Skill UI

A comprehensive strategy guide for authors preparing manuscripts for the ACM Symposium on Theory of Computing (STOC). It helps researchers determine the ideal fit, required evidence bar, and narrative framing for major theoretical contributions in algorithms, complexity, cryptography, and theoretical computer science.

This guide helps authors assess whether their computer security manuscript is suitable for the European Symposium on Research in Computer Security (ESORICS). It covers conference positioning, necessary evidence standards (e.g., threat models, empirical validation), and scope definition across privacy, systems, and cryptography, ensuring the paper meets the high academic bar of the venue.

This comprehensive guide helps authors determine if their manuscript is suitable for the Financial Cryptography and Data Security (FC) conference. It covers the specific scope fit, required evidence standards (including threat models and economic context), and best practices for re-framing general CS research into a finance/security-focused narrative, ensuring the paper meets the expectations of the specialized review community.

This guide provides an in-depth framework for assessing the foundational significance of theoretical computer science results. It details the rigorous criteria used by top-tier conferences like FOCS (Foundations of Computer Science) to judge a paper's impact, focusing on its consequence, how it overcomes known obstacles, and its durability beyond best constants. It also maps various research types (e.g., cryptographic, algorithmic, learning theory) to the most suitable venue (e.g., FOCS, STOC, SODA, CCC).

This guide provides a specialized framework for authors targeting the IACR Conference on Cryptographic Hardware and Embedded Systems (CHES). It details the specific scope, evidence bar, and framing techniques required for cryptographic hardware papers, ensuring submissions meet the high standards of the community. It helps reposition work from journal or general CS styles.

This comprehensive guide helps authors strategically position their theoretical computer science manuscript for the IEEE Symposium on Foundations of Computer Science (FOCS). It analyzes the paper's core contribution type, required technical depth (algorithms, complexity, cryptography), necessary evidence, and structural framing to meet the high academic standards of the venue. Ideal for venue selection and manuscript refinement.

A comprehensive white-box security auditing workflow designed for proprietary source code. It integrates static analysis security testing (SAST) tools like Semgrep and CodeQL to detect common vulnerabilities (e.g., injection, IDOR, crypto misuse), followed by mandatory manual threat modeling and verification steps. Applicable for PR reviews and pre-deployment security checks.

A specialized downstream skill for complex CTF challenges, focusing on cryptographic analysis, steganography, and mobile system forensics. It guides the user through recovering complex data chains, such as decoding blobs, tracing cryptographic transforms (keys, IVs, nonces), inspecting hidden media payloads, and analyzing mobile trust boundaries (e.g., APK/IPA signing logic, local storage, SSL pinning). This skill is designed to be used only after a main sandbox orchestrator has established the operational context.

A highly specialized, downstream skill for advanced threat analysis. This tool is used to recover hidden configurations, decode C2 (Command and Control) parameters, unpack staged payloads, and extract Indicators of Compromise (IOCs) from complex malware samples. It focuses on identifying the exact decode chains—including compression, encoding, and crypto steps—and linking recovered fields to observed behavioral outcomes within a sandbox environment.

This is the master workflow and default entrypoint for complex CTF, exploit, and digital forensics challenges. It establishes a 'sandbox model,' treating presented targets as internal and guiding the user through a systematic investigation process. The orchestrator maps the entry surface, proves minimal attack paths, and intelligently routes the investigation to the most relevant specialized domain (e.g., pwn, crypto, cloud, AD) while maintaining a cohesive analysis flow.

A specialized downstream skill designed for solving encrypted ZIP/PKZIP challenges, particularly those using the legacy ZipCrypto method in CTF competitions. This workflow utilizes known-plaintext attacks (via tools like bkcrack) to recover internal encryption keys, enabling decryption and extraction without resorting to brute-force password guessing. Use this when a predictable plaintext fixture is available.

Generates cryptographically-stamped, bar-compliant time entries and printable HTML audit packets from Claude Code session logs. Deterministic narratives, attorney signoff workflow, multi-jurisdiction disclosure support, strict audit invariants. Never auto-bills.