Skill UI

The Safety Guard skill is designed to prevent destructive actions when working in production systems or when autonomous agents are executing tasks. It offers three protection modes (Careful, Freeze, and Guard) to monitor dangerous commands, lock specific directories, and ensure code changes are confined to intended areas, enhancing system stability and security.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

This advanced code review skill forces genuine perspective shifts by employing three hostile reviewer personas: the Saboteur (production breaks), the New Hire (maintainability), and the Security Auditor (OWASP-informed). It ensures that all code reviews are critically rigorous, eliminating superficial "Looks Good To Me" approvals and catching blind spots missed by the original author or general AI models. Use it before merging a PR for maximum confidence.

This skill detects malicious Command and Control (C2) communications tunneled through the DNS protocol. It analyzes DNS query logs for indicators such as DNS tunneling tools (Iodine, dnscat2), Domain Generation Algorithms (DGA), and encoded payloads within TXT/CNAME records. Techniques include Shannon entropy analysis of subdomains, statistical anomaly detection, and machine learning classification. Ideal for network security analysts conducting deep threat hunting and forensic investigations.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

This skill provides comprehensive security and monitoring for Large Language Model (LLM) powered trading agents. It helps to audit trade decisions, ensure compliance with risk parameters, and mitigate potential risks associated with automated financial operations.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This skill provides a comprehensive guide for integrating and managing Firebase App Check in Flutter applications. It covers selecting the correct platform attestation providers (e.g., Play Integrity, DeviceCheck, reCAPTCHA), initializing the service, handling debug tokens, and executing a secure enforcement rollout. Mastering App Check is critical for protecting backend resources from unauthorized access, significantly enhancing application security.

A CLI-based skill for managing Lark Mail, allowing users to draft, send, reply, forward, read, and search emails, manage folders, labels, contacts, and mail rules with security protections.

This comprehensive guide provides detailed procedural steps for configuring and executing CodeQL code scanning. It covers both implementing automated workflows using GitHub Actions (`codeql.yml`) and running scans via the CodeQL CLI. Users will learn how to manage language matrices, set build modes, interpret SARIF outputs, handle monorepo structures, and troubleshoot complex security analysis setups across multiple languages (e.g., Python, Java, C++).

A comprehensive code review tool designed for C#/.NET projects. It evaluates the implementation of key design patterns (Command, Factory, Repository) and adherence to SOLID principles. The review covers architecture, best practices (async/await, logging), security, testability, and clean code principles, providing actionable recommendations for improvement.