Skill UI

Traces ransomware payment flows by querying blockchain explorers, clustering addresses, and identifying mixins/exchanges to support incident response and attribution.

Parses CycloneDX and SPDX SBOMs, maps components to the NVD CVE catalog, scores their risk via dependency graphs, and produces compliance-ready reports for supply chain security assessments and automated CI/CD scans.

Guides researchers through organizing assumptions, invariant objects, notation, and derivation maps to turn loose goals, messy notes, or partial formula chains into a coherent package suitable for paper-style theory drafts or blocker reports.

Performs comprehensive iOS app security audits with Frida and Objection for dynamic instrumentation, SSL pinning bypass, keychain dumps, and IPA static analysis to validate OWASP MASTG controls during authorized pentests.

Structured red team engagement planning that blends MITRE ATT&CK kill-chain ordering, technique scoring, choke point and OPSEC analysis, and crown-jewel targeting into authorized offensive simulations with tooling like the engagement planner.

A comprehensive guide and implementation pattern to prevent silent decimal mismatch errors when handling ERC-20 tokens across multiple EVM chains. It emphasizes runtime querying of token decimals, implementing chain-aware caching, and using precision-safe arithmetic (like BigInt or Decimal) for accurate value calculation in DeFi applications, bots, and aggregators.

This guide outlines a comprehensive, multi-layered defense framework for autonomous AI agents that interact with blockchain wallets and execute financial transactions. It covers critical security measures like prompt injection sanitization, hard spending limits, pre-transaction simulation, circuit breaker implementation, wallet key isolation, and MEV protection. Essential for building secure, production-ready DeFi automation tools.

Guides Go engineers on using samber/hot for in-memory caches with TTL, loader chains, sharding, and metrics, plus choosing eviction algorithms to fit work-set and stability needs.

Orchestrates an executive’s schedule, inbox, and communications through the gws toolchain, running standup, meeting prep, and digest workflows while triaging mail, scheduling events, and drafting professional replies.

This skill provides robust mechanisms to verify the integrity of AI agent plugins, tools, and dependencies. It generates deterministic SHA-256 manifests (INTEGRITY.json) for all components, allowing users to detect unauthorized modifications, track provenance, and ensure that deployed assets match their published versions. Use this during CI/CD pipelines, code review, and pre-production promotion to secure the entire agent ecosystem.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

Aspire is a code-first polyglot toolchain that orchestrates containers, executables, and cloud resources through an AppHost project, guiding creation, debugging, configuration, deployment, and troubleshooting for distributed applications across languages.