Skill UI

This comprehensive profiler provides systematic performance analysis for modern applications built with Node.js, Python, and Go. It detects critical bottlenecks across CPU, memory, and I/O dimensions. Key features include generating flamegraphs, analyzing bundle sizes, optimizing database queries (N+1 detection), and running rigorous load tests using k6 and Artillery. It mandates before-and-after measurements to ensure verifiable performance improvements.

Scans cryptographic implementations to flag operations whose timing decisions leak secrets, offering language-specific guides, architecture/optimization options, and output modes so teams can enforce constant-time practices across reviews and CI.

Rigorously dissects code and architecture through advanced mathematics—graph theory, category theory, stochastic systems, information theory, and formal invariants—to uncover hidden structure and optimize performance.

Query the PrimeKG precision medicine knowledge graph to explore genes, drugs, diseases, phenotypes, and their relationships, supporting drug discovery, repurposing, and phenotype analysis through programmatic scripts.

A comprehensive guide and analysis framework for detecting compromised Office 365 or Google Workspace email accounts. It focuses on analyzing unified audit logs and Azure AD sign-in logs to identify indicators of account takeover (ATO) or Business Email Compromise (BEC). Detection methods include monitoring impossible travel events, identifying malicious inbox rules (e.g., external forwarding or deletion rules), and analyzing suspicious Microsoft Graph API access patterns.

This platform deploys continuous attack graph analysis to map how adversaries can chain together various exposures—including vulnerabilities, misconfigurations, identity risks, and credential weaknesses—toward critical business assets. It pinpoints 'choke points,' allowing security teams to prioritize remediation efforts for maximum risk reduction with minimal effort, ideal for CTEM programs.

This guide details the process of performing Active Directory reconnaissance using BloodHound and SharpHound. It leverages graph theory to visualize hidden trust relationships, group memberships, and ACLs, mapping the shortest attack paths from a low-privilege compromised user all the way to Domain Admin rights. This is essential for red-teaming, security auditing, and identifying critical misconfigurations.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

A comprehensive toolset for digital forensics, designed to detect, extract, and analyze covert data hidden within images, audio, and video files. It utilizes advanced steganalysis techniques (LSB, DCT, frequency domain analysis) and specialized tools (StegDetect, zsteg, binwalk) to uncover hidden communications channels, making it crucial for investigations involving data exfiltration or insider threats.

This comprehensive guide details a step-by-step workflow for reverse engineering malware binaries using Ghidra. It guides users through static and dynamic analysis techniques to study internal logic, C2 communication protocols, cryptographic routines, and obfuscation methods at the assembly and pseudo-C code level. Use this when deep code review is required to extract configuration data, understand exploit mechanisms, or develop detection signatures.

A comprehensive deep dive into reverse engineering ransomware encryption mechanisms. It details the analysis of hybrid encryption models (AES/RSA), identifying specific cryptographic APIs (CryptoAPI, CNG), and locating implementation flaws such as weak key generation or IV reuse. This guides authorized security professionals in finding potential decryption opportunities without paying a ransom.

This powerful tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates identified components against the NVD CVE database via API, building dependency graphs and calculating risk scores. It is essential for assessing third-party risk, identifying transitive vulnerability paths, and generating comprehensive compliance reports for supply chain security.