Skill UI

This diagnostic skill audits the entire local setup of Claude Code against several known, complex cache and cost bugs (CC#40524, B4, B5). It checks critical components including version compatibility, sentinel placeholders, session resuming logic, and attribution headers. Use this tool to ensure your development environment is optimized, stable, and minimizes unexpected operational costs and functional regressions.

This specialized skill is designed for deep forensic analysis in complex Windows environments, crucial for CTF and red teaming. It traces identity flows, including Active Directory (AD) origins, Kerberos ticket lifecycles, and OAuth authorization claims. Use it to correlate host artifacts (LSA, DPAPI, Sysmon) with identity evidence to map complete lateral movement and privilege escalation chains.

A specialized deep-dive skill for analyzing container-to-host escape vulnerabilities. This tool is used after a sandbox orchestrator establishes initial assumptions, focusing on mapping isolation boundaries (namespaces, cgroups, seccomp, capabilities). It helps prove boundary crossings, identify minimal exploit primitives, and determine if an exploit can break out of the container context to the host kernel.

This specialized skill is designed for deep forensic analysis of compromised Linux environments, specifically tracing the sequence of credential usage (tokens, keys, service accounts) that leads to lateral movement or privilege escalation. It helps map the decisive path from a recovered artifact to an accepted replay mechanism, identifying the exact trust edge or capability abuse responsible for the host-to-host pivot.

This specialized skill is designed for advanced forensic analysis and penetration testing within Windows environments. It focuses on extracting and proving the replayability of credentials, tickets, and secrets stored in LSASS memory, Kerberos ticket caches, DPAPI, and SSP artifacts. Use it to establish the minimal, actionable chain (host artifact -> extracted material -> accepted privilege) that proves a decisive edge for privilege escalation.

This specialized skill automates advanced forensic network analysis on captured packet data (PCAP). It is designed for reconstructing complex network sessions (TCP/UDP), decoding obscure or custom protocols (e.g., C2, custom binary), and correlating packet sequences with host or malware behavior. Use when evidence is embedded in protocol framing, timing, or session state, requiring reassembly beyond simple packet inspection.

This advanced skill is designed for security research and CTF environments to trace subtle divergences in request handling across multiple network hops (proxies, gateways, backend servers). It focuses on identifying vulnerabilities stemming from differential interpretation of headers, path normalization, transfer framing (CL/TE), and host derivation, crucial for detecting request smuggling and parsing inconsistencies.

This specialized skill is used to trace complex network requests through multi-layered infrastructure, such as reverse proxies, container boundaries, and various header manipulations. It is essential for determining which specific node, proxy rule, or derived header ultimately serves a live request within a sandboxed environment. Use it when analyzing VHost routing, path rewrites, or X-Forwarded headers to pinpoint the decisive backend.

A specialized skill for analyzing complex, host-to-host lateral movement chains within a Windows environment. It focuses on tracing protocols like WinRM, SMB, and RDP, replaying captured Kerberos tickets, understanding privilege edges, and identifying the exact accepting service or host that facilitates credential movement. Used in advanced penetration testing and digital forensics scenarios.

This is the master workflow for complex security competitions, including CTF, reverse engineering, cloud, pwnable, and forensics. It establishes a controlled sandbox model, treating user-presented targets as internal fixtures by default. The orchestrator's role is to map the entry surface, prove one minimal end-to-end path, and intelligently route the investigation to the most relevant specialized analysis skill or reference material.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.

This expert, interactive assistant provides comprehensive troubleshooting for complex issues encountered with Claude Code. It systematically scans the user's environment, checks global and project configurations, and cross-references symptoms against a deep knowledge base to pinpoint root causes and provide actionable, step-by-step solutions. Ideal for resolving integration errors, permission issues, or unexpected behavior.