Skill UI

A comprehensive guide for statically analyzing suspicious Android APKs. This skill demonstrates how to use JADX, apktool, and androguard to decompile Java/Kotlin source code, examine manifest permissions, and identify malicious patterns. Use this to detect data exfiltration, C2 command and control communication, privilege escalation, and overlay attacks in mobile threats.

A comprehensive guide for performing security assessments to identify various forms of sensitive data exposure, such as leaked API keys, PII in API responses, insecure client-side storage, and unprotected data transmission. This workflow covers scanning JavaScript files, analyzing API responses, verifying data encryption, and examining browser storage.

This skill provides advanced techniques and code examples for monitoring, mapping, and pivoting across adversary-controlled infrastructure. It leverages Passive DNS, Certificate Transparency logs, Shodan/Censys scanning, and network fingerprinting (JARM/JA3S) to discover C2 servers, phishing domains, and exploitable assets over time, which is crucial for advanced security operations and threat intelligence gathering.

Demonstrates the SKILL.md layout and frontmatter options for creating a user-invoked slash command, outlining argument parsing, tool usage, and documentation so developers can replicate the structure.

Provides step-by-step guidance for activating and using the Example Skill, covering triggers, prerequisites, instructions, expected output, and error handling.

This tool detects malicious packages mimicking legitimate dependencies in npm and PyPI. It analyzes package names using Levenshtein distance, examines publish date heuristics, and identifies download count anomalies to secure the software supply chain. Ideal for auditing project dependencies and proactively monitoring for supply chain threats.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This skill analyzes a set of web pages to generate a prioritized roadmap for internal linking optimization. It identifies natural link opportunities, detects critical orphan pages, and warns against anchor text cannibalization risks. The output provides the exact anchor text, the optimal context sentence for placement, and classifies the link type (e.g., Cluster to Pillar), ensuring maximum authority flow and improved search engine visibility.

This skill simulates a Social Psychologist to diagnose specific trust barriers a target audience holds toward a brand, offer, or category. It prescribes the exact, strategic signals (e.g., credentials, transparency, proofs) needed to build credibility. Use it when communicating with skeptical audiences or when existing messaging fails to convert due to lack of trust. It calibrates trust across ability, benevolence, and integrity.

This guide addresses the critical difference between standard Node.js SHA3-256 and the Keccak-256 hash function required by Ethereum. Using the wrong hash function can silently corrupt calculated function selectors, event topics, storage slots, and derived addresses. It provides best practices and code examples for using dedicated libraries (like ethers, viem, web3.js) to ensure correct, Ethereum-compliant hashing in JavaScript and TypeScript environments.

Guides AI agents through analyzing working code, spotting overly complex structures, then refactoring for clarity while preserving exact behavior and project conventions, especially after reviews or high-pressure edits.

This skill provides comprehensive guidance on idiomatic Go patterns for building production-ready, robust applications. It covers best practices like functional options, proper constructor design, resource management (timeouts, graceful shutdown), error handling, concurrency patterns, and architectural styles (DDD, Hexagonal). Use it when structuring complex Go APIs, defining service boundaries, or auditing existing code for common anti-patterns and performance pitfalls.