Skill UI

A comprehensive skill for conducting authorized Bluetooth Low Energy (BLE) security assessments. It covers detecting various attacks, including sniffing, Man-in-the-Middle interception, replay attacks, and GATT enumeration abuse. The workflow guides users through packet capture using specialized sniffers (Ubertooth, nRF Sniffer), analyzing services and characteristics via Python/bleak, and performing cryptographic analysis using tools like crackle.

Assesses AI/ML systems for prompt injection, jailbreak, model inversion, data poisoning, and agent tool abuse using MITRE ATLAS mapping, signature detection, and scoring metrics before deployment.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

A comprehensive security auditing framework designed to systematically detect sensitive information disclosure from Large Language Models (LLMs). It uses multi-phase, escalating dialogue probes to test for leaks such as system prompts, API keys, PII, and internal configurations. Essential for red teaming and rigorous model security assessment.

This skill provides the OWASP Top 10 for Agentic Applications 2026 (ASI) framework for classifying security risks in AI agent systems. It maps detection findings to standardized risk categories like goal hijacking, tool misuse, and identity abuse, enabling consistent security assessment and remediation prioritization for agentic workflows.

Offensive cloud security methodology for AWS, Azure, and GCP. Covers identity discovery, credential harvesting, enumeration, privilege escalation, persistence, data exfiltration, lateral movement, serverless abuse, Kubernetes paths, and detection evasion during authorized assessments.

Guides assessment of KRACK and FragAttacks against WPA2 clients, including official test scripts, likely vulnerable embedded and legacy devices, practical impact, detection, and reporting for modern penetration testing.

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

Exploits privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during an authorized container-security assessment. Use when executing an approved breakout test, demonstrating the real impact of a privileged or hostPath workload, or validating that escape mitigations actually hold. Keywords: container breakout, privileged, hostPath, docker.sock, runC CVE-2019-5736, CVE-2024-21626, release_agent, nsenter. Do not use for defensive detection of these techniques - use detecting-container-escape-attempts.

A comprehensive suite for running advanced sensing applications using RuView hardware. It supports multi-modal data fusion from CSI, Wi-Fi, and mmWave sensors to perform critical tasks such as occupancy detection, vital sign monitoring (heart rate, breathing), pose estimation, environment mapping, and mass casualty assessment. Ideal for prototyping sophisticated IoT and smart building solutions.

This comprehensive guide helps authors determine the suitability and necessary framing for research related to environmental contamination. It mandates moving beyond simple pollutant detection, requiring rigorous evidence to connect contaminants to their fate, transport, and demonstrable ecological or human health impact. Essential for method validation, QA/QC, and scientific rigor.

This guide outlines a structured methodology for authorized wireless security assessments. It covers essential techniques such as Wi-Fi data capture, WPA/WPA2 handshake analysis, and rogue Access Point detection. It is designed for assessing corporate network security, verifying wireless isolation, and providing professional penetration testing recommendations, strictly adhering to legal scope and authorization.