Skill UI

A comprehensive guide to conducting security assessments on thick client (desktop) applications. This skill details techniques ranging from static analysis (using tools like dnSpy, IDA Pro) to dynamic analysis (process monitoring with Procmon, network interception via Burp Suite). It covers finding hardcoded credentials, identifying insecure local storage, mitigating DLL hijacking, and analyzing memory manipulation within local applications.

A comprehensive guide and workflow demonstrating how to use YARA rules for proactive threat hunting. This method helps detect unknown malware, suspicious patterns, and Indicators of Compromise (IOCs) across filesystems, memory dumps, and network artifacts, making it essential for incident response and security analysis.

An advanced debugging skill designed for AI agents. It utilizes gdb-cli to provide intelligent assistance for C/C++ programs, enabling the analysis of core dumps, debugging live processes, and investigating complex issues like crashes, deadlocks, and memory corruption. It correlates runtime state inspection with source code context for deeper insights.

This skill provides comprehensive interaction with the DeerFlow AI agent platform via its robust HTTP API. It is designed for managing complex, multi-step AI workflows, including deep academic research, code execution, web browsing, and file analysis. Users can initiate and continue conversation threads, manage agent memory, upload documents (PDF, etc.), and delegate complex research tasks to the autonomous agent system.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

A comprehensive playbook for advanced mobile security assessments of iOS applications. Covers both jailbroken and non-jailbroken environments, focusing on critical attack vectors such as keychain extraction, URL scheme hijacking, Universal Links exploitation via AASA misconfigurations, runtime memory manipulation (Frida/Objection), and binary protection analysis.

A comprehensive guide for advanced memory forensics using Volatility 2 and 3. This playbook covers artifact extraction, including hidden process detection, network connections, credential dumping, DLL analysis, and code injection detection (malfind). It is essential for incident response, malware analysis, and reconstructing attack timelines from memory dumps.

This playbook provides advanced techniques for symbolic execution using angr, Z3, and Unicorn Engine. It covers automating CTF challenges, handling constraint solving patterns, function hooking, memory manipulation, and emulating custom virtual machines for binary analysis and key recovery.

This meta-skill automates the entire process of transforming raw Excel data into structured business insights. It reads the raw data, performs advanced trend and anomaly analysis, writes the resulting findings to a dedicated 'Insights' sheet, and persists key performance indicators (KPIs) to long-term memory. Ideal for comprehensive business reviews and data-driven decision-making.

A comprehensive audit worker that integrates Open Infrastructure Architecture (OIA) manifest analysis, threat modeling, and MCP security scanning. It computes a composite worst-case severity score and persists time-stamped audit records in a memory namespace. Primarily designed for scheduled CI/CD pipelines to detect architectural drift and security regressions over time.

This skill utilizes a configured graph database (Codebase Memory) to accelerate code discovery, understand system architecture, perform symbol lookups, and trace dependencies (callers, callees, data flow). It is crucial for navigating unfamiliar or complex codebases, providing insights into impact analysis and module relationships. Always confirm graph findings with local source code or files.