Skill UI

This skill provides a structured approach to monitoring and analyzing data leak sites (DLS) maintained by ransomware groups. By extracting structured data on victim postings, threat group tactics, and sector-specific details, users can assess current ransomware risk, track attack trends, and proactively build robust defense strategies.

This skill details how to monitor Certificate Transparency (CT) logs using industry tools like crt.sh and Certstream. By analyzing publicly issued SSL/TLS certificates, users can proactively detect lookalike domains, unauthorized certificate issuance for owned assets, and early-stage phishing infrastructure targeting their organization. Ideal for SOC analysts and threat hunters.

This guide provides a deep dive into the cryptographic techniques used by ransomware, including AES, RSA, ChaCha20, and hybrid schemes. It covers identifying algorithms, analyzing key management patterns (strong, weak, flawed), and reverse engineering file encryption routines to assess decryption feasibility and support recovery efforts.

A comprehensive guide detailing the systematic workflow for analyzing malicious Linux ELF binaries. It covers essential techniques including static analysis (using readelf, elftools), dynamic tracing (strace, ltrace), and deep reverse engineering (GDB) of various threats like botnets, cryptominers, and ransomware targeting Linux environments, containers, and cloud infrastructure.

This skill reconstructs the detailed workflow behind a specific coding artifact (like a feature or PR). By analyzing local `ax` agent traces, it connects commits, sessions, skills, and tool calls into a concise, evidence-grounded narrative. It is used when needing to understand the step-by-step process and key decisions that led to a result.

An AI assistant for generating and analyzing Chinese Bazi (Four Pillars) and Ziwei Dou Shu charts using precise algorithms, supporting individual analysis, cross-validation, and structured report generation.

This skill provides methods and frameworks to detect sophisticated AI attacks, including model stealing, membership inference, and model inversion. It focuses on monitoring query patterns, analyzing confidence exposure, and implementing defensive controls on inference APIs to protect intellectual property and data privacy.

This skill guides the end-to-end process of supply chain security by generating standards-compliant Software Bills of Materials (SBOMs) in CycloneDX and SPDX formats. It details using Syft to create inventories, correlating them with vulnerability intelligence via Grype, enforcing CI/CD gates based on severity, and establishing verifiable provenance using Cosign signing. Essential for modern DevSecOps practices.

A comprehensive framework for systematically analyzing and monitoring competitors in the developer tools space. Users can track product features, pricing models, content strategies, developer sentiment, and market positioning. This skill is essential for product managers, marketing teams, and sales teams needing accurate competitive intelligence to build battlecards and identify market gaps.

This skill provides a structured, multi-step workflow for resolving conflicts encountered during in-progress Git merges or rebases. It guides users through analyzing conflict origins, preserving original development intents, resolving conflicting code hunks without introducing new behavior, and executing comprehensive automated checks (typechecking, testing, formatting) to ensure the resulting codebase is stable and functional.

This skill provides comprehensive code review capabilities for analyzing git diffs or specific file scopes. It goes beyond simple syntax checks, assessing code for reuse opportunities, quality issues (e.g., redundant state, leaky abstractions), efficiency bottlenecks, and adherence to standards. It utilizes multiple specialized sub-agents (Reuse, Quality, Efficiency, Clarity) to perform parallel, read-only audits. Optionally, it can apply high-confidence, behavior-preserving fixes upon user request.

Generates championship-grade, F1-inspired test suites based on the WJTTC methodology. This skill enforces a 'tests first' philosophy, analyzing the codebase to define structured test plans. It covers standard industry unit tests (Layer 1) and deep expert edge cases (Layer 2). Furthermore, it includes Signal Integrity Audits to ensure the test suite's reliability is paramount, guiding development toward maximum code quality.