Skill UI

A comprehensive tool suite designed to analyze firmware images from embedded devices, including routers, IoT endpoints, and critical system components like UEFI/BIOS. It facilitates deep security analysis by performing firmware extraction, filesystem integrity checks, binary reverse engineering, and sophisticated detection of bootkits, backdoors, and unauthorized modifications.

This tool provides comprehensive security assessments for the entire IoT ecosystem, including physical hardware, embedded firmware, network communications, and cloud APIs. Testers can perform deep dives using hardware debugging (UART/JTAG), firmware extraction and reverse engineering, analyzing protocols (MQTT, CoAP, BLE), and simulating cloud-to-device attacks to identify vulnerabilities across all layers of the smart device stack.

This guide details how to perform pre-execution static analysis of Windows PE malware samples using tools like PEStudio, Python's pefile, and FLOSS. It focuses on examining file headers, section entropy, import address tables (IAT), and embedded strings to identify malicious functionalities, packing techniques, and indicators of compromise (IOCs) without running the binary. Ideal for initial triage of suspicious executables.

A comprehensive guide detailing the workflow for firmware reverse engineering. It uses tools like binwalk to identify embedded filesystems (e.g., SquashFS, CramFS), perform entropy analysis to locate hidden data, and extract components. The process covers deep inspection, credential discovery, and reporting for IoT and embedded security assessments.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.

This skill provides comprehensive functionality for reading, creating, editing, and downloading content from Lark Feishu Docs (Docx/Wiki). Whether accessing via URL or token, it supports structured content manipulation using both XML and Markdown formats (v2 API). Use it for fetching document details, updating specific blocks, and managing embedded media and resources like whiteboards and images. Note that it requires prerequisite knowledge for advanced operations.

A powerful tool for managing whiteboard content embedded in Lark cloud documents. It allows users to query the board, exporting content as a preview image, retrieving raw node structures, or updating the board using various formats (Mermaid, PlantUML). Ideal for generating, viewing, or modifying complex diagrams like architecture diagrams and flowcharts.

A comprehensive guide for configuring and troubleshooting Jenkins when embedded within KubeSphere DevOps. Learn how to manage Jenkins via Configuration as Code (CasC), integrate advanced authentication methods like LDAP and OIDC, customize agent images, and connect to external sources such as GitLab. Covers everything from initial access to backup and recovery.

A comprehensive skill for creating technical and scientific documentation using Markdown as the source format, enhanced by embedded Mermaid diagrams. This method establishes text-based diagrams as the canonical standard, ensuring that all visualizations are clean, editable, and highly readable in version control systems like Git. It is ideal for generating reports, architectural diagrams, workflows, and any content that requires cross-platform rendering and version history.

Detects goal hijacking vulnerabilities where malicious instructions are hidden within external content sources processed by the agent, such as retrieved documents (RAG), uploaded files, or web page content. This skill simulates these attack vectors to ensure the agent only uses the provided context for the stated task and does not execute embedded hidden commands.

This comprehensive skill is designed to retrieve content from various Feishu cloud documents, returning the raw Markdown format. It provides advanced logic for handling Wiki URLs by first determining the actual document type (Docx, Sheet, Bitable) before calling the appropriate specialized tool. Furthermore, it guides the user on how to separately download and process embedded media like images, files, and whiteboards using dedicated media tools.

A comprehensive guide for accessing and managing Feishu IM messages. This skill allows users to retrieve historical chat records from both group and private conversations, read detailed thread replies, and conduct cross-conversation searches using keywords or time filters. It also supports downloading all types of embedded media, including images, files, audio, and videos, ensuring complete information recall.