Skill UI

Deploy deception-based Active Directory honeytokens—fake privileged accounts, SPNs, decoy GPOs and BloodHound paths—to detect Kerberoasting, lateral movement, credential theft and other reconnaissance activity via monitored Windows Security events.

Detects and analyzes Bluetooth Low Energy attacks by combining Ubertooth and nRF52840 sniffers, Bleak GATT enumeration, and Crackle encryption cracking for IoT security assessments and BLE penetration tests.

Detect NTLM relay attacks by correlating Windows Security Event 4624 LogonType 3 entries against IP-to-hostname inventories, auditing SMB/LDAP signing enforcement, spotting Responder/LLMNR poisoning traffic, and tagging NTLM downgrade attempts for SIEM alerting.

A library-agnostic Flutter/Dart code review checklist that walks through widget best practices, state management patterns, Dart idioms, performance, accessibility, security, and clean architecture, helping reviewers spot regressions in any app stack.

Guides analysts through using binwalk to scan, extract, mount, and inspect firmware images, covering entropy analysis, nested archive handling, filesystem mounts, and string hunting for credentials or config data during IoT/security research.

Practical workflow for finding exploitable, remotely reachable vulnerabilities, prioritizing those that qualify for bounties by confirming user-controlled attack paths, minimal PoCs, and real impact before reporting.

Guides security-first development with defensive input validation, auth handling, data protection, and OWASP prevention steps for any feature touching external data or sessions.

This comprehensive guide provides detailed procedural steps for configuring and executing CodeQL code scanning. It covers both implementing automated workflows using GitHub Actions (`codeql.yml`) and running scans via the CodeQL CLI. Users will learn how to manage language matrices, set build modes, interpret SARIF outputs, handle monorepo structures, and troubleshoot complex security analysis setups across multiple languages (e.g., Python, Java, C++).

A comprehensive code review tool designed for C#/.NET projects. It evaluates the implementation of key design patterns (Command, Factory, Repository) and adherence to SOLID principles. The review covers architecture, best practices (async/await, logging), security, testability, and clean code principles, providing actionable recommendations for improvement.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

A comprehensive guide detailing how to configure and manage GitHub's secret scanning feature. This skill covers enabling Secret Protection, setting up push protection to block leaked credentials before they reach the repository, defining custom regex patterns, and providing workflows for triaging alerts and resolving blocked pushes (including using git rebase or bypassing protections). Essential for maintaining secure code repositories and complying with security standards.

Comprehensive guide for configuring GitHub Dependabot updates, grouping strategies, multi-ecosystem workflows, scheduling, and security-driven labeling to optimize dependency management.