, and final Execution (PR). This tool ensures all critical gates are passed before writing code, minimizing risks and ensuring alignment.

Provides comprehensive techniques for reverse engineering complex software targets. Use this when the primary goal is to understand the internal workings of compiled, obfuscated, packed, or virtualized binaries (including APKs, WASM, and firmware). It covers static and dynamic analysis, anti-debugging bypass, and deobfuscation methods, helping users understand the target code's internal mechanisms for security research and vulnerability analysis.

A sophisticated, multi-agent system designed to perform deep, comprehensive code reviews on pull requests. It covers core elements like code quality, functionality, security vulnerabilities, and testing coverage. Advanced features include detecting scope drift, enforcing SOLID principles, identifying DRY violations, and providing anti-hallucination safeguards for maintain high software integrity.

This comprehensive guide outlines a structured methodology for conducting authorized security testing on desktop thick clients (Win/macOS/Linux). It covers critical attack vectors, including local storage analysis, Inter-Process Communication (IPC) vulnerabilities, network traffic interception, client-side trust boundaries, and advanced reverse engineering techniques using tools like IDA and Ghidra.

This skill processes verbose, stream-of-consciousness voice dictations (from tools like macOS Dictation or Wispr Flow) and transforms them into highly structured, token-efficient prompts. It removes filler words, repetitions, and tangents, organizing the core intent into standard sections (Context, Objective, Constraints) suitable for advanced LLMs like Claude Code.