Skill UI

A hands-on methodology for testing IoT and embedded devices, covering hardware reconnaissance, firmware extraction and analysis, bootloader access, runtime exploitation, wireless protocol attacks, companion app review, and cloud API abuse.

This tool generates comprehensive API documentation directly from source code. It supports various API types, including REST, GraphQL, and RPC, and extracts crucial details like endpoints, parameters, data models, and authentication methods. It outputs standard formats such as Markdown, OpenAPI 3.0 YAML, and API Blueprint, streamlining the process of creating accurate and complete interface specifications for development teams.

A lightweight utility designed for fetching content from a single URL via HTTP or HTTPS. It supports various methods (GET, POST, PUT, DELETE) and allows configuration of timeouts and maximum response body sizes. This tool is ideal for quick, simple data extraction steps within a workflow DAG, offering significant performance gains over complex LLM agent loops. Note that complex tasks like JS rendering or multi-page crawling require dedicated sub-agents.

This skill provides advanced detection methods for credential dumping, covering LSASS memory access, SAM hive extraction, and NTDS.dit theft (e.g., using Mimikatz). It utilizes Sysmon Event ID 10 and Windows Security logs to enable threat hunting, assisting SOC analysts in triaging EDR alerts and building robust SIEM correlation rules.

This skill provides methods to safely monitor and analyze data leak sites (DLS) used by ransomware groups. It extracts structured victim data, tracks group activity trends over time, and generates sector- and geography-specific ransomware risk assessments, crucial for proactive threat intelligence gathering and incident response.

This skill provides comprehensive methods and frameworks to detect sophisticated AI attacks, including model extraction, membership inference, and model inversion, which abuse inference APIs. It focuses on monitoring per-principal query volume, input distribution, and confidence exposure. Use it for securing public or partner inference APIs, or for conducting pre-deployment red-teaming to assess the model's extractability and overall security posture against MITRE ATLAS techniques.

Detailed methods for red-teaming and penetration testing of LLM applications. This skill extracts sensitive system prompts, secrets, and embedded logic using advanced techniques like jailbreaking, encoding tricks, and automated scanners (Garak, Promptfoo), ensuring compliance with OWASP LLM07:2025.

This skill automatically generates fully structured, import-ready Postman Collection v2.1 JSON files. It can interpret both natural language descriptions of REST APIs (endpoints, methods, parameters) and raw cURL commands. Use it whenever you need to quickly set up a comprehensive API testing suite in Postman without manual JSON construction, ensuring all variables and environments are properly extracted.

This skill provides a rigorous, structured method for inspecting animated 3D characters, rigs, and motion retargeting in Blender. It moves beyond visual evidence (screenshots) by extracting and comparing structured data points such as bone transformations, bounding box changes, ground contacts, and axis conventions. Ideal for diagnosing subtle animation flaws like foot sliding, ground penetration, or incorrect orientation that are invisible in still images.

This skill analyzes completed code sessions to automatically extract reusable patterns, transforming raw interaction data into structured, learned skills. It allows the AI to continuously improve its domain knowledge by capturing techniques like error resolution, debugging methods, and workarounds, making it effective for advanced coding assistance and knowledge curation.

This skill automatically converts structured data from Excel (.xlsx) workbooks into a clean, readable Markdown format. It is essential for enabling accurate analysis, summarization, and data extraction of spreadsheet contents, especially when the user asks to 'read', 'analyze', or 'compare' data without specifying a conversion method. It supports both single files and batch processing of entire folders.

A guide for designing rigorous numerical experiments and simulations for academic manuscripts in management science. This methodology focuses on validating proven theoretical properties, assessing algorithm performance, exploring parameter sensitivity, and extracting actionable managerial insights. It emphasizes that simulations must complement, but never replace, formal mathematical proofs.