Skill UI

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.

A specialized skill for analyzing and reproducing complex, timing-dependent bugs in concurrent systems. Use this to investigate race windows, ordering bugs, lock gaps, stale reads, or state inconsistencies where the final outcome depends critically on request timing or asynchronous execution order. Essential for deep security auditing and debugging of distributed transactions.

A comprehensive skill for AI agents to perform advanced filesystem operations. It provides features for intelligent file listing with deep filtering, powerful content and pattern searching, safe batch file copying, and detailed directory analysis (statistics, tree visualization). Ideal for code analysis, system auditing, and managing project assets.

A comprehensive framework for conducting authorized security assessments on Large Language Models (LLMs) and AI agents. It covers critical vulnerabilities including advanced prompt injection (OWASP Top 10), tool abuse, RAG data poisoning, memory manipulation, and system prompt extraction. Ideal for red teaming, security auditing, and ensuring the robustness of AI systems in production environments.

A comprehensive guide for auditing and polishing original long-form manuscripts intended for submission to high-level Pattern Recognition and AI journals. It details mandatory components, formatting standards, anti-plagiarism checks, and ethical guidelines, ensuring the paper meets rigorous peer-review standards for publication.

This skill facilitates reversible de-identification (pseudonymization) of clinical text, allowing sensitive Protected Health Information (PHI) to be masked for processing while retaining the ability to restore the original data later under strict authorization. It captures a mapping key and provides a function to re-identify the text, crucial for workflows like GDPR compliance, patient recontact, or auditing. Crucially, the re-identification mapping must be stored separately and securely.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.

This framework provides a rigorous pre-execution review mechanism for proposed actions by AI agents or systems. It functions as a critical safety boundary, auditing the entire decision path—from initial request to proposed tool execution—without authorizing or executing anything. It verifies action conformity, evidence integrity, temporal validity, and reviewer independence to ensure system compliance and security.

Adversarial stress-test for legal texts (contract, statute, regulation, or judicial opinion) that finds ambiguous seams and turns each into a concrete dispute scenario with both sides' arguments, likely outcome, and a fix. Ideal for pressure-testing, red-teaming, auditing, or identifying loopholes and drafting problems in legal documents.

Legal review skill for auditing contracts and privacy documents against India's DPDPA 2023 and EU GDPR. It performs clause-by-clause compliance checks, flags at-risk or non-compliant sections with reasoning, and provides ready-to-use redline drafting suggestions. Useful for privacy policies, data processing agreements, and vendor/SaaS contracts.

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

An expert assistant dedicated to ensuring compliance with GDPR and global data protection regulations. This skill covers auditing code and systems for violations, drafting compliant legal documents (like privacy policies and DPAs), answering complex compliance questions with authoritative GDPR article citations, and reviewing data flows for PII handling practices. It addresses both EU and UK GDPR requirements.