Skill UI

This skill provides a rigorous, structured method for inspecting animated 3D characters, rigs, and motion retargeting in Blender. It moves beyond visual evidence (screenshots) by extracting and comparing structured data points such as bone transformations, bounding box changes, ground contacts, and axis conventions. Ideal for diagnosing subtle animation flaws like foot sliding, ground penetration, or incorrect orientation that are invisible in still images.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

This specialized skill is designed for advanced security analysis, tracing the complete trust chain from cloud metadata services to accepted privilege. It is used in penetration testing or CTF environments to meticulously prove how metadata-derived credentials (such as instance identities or tokens) are issued and subsequently accepted by a cloud or control plane API, thereby exposing the decisive trust edge.

This specialized skill is designed for advanced forensic analysis and penetration testing within Windows environments. It focuses on extracting and proving the replayability of credentials, tickets, and secrets stored in LSASS memory, Kerberos ticket caches, DPAPI, and SSP artifacts. Use it to establish the minimal, actionable chain (host artifact -> extracted material -> accepted privilege) that proves a decisive edge for privilege escalation.

A specialized downstream skill for analyzing security vulnerabilities in complex agentic systems. This tool is designed for red teaming and penetration testing, focusing on detecting prompt injection, retrieval poisoning, memory contamination, planner drift, and tool boundary abuse within multi-step LLM chains. Use when proving how untrusted inputs compromise system integrity.

A specialized skill for analyzing complex, host-to-host lateral movement chains within a Windows environment. It focuses on tracing protocols like WinRM, SMB, and RDP, replaying captured Kerberos tickets, understanding privilege edges, and identifying the exact accepting service or host that facilitates credential movement. Used in advanced penetration testing and digital forensics scenarios.

Creates task-oriented technical documentation with progressive disclosure for READMEs, API docs, architecture docs, and markdown. Also generates formal security reports (reverse engineering, penetration testing, CTF, malware/APT analysis) in the user's project directory with Evidence-Finding-Path chain.

A comprehensive methodology for advanced red teaming and adversary emulation. This skill details how to bypass modern Endpoint Detection and Response (EDR) solutions (e.g., Defender, CrowdStrike, SentinelOne). Techniques include unhooking ntdll, utilizing indirect syscalls (Hell's Gate), patching ETW providers, and AMSI context blinding. Essential for authorized penetration testing and self-developed implant development, aligning with MITRE ATT&CK T1562.

This guide outlines a structured methodology for authorized wireless security assessments. It covers essential techniques such as Wi-Fi data capture, WPA/WPA2 handshake analysis, and rogue Access Point detection. It is designed for assessing corporate network security, verifying wireless isolation, and providing professional penetration testing recommendations, strictly adhering to legal scope and authorization.

Coordinates authorized multi-stage security assessments including full penetration testing, external-to-domain compromise, and attack path planning. The skill acts as a central orchestrator, routing reconnaissance, initial access, privilege escalation, lateral movement, and reporting tasks to specialized sub-skills. Intended for authorized engagements only.

Expert DORA compliance advisor for EU financial entities and ICT providers. Covers ICT risk management, incident classification and reporting, threat-led penetration testing, third-party risk oversight, Register of Information, and contractual provisions with article-level citations. Use for gap analysis and policy drafting.

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.