Skill UI

This comprehensive skill provides a systematic framework for performing deep security assessments on iOS applications. It covers static analysis of IPA packages, dynamic instrumentation using Frida and Objection, SSL pinning bypass for traffic interception, extraction and auditing of sensitive data from the Keychain, and runtime method hooking. Use this for authorized penetration testing against standards like OWASP MASTG.

This advanced assistant profiles specified targets (scripts, processes, GPU, memory, etc.) to identify performance bottlenecks. It selects appropriate profiling strategies, runs external tools (e.g., cProfile, nvidia-smi), and can write code instrumentation to measure CPU, GPU, memory, and interconnect overheads. It generates a detailed, actionable report.

Guide to instrument Azure-hosted ASP.NET Core or Node.js web apps with telemetry reporting to Azure App Insights for improved observability and health tracking.

This skill guides the integration of Arize AX tracing into existing applications, especially complex LLM applications. It follows a structured, two-phase, agent-assisted flow: first analyzing the codebase (read-only) to understand dependencies, and then implementing instrumentation. It supports multi-language environments (Python, TypeScript, Java, Go) and integrates deeply with OpenTelemetry and various LLM providers, ensuring comprehensive observability without altering core business logic.

The Phoenix CLI is a powerful tool for debugging complex LLM and agent workflows. It allows users to fetch detailed traces, spans, and sessions, analyze errors, and structure findings using open and axial coding techniques. It is essential for investigating complex LLM failures, building robust failure taxonomies, and guiding the next steps in application evaluation after initial instrumentation.

Guides hooking Phoenix AI services with OpenInference tracing, covering setup, spans, instrumentation, and production deployment for LLM workflows using Python or TypeScript.

This skill provides a comprehensive guide to instrumenting Algolia search services for enterprise-grade observability. It integrates core monitoring patterns, including Prometheus metrics (latency, error rates, request counts), OpenTelemetry distributed tracing, and structured logging. Use this to achieve deep insights into search performance, user experience, and system health in production environments.

A systematic, multi-phase guide for tackling hard bugs and performance regressions. It mandates building a robust feedback loop (e.g., failing tests, harnesses), formulating falsifiable hypotheses, targeted instrumentation, and rigorous regression testing. This methodology ensures that debugging efforts are structured, efficient, and highly reproducible, making it ideal for complex software defects.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

This guide details the principles of observability, teaching developers how to instrument code by implementing structured logging, metrics, and distributed tracing. It ensures that production features emit sufficient telemetry to answer complex operational questions, transforming unknown failures into diagnosable events. Essential for any service running in production.

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.