Skill UI

A comprehensive set of reusable patterns for structured incident triage in AWS environments. Includes pre-built Logs Insights queries for detecting errors, latency spikes, cold starts, and OOM events. Also provides systematic correlation methods linking CloudWatch alarms to deployment events, and a decision tree to narrow the blast radius scope from account to resource.

This skill helps authors assess the suitability of their translational or mechanistic manuscript for the Journal of Clinical Investigation (JCI). It provides detailed guidance on meeting JCI's high standards, emphasizing primary evidence from human clinical samples, clear mechanistic insight into disease, and appropriate framing. Use this tool when targeting JCI or when needing to select the most appropriate high-impact scientific venue.

This guide provides a comprehensive methodology for the reverse engineering of browser extensions (Chrome/Firefox). It covers analyzing the manifest, tracing background workers, content scripts, and recovering sensitive logic like credentials or network traffic. Essential for security research, malware investigation, and supply chain security auditing.

This advanced skill specializes in analyzing complex mail-related abuse scenarios, including OAuth consent flows, forwarding rule exploitation, shared mailbox access, and transport rule manipulation. It is used in forensic investigations to trace message artifacts, identify persistence mechanisms, and prove privilege escalation or data exfiltration following a compromise.

This is the master workflow and default entrypoint for complex CTF, exploit, and digital forensics challenges. It establishes a 'sandbox model,' treating presented targets as internal and guiding the user through a systematic investigation process. The orchestrator maps the entry surface, proves minimal attack paths, and intelligently routes the investigation to the most relevant specialized domain (e.g., pwn, crypto, cloud, AD) while maintaining a cohesive analysis flow.

Orchestrates a robust, multi-stage cyber defense pipeline using specialized AI agents to analyze raw log files (e.g., nginx, auth, syslog). The system ingests logs, detects anomalies, classifies overall risk, and generates a comprehensive, actionable incident report, making it ideal for security investigations and breach analysis.

A comprehensive guide for authorized digital forensics investigation. It covers critical areas including memory dump analysis (using Volatility), disk timeline reconstruction, PCAP network traffic analysis, and system artifact triage (like Event Logs and Prefetch). Essential for incident response, evidence preservation, and threat hunting to maintain a robust chain of custody.

A comprehensive, multi-phase methodology for debugging complex software issues. This guide mandates systematic root cause investigation, starting from symptom collection, code path tracing, hypothesis formulation, and deterministic reproduction. It teaches developers to fix the underlying cause, not just the visible symptoms, ensuring highly robust and minimal changes.

This skill audits a complete security or forensics case package to ensure its readiness for formal report handoff. It verifies scope metadata, evidence record integrity, traceability between Findings, Paths, and Evidence, and checks artifact hash consistency. It is a non-destructive, read-only review process designed to validate the defensibility and completeness of the investigation before documentation.

This adapter acts as a specialized entry point for authorized security analysis, reverse engineering, and CTF tasks using the 'reverse-skill' repository. It guides users through a systematic, multi-step workflow, ensuring that all actions—from setting initial scope to resolving tools—are executed within the defined security contract of the repository. Ideal for defensive testing and deep technical investigations.

Configure AWS CloudTrail to enable organization-wide audit logging for compliance and security investigation. This skill covers setting up S3 buckets for log storage, applying security policies, enabling encryption, and creating trails for multi-region activity. It includes configuring event selectors for management and data events, and setting up CloudWatch alarms for unauthorized API calls to meet standards like SOC 2 or HIPAA.

This skill enables authorized reverse engineering of Chrome and Firefox browser extensions. It involves analyzing manifest files, background workers, and content scripts to investigate credential handling, data exposure, and malicious behavior. Suitable for security audits, supply chain poisoning investigations, and understanding extension logic through static and dynamic analysis using tools like DevTools and Frida.