Skill UI

This specialized skill is designed for advanced security analysis, tracing the complete trust chain from cloud metadata services to accepted privilege. It is used in penetration testing or CTF environments to meticulously prove how metadata-derived credentials (such as instance identities or tokens) are issued and subsequently accepted by a cloud or control plane API, thereby exposing the decisive trust edge.

A specialized skill for advanced security analysis, particularly in CTF scenarios. This tool guides users through analyzing live iOS runtime behavior, including Objective-C/Swift method tracing, inspecting Keychain data, bypassing SSL pinning, and recovering accepted network requests. It is designed to be used after a primary orchestration tool has established the sandbox environment, focusing on the details of trust boundaries.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.

This skill deploys the OpenMed Model Context Protocol (MCP) server, exposing critical clinical NLP tools such as NER, PII extraction, and de-identification. It enables AI coding agents and chat clients to interact with OpenMed's capabilities via simple tool calls, running locally on-device to ensure user data privacy and security. Supports both stdio and Streamable HTTP deployment modes.

This skill extracts crucial Social Determinants of Health (SDOH) — such as housing instability, food insecurity, and transportation barriers — from unstructured clinical notes. It maps the identified text spans to standardized ICD-10-CM Z-codes (Z55–Z65). It is essential for health-equity analytics, building risk stratification tools, and identifying coding gaps by converting narrative text into queryable, discrete data points.

A comprehensive framework for conducting authorized security assessments on Large Language Models (LLMs) and AI agents. It covers critical vulnerabilities including advanced prompt injection (OWASP Top 10), tool abuse, RAG data poisoning, memory manipulation, and system prompt extraction. Ideal for red teaming, security auditing, and ensuring the robustness of AI systems in production environments.

A comprehensive, multi-phase security scanner designed to audit development environments (Claude Code setup). It checks MCP servers, installed skills, agents, and hooks against known threat databases, malicious patterns, and supply chain vulnerabilities. Key checks include CVE screening, prompt injection detection, and unauthorized network access patterns.

This skill manages the complex, multi-step workflow for updating the company's threat intelligence database. It delegates the core research and content updates to the dedicated AgentSec system. The process involves reading AgentSec's source material, executing rigorous testing in an isolated workspace, synchronizing the validated security feed, and finally ensuring data integrity by validating the updates across the guide and landing mirrors.

This guide outlines a structured methodology for authorized wireless security assessments. It covers essential techniques such as Wi-Fi data capture, WPA/WPA2 handshake analysis, and rogue Access Point detection. It is designed for assessing corporate network security, verifying wireless isolation, and providing professional penetration testing recommendations, strictly adhering to legal scope and authorization.

A rigorous method for authorized adversarial security review. It models the attacker, maps the entire attack surface (APIs, auth flows, data handling), and generates reports containing only findings with a concrete, reproducible exploit path and verified mitigation steps. Essential for pre-launch hardening and critical system reviews.

Audits table permissions on Power Pages sites by analyzing them against site code and Dataverse metadata. Generates an HTML audit report with severity-grouped findings and suggested fixes. Use when reviewing or verifying table permissions for security issues.

Guidance on Banco Central do Brasil regulations: CMN Resolution 4.893/2021 cybersecurity policy, BCB Resolution 85/2021 IT risk management (GRSIC), Open Finance Brazil data sharing and consent, incident response (PARI), outsourcing requirements, and related penalties. Supports compliance review, policy drafting, and regulatory audits for financial institutions.