Skill UI

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

This comprehensive guide assists authors in evaluating the suitability, framing, and structural requirements for submitting research on wireless, mobile, IoT, sensing, and network security/privacy to the ACM WiSec conference. It provides critical expertise on aligning the paper's contribution type, threat model, and evidence standards with top-tier academic conference expectations, ensuring the work emphasizes the physical or network context.

A specialized skill for advanced runtime analysis of Android applications, primarily used in CTF and security research. It covers techniques like hooking specific system boundaries (JNI, WebView), bypassing security measures (SSL pinning, root checks), and recovering sensitive data or request signatures. Ideal for deep inspection of app trust boundaries and complex mobile logic.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

Comprehensive guidelines for DevOps workflows including infrastructure design, CI/CD pipelines, container management with Docker and Kubernetes, health checks, rollback strategies, feature flags, and mobile release processes. Ensures production readiness and security compliance across various environments.

Performs non-intrusive static analysis of AI Skills and Bundles to detect malicious patterns, data leaks, privilege escalation, obfuscated payloads, persistence and mobile threats across Windows, macOS, Linux/Unix, Android and iOS, producing evidence-based audit reports.

This skill enables comprehensive static analysis of frontend codebases to detect Cross-Site Scripting (XSS) vulnerabilities. It identifies unsafe DOM manipulation, improper sanitization, and injection points across frameworks like React, Vue, and Angular. Use it to secure client-side applications against critical security risks.

Hunting methodology for OAuth vulnerabilities from 22 bug bounty reports, covering redirect_uri bypass, CSRF state, nonce replay, referrer leakage, and mobile deep link attacks for authorized security assessments.

A comprehensive mobile design skill enforcing mobile-first, touch-first, platform-respectful principles. It includes a feasibility risk index, mandatory thinking before work, reference reading requirements, and hard bans on performance, UX, and security anti-patterns. Ideal for designing or building mobile apps with optimal user experience and performance.

Expert mobile developer specializing in React Native, Flutter, and native iOS/Android development. Covers cross-platform development, architecture patterns, performance optimization, data sync, testing, DevOps, security, and app store optimization.

Authorized Android/iOS reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP MASTG.

This skill specializes in secure mobile application development, focusing on input validation, WebView security, and mobile-specific security patterns. It covers secure data storage, authentication implementation, and platform-specific vulnerabilities for iOS and Android. Ideal for building security-first mobile apps that protect sensitive data and resist common attack vectors like injection attacks and man-in-the-middle threats.