Skill UI

A specialized, downstream skill designed for forensic analysis within a confined sandbox environment, particularly for CTF challenges. It guides the user to inspect the full stack behavior, including API interactions, server routing, browser state (cookies, local storage), and asynchronous worker processes. Use this skill to trace complex, end-to-end request flows, debug authentication/session leaks, or diagnose discrepancies between frontend UI and backend enforcement.

This local developer tool inspects dependency manifests (requirements.txt, pyproject.toml, package.json) for surface-level issues like standard-library shadowing, unpinned dependencies, and conflicts. It provides plain-language explanations and suggested fixes, helping developers debug dependency rot before deeper installation attempts.

This tool systematically audits and scores defined AI agents to ensure they are correctly scoped, highly specific, and safe for programmatic orchestration. It checks for description ambiguity, over-permissive tool grants, and anti-patterns that break headless workflows. Use it when onboarding new agents, integrating agent fleets, or debugging inconsistent multi-agent selection.

This tool audits and validates all Claude Code hooks defined across your settings files. It checks for validity, performance safety, correct event scoping, and proper exit-code handling (blocking vs. non-blocking). Essential for initial setup, debugging hooks that fail to fire, or performing routine system hygiene passes to ensure your agent's tool flow is robust and reliable.

An advanced tool designed to audit, validate, and maintain rule files (e.g., .claude/rules/). It checks structural correctness, validates glob patterns against actual project files, and runs an interactive session to confirm or improve the relevance of each rule. Ideal for initial setup, debugging, or periodic rule hygiene.

This guide outlines the methodology for conducting hardware security research on embedded systems. It covers physical interface analysis (UART, JTAG, SWD), debug pad triage, secure boot evaluation, and offline firmware extraction. It emphasizes systematic, non-destructive testing protocols and responsible handling of physical devices.

A comprehensive, multi-phase methodology for debugging complex software issues. This guide mandates systematic root cause investigation, starting from symptom collection, code path tracing, hypothesis formulation, and deterministic reproduction. It teaches developers to fix the underlying cause, not just the visible symptoms, ensuring highly robust and minimal changes.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

A comprehensive, multi-step framework for conducting systematic QA testing on web applications. This guide covers scope detection (diff-aware), tiered testing depth (Quick, Standard, Exhaustive), detailed issue taxonomy (Functional, Visual, UX, etc.), structured bug documentation, and the critical fix-and-verify loop, ensuring high code quality throughout the development cycle.

Provides comprehensive techniques for reverse engineering complex software targets. Use this when the primary goal is to understand the internal workings of compiled, obfuscated, packed, or virtualized binaries (including APKs, WASM, and firmware). It covers static and dynamic analysis, anti-debugging bypass, and deobfuscation methods, helping users understand the target code's internal mechanisms for security research and vulnerability analysis.

A comprehensive, structured guide for reverse engineering and analyzing managed .NET/C# binaries. This skill covers the full workflow, including initial identification (CLR check), deobfuscation (using tools like de4dot), static analysis via IL view (dnSpyEx), and dynamic debugging. It is essential for analyzing malware, red team tools, and patching compiled C# applications.