Skill UI

Systematically map Windows and Linux persistence vectors to reveal how malware survives reboots, enumerating autoruns, services, scheduled tasks, and WMI entries during incident response and threat hunting.

This comprehensive process validates whether users with elevated permissions (like domain admins, service accounts, and cloud IAM roles) still require their access. It enforces the principle of least privilege by systematically reviewing, certifying, and remediating excessive or orphaned high-level access, ensuring compliance with standards like SOC 2, PCI DSS, and SOX.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

This autonomous skill orchestrates the entire scientific research lifecycle, guiding users from a vague research direction to a polished, review-ready document. The pipeline systematically executes Idea Discovery (Workflow 1), full-scale Implementation, Experiment Deployment (Workflow 2), automated Review Loops, and optional Paper Writing (Workflow 3). It handles everything from preliminary literature review and novelty checks to generating high-quality, reproducible code and final academic drafts.

This end-to-end workflow automates the transition from a vague research direction to a structured, actionable proposal. It first refines the core method thesis and dominant contribution (using research-refine), and then automatically generates a detailed, claim-driven experiment roadmap and comprehensive pipeline summary. Ideal for researchers needing to transform initial concepts into a complete, executable paper proposal and experimental plan.

Integrates Aqua Security’s Trivy scanner into CI/CD workflows to automatically scan Docker images, IaC files, and configs for OS and dependency CVEs, enforce severity-based quality gates, and block vulnerable images before deployment.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

Walks testers through intercepting REST/GraphQL API calls, identifying object ID parameters, and swapping them with other users’ identifiers to confirm OWASP API1:BOLA protections in multi-tenant services.

Guide to systematically assess REST and GraphQL APIs against the OWASP API Security Top 10 risks using Burp Suite, Postman, ffuf, and curl to discover endpoints, probe auth/authorization flaws, and verify rate limiting before deployment.

Systematically test web applications for broken access control by mapping endpoints, configuring Burp Authorize, and exercising vertical/horizontal privilege escalation via API requests to surface unauthorized behaviors during penetration tests.

A comprehensive skill for identifying and exploiting Cross-Site Scripting (XSS) vulnerabilities in web applications. It systematically tests reflected, stored, and DOM-based contexts by injecting various JavaScript payloads. The process involves mapping all user input points, identifying output contexts (HTML body, attribute, JS string, etc.), and crafting payloads to bypass sanitization and Content Security Policy (CSP) protections, simulating real-world attacks like session hijacking and credential theft.

Assistant for venture fund administrators: ingests capital calls, investments, and cash flows to compute KPIs (TVPI, DPI, IRR, MOIC), model carry/fees, and draft LP quarterly updates via Claude Code + Python.