Skill UI

This guide provides a comprehensive framework for designing rigorous and defensible evaluation sections for machine learning and information retrieval papers, particularly for top-tier conferences like WSDM. It covers the four critical evidence quadrants—Effectiveness, Validity, Efficiency, and Robustness—and details necessary protocols, such as temporal splits, proper baseline selection (including heuristics), ablation studies, and hardware-aware performance reporting. Use this when auditing or writing the experimental section of a research paper.

Provides a comprehensive, step-by-step workflow for conducting rigorous literature reviews across academic, biomedical, and technical domains. It guides users through defining research questions (PICO), developing systematic search protocols, evidence logging, source screening, structured data extraction, and synthesizing findings to build high-quality, reproducible review reports.

ccboard is a comprehensive TUI and Web dashboard designed for monitoring and managing Claude Code usage. It provides unified visibility into token consumption, detailed cost tracking, session history, and the real-time status of Model Context Protocol (MCP) servers. Use it to analyze usage patterns, manage configurations, and ensure cost efficiency across all projects.

A specialized downstream skill for advanced CTF and security sandbox environments. This tool is used when the challenge requires reconstructing the exact message sequence, state transitions, and field mutations necessary for a system to accept a session. It handles complex tasks like recovering custom framing, checksum validation, stateful replay, and identifying the minimal conversation path that proves a specific branch acceptance.

This specialized skill automates advanced forensic network analysis on captured packet data (PCAP). It is designed for reconstructing complex network sessions (TCP/UDP), decoding obscure or custom protocols (e.g., C2, custom binary), and correlating packet sequences with host or malware behavior. Use when evidence is embedded in protocol framing, timing, or session state, requiring reassembly beyond simple packet inspection.

This specialized skill is designed to analyze complex security flaws involving forced authentication (coercion) and identity relay chains. It guides users to trace and document the complete, minimal path from the initial coercion trigger (e.g., a specific service or protocol edge) through intermediate hops, to the final service that accepts the relayed credentials. Use this for deep security research, forensics, and documenting the decisive sequence leading to privilege escalation or code execution.

A specialized skill for analyzing complex, host-to-host lateral movement chains within a Windows environment. It focuses on tracing protocols like WinRM, SMB, and RDP, replaying captured Kerberos tickets, understanding privilege edges, and identifying the exact accepting service or host that facilitates credential movement. Used in advanced penetration testing and digital forensics scenarios.

This skill deploys the OpenMed Model Context Protocol (MCP) server, exposing critical clinical NLP tools such as NER, PII extraction, and de-identification. It enables AI coding agents and chat clients to interact with OpenMed's capabilities via simple tool calls, running locally on-device to ensure user data privacy and security. Supports both stdio and Streamable HTTP deployment modes.

This guide outlines the methodology for conducting hardware security research on embedded systems. It covers physical interface analysis (UART, JTAG, SWD), debug pad triage, secure boot evaluation, and offline firmware extraction. It emphasizes systematic, non-destructive testing protocols and responsible handling of physical devices.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

A specialized framework for conducting non-Wi-Fi RF/SDR security research in controlled, authorized laboratory environments. Focuses on passive signal identification, protocol analysis (e.g., remote controls, ADS-B), and feasibility studies. Emphasizes strict legal compliance, requiring analysis to be performed only in shielded labs with explicit authorization, and defaults to receiving-only mode.