Skill UI

This skill provides a comprehensive checklist for auditing de-identified Protected Health Information (PHI) against the 18 categories required by HIPAA Safe Harbor (45 CFR 164.514(b)(2)). It maps detected PII entities to these categories, identifies gaps (e.g., age > 89, rare geography), and guides the assessment of residual re-identification risk. This is essential for proving the completeness and compliance of de-identification efforts.

This skill provides an end-to-end workflow for creating a complete, local multimedia webpage project. Users only need to define the topic, target audience, visual style, and media preferences. The system automates the entire process, including requirement framing, content research, media acquisition (images, audio, video), code generation, project packaging, validation, and delivering comprehensive usage guides.

This guide provides a comprehensive methodology for the reverse engineering of browser extensions (Chrome/Firefox). It covers analyzing the manifest, tracing background workers, content scripts, and recovering sensitive logic like credentials or network traffic. Essential for security research, malware investigation, and supply chain security auditing.

This skill scaffolds a gold-standard annotation project tailored for evaluating clinical NER and de-identification models (OpenMed). It guides users through defining label schemas, writing rigorous guidelines, configuring annotation tools (like BRAT/Label Studio), generating synthetic clinical text, and creating disciplined, non-leaking train/dev/test splits. It ensures that all committed data are synthetic fixtures for reproducible evaluation.

This skill acts as a comprehensive map for developing clinical and biomedical NLP pipelines using OpenMed. OpenMed is a local-first Python library that performs named-entity recognition (NER), protected health information (PHI) de-identification, and FHIR export, all running fully on-device without cloud calls. Use this guide when starting a new clinical text project, needing to select the appropriate capability (e.g., zero-shot NER, auditing, or FHIR conversion), or requiring an entry point for the core OpenMed features.

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.

This utility guides users in creating standardized and descriptive commit messages for staged changes using the Conventional Commits specification. It enforces structure, defining types (feat, fix, chore, etc.), scopes, and detailed body/footer requirements, ensuring a clear and maintainable project history.

This specialized skill guides users through analyzing complex Active Directory Certificate Services (AD CS) abuse scenarios. It is essential for proving how a weakness in a template, CA policy, or issuance right can lead to unauthorized privilege acceptance (e.g., via PKINIT, Schannel). The workflow focuses on mapping the entire certificate issuance chain to the resulting accepted service path.

A specialized downstream skill for complex CTF challenges, focusing on cryptographic analysis, steganography, and mobile system forensics. It guides the user through recovering complex data chains, such as decoding blobs, tracing cryptographic transforms (keys, IVs, nonces), inspecting hidden media payloads, and analyzing mobile trust boundaries (e.g., APK/IPA signing logic, local storage, SSL pinning). This skill is designed to be used only after a main sandbox orchestrator has established the operational context.

This specialized skill is designed for advanced reverse engineering of firmware images in CTF environments. It guides users to map partition tables, trace complex boot chains (bootloader, kernel, init), analyze update packages, and recover embedded secrets or credentials. Use it when understanding the device's core architecture and execution path is necessary to find the decisive artifact.

A specialized skill for advanced security analysis, particularly in CTF scenarios. This tool guides users through analyzing live iOS runtime behavior, including Objective-C/Swift method tracing, inspecting Keychain data, bypassing SSL pinning, and recovering accepted network requests. It is designed to be used after a primary orchestration tool has established the sandbox environment, focusing on the details of trust boundaries.

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.