Skill UI

This skill identifies dependencies at heightened risk of exploitation or takeover by evaluating factors like maintainer activity, popularity, and security history. It generates a security report for supply chain attack surface assessment and pre-engagement scoping.

This skill enables comprehensive software supply chain security assessment, covering SBOM generation, SCA scanning, CI/CD pipeline review, and container image auditing. It involves verifying build integrity, dependency provenance, and vulnerability reachability. Key activities include auditing upstream repositories, integrating security gates in CI/CD, ensuring artifact integrity, and monitoring CVEs for actual exploitability to mitigate supply chain attacks.

Proactive threat hunting and detection engineering using Sigma/YARA rules, SIEM queries, and ATT&CK mapping for blue-team operations. Includes hypothesis-driven workflows, rule validation, and toolchain guidance.

An advanced reliability wrapper for AI agents that monitors, manages, and recovers from tool call failures. It automatically handles common issues such as truncated JSON responses, API timeouts, rate limits, and mid-chain process breakdowns. By implementing sophisticated failure classification, checkpointing, and learning mechanisms, Guardian ensures complex, multi-step agent workflows remain stable and resilient.

Guides GitHub Copilot through V language development: installing the toolchain, structuring v.mod projects, building, formatting, vetting, testing, and writing idiomatic V with Option/Result error handling and immutability rules.

Master advanced vulnerability analysis principles aligned with OWASP 2025 standards. Learn to think like an attacker and defend like an expert. Covers supply chain security, attack surface mapping, risk prioritization using CVSS and EPSS, and exceptional condition handling. Includes methodologies for scanning, code pattern analysis, and cloud security considerations to identify and mitigate critical security risks effectively.

Detects data exfiltration via URL path encoding and chained web_fetch navigation, covering fake trusted UI injection, indirect prompt injection, letter-level path exfiltration, and multi-hop navigation hijacking in agent memory/context scenarios.

This skill provides a framework for auditing Web3 smart contracts for security vulnerabilities. It includes pre-audit risk assessment strategies, critical bug class identification (like accounting desynchronization and access control), and Solidity code analysis techniques. Designed for authorized security assessments and educational purposes, it helps identify high-value targets and common exploit patterns in blockchain protocols.

Authorized wireless security assessment skill for Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauthentication testing. Includes workflow, toolchain, and safety guidelines for ethical use.

Audits cross-chain relayer bridges with message hash verification, replay protection nonces, validator quorum, and withdrawal proofs; provides data models and validation schemas.

This skill accesses DEX market data across eight EVM chains including Ethereum and Base. It prepares optimal swap routes and generates unsigned transaction details for user wallets. It never signs or moves funds, requiring explicit user confirmation before execution. Ideal for analyzing token prices, chart data, and executing secure decentralized exchanges trades without private key exposure.

Read 31 blockchains over keyless JSON-RPC with MoltNode (balances, blocks, contract calls) and get Chord swap quotes with an unsigned transaction and simulation.