Skill UI

This advanced skill is designed for security research and CTF environments to trace subtle divergences in request handling across multiple network hops (proxies, gateways, backend servers). It focuses on identifying vulnerabilities stemming from differential interpretation of headers, path normalization, transfer framing (CL/TE), and host derivation, crucial for detecting request smuggling and parsing inconsistencies.

A comprehensive methodology for advanced red teaming and adversary emulation. This skill details how to bypass modern Endpoint Detection and Response (EDR) solutions (e.g., Defender, CrowdStrike, SentinelOne). Techniques include unhooking ntdll, utilizing indirect syscalls (Hell's Gate), patching ETW providers, and AMSI context blinding. Essential for authorized penetration testing and self-developed implant development, aligning with MITRE ATT&CK T1562.

This skill implements a critical CI gate to ensure the privacy and performance integrity of de-identification models. It automatically fails the build if the model's recall on held-out PHI data drops below the defined threshold, or if any critical Personally Identifiable Information (PHI) is leaked (leakage must be zero). It enforces strict privacy standards in continuous integration pipelines, blocking unsafe merges.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

Guides users to select a local, on-device Personally Identifiable Information (PII) detection model from a committed registry. It filters models based on language, required runtime environment (e.g., PyTorch, MLX), and size constraints. The process emphasizes building an offline shortlist and mandates rigorous pre-deployment recall validation and performance benchmarking to ensure secure, privacy-preserving deployment.

A comprehensive, multi-step framework for conducting systematic QA testing on web applications. This guide covers scope detection (diff-aware), tiered testing depth (Quick, Standard, Exhaustive), detailed issue taxonomy (Functional, Visual, UX, etc.), structured bug documentation, and the critical fix-and-verify loop, ensuring high code quality throughout the development cycle.

A comprehensive, multi-phase security scanner designed to audit development environments (Claude Code setup). It checks MCP servers, installed skills, agents, and hooks against known threat databases, malicious patterns, and supply chain vulnerabilities. Key checks include CVE screening, prompt injection detection, and unauthorized network access patterns.

Provides a comprehensive framework for blue-team threat hunting and detection engineering. Users learn hypothesis-driven hunting techniques, optimize SIEM queries, and build robust detection rules using industry standards like Sigma and YARA. Essential for minimizing false positives and validating security controls in a defensive posture.

This guide outlines a structured methodology for authorized wireless security assessments. It covers essential techniques such as Wi-Fi data capture, WPA/WPA2 handshake analysis, and rogue Access Point detection. It is designed for assessing corporate network security, verifying wireless isolation, and providing professional penetration testing recommendations, strictly adhering to legal scope and authorization.

This skill provides a CLI-based workflow for Android APK reverse engineering. It covers APK unpacking, Java decompilation, smali modification, repackaging, Frida dynamic hooking, and optional native .so analysis. It leverages local tools such as jadx, apktool, frida, adb, ida-reverse, and radare2. Useful for analyzing login, signature, security, root detection, or certificate verification logic in Android apps, always in an authorized context.

Analyzes code changes to identify concrete defects such as bugs, logic errors, and edge-case failures. A practical assistant for development teams verifying pull requests and code revisions.

Master Godot 4.7 physics bodies like RigidBody, StaticBody, Area, and CharacterBody for 2D and 3D projects. Learn to configure collision layers and masks, detect overlaps using Area signals, apply forces to rigid bodies, and cast rays for line-of-sight checks. Essential for game development involving physics interactions and collision detection in Godot projects.