Skill UI

A specialized skill for analyzing complex, host-to-host lateral movement chains within a Windows environment. It focuses on tracing protocols like WinRM, SMB, and RDP, replaying captured Kerberos tickets, understanding privilege edges, and identifying the exact accepting service or host that facilitates credential movement. Used in advanced penetration testing and digital forensics scenarios.

This tool performs a comprehensive analysis of AI configuration file evolution within a Git repository. It tracks when specific AI configs were first introduced, charts monthly commit velocity related to AI features, highlights key PRs that shaped the development, and synthesizes the project's AI maturity phases. Ideal for mapping AI adoption timelines and assessing technical maturity.

This skill generates complete, deploy-ready static landing pages by analyzing a source code repository. It reads key files (README.md, CHANGELOG.md, etc.), extracts structured content (features, installation guides, FAQ), and compiles it into a professional, responsive HTML/CSS/JS site. Ideal for standardizing open-source project showcases, converting technical documentation into marketing pages, or quickly building a project homepage.

This comprehensive guide details the methodology for reverse engineering macOS and Mach-O binaries. It covers analyzing application bundles, deciphering Objective-C/Swift symbols, examining code signing and hardened runtime features, and performing both static (using tools like Ghidra, IDA) and dynamic analysis (using lldb, Frida) to aid in malware analysis and platform security research.

Comprehensive workflow for analyzing suspected malware via static, dynamic, and behavioral techniques. Covers IOC extraction, YARA/Sigma rule generation, sandbox automation, and anti-analysis bypassing.

A powerful, dependency-free CLI tool designed for programmatically creating, reading, analyzing, and modifying Microsoft Office files (.docx, .xlsx, .pptx). It supports deep DOM editing (L2) and raw XML manipulation (L3), allowing users to extract structured data, validate schemas, and perform complex document automation tasks from a single binary.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.

A comprehensive, structured guide for reverse engineering and analyzing managed .NET/C# binaries. This skill covers the full workflow, including initial identification (CLR check), deobfuscation (using tools like de4dot), static analysis via IL view (dnSpyEx), and dynamic debugging. It is essential for analyzing malware, red team tools, and patching compiled C# applications.

A strategic framework used in product management to shift focus from features to the core progress users are trying to achieve. It helps teams understand why users 'hire' a solution, map the forces driving change, and prioritize product development based on the true job needing completion, rather than just existing feature lists. Ideal for analyzing low adoption or defining new product strategy.

A rigorous framework for tracing the full systemic consequence chain of strategic decisions. It guides users beyond the immediate, intended first-order effects to anticipate delayed impacts, incentive shifts, and complex problems that only emerge at scale or over time, ensuring decisions are robust against unforeseen systemic risks.