Skill UI

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

This framework applies the Lindy Effect principle to assess the expected remaining life of non-perishable technologies, ideas, or practices. It treats the current survival age as a strong prior for future longevity, guiding users to favor proven, long-surviving options. It is crucial when making critical, high-stakes choices (like selecting frameworks or protocols) where relevance must last years, requiring checks for domain drift and a clear burden of proof before adopting novelty.

An advanced academic assistant designed for legal researchers and university faculty. It supports comprehensive legal research (doctrinal focus), document review (plagiarism, coherence check), and content generation. Capabilities include creating full courses, exam questions, practical exercises (TD sheets), and updating complex legal documents across French, EU, and international law. It operates with strict anti-hallucination protocols, ensuring all citations are rigorously verified.

This mechanism facilitates the implementation of reversible and compatibility-safe transitions across critical system components. It is essential for managing changes in schemas, APIs, protocols, configurations, or data structures, ensuring that rollbacks are possible and the integrity of existing data is preserved throughout the migration process. Best practices include defining explicit forward and rollback paths, handling mixed-version operations, and ensuring idempotency for retries.

A comprehensive guide to conducting authorized security assessments across API-driven applications. This skill covers REST, gRPC, and WebSocket protocols, addressing the full OWASP API Security Top 10 2023. Techniques include identifying Broken Object Level Authorization (BOLA/IDOR), broken authentication, excessive data exposure, and implementing fuzzing for various API endpoints. Designed for professional penetration testing engagements.

This guide provides comprehensive, battle-tested techniques for expanding access across a compromised network. It covers credential-based movement (Pass-the-Hash, Pass-the-Ticket), NTLM relay attacks, and remote execution protocols (WMI, WinRM). Used exclusively in authorized red team engagements and penetration testing, it details command sequences and OPSEC considerations required to reach high-value targets while minimizing detection.

This comprehensive wizard guides users through setting up various AI agent clients (e.g., Claude Code, Codex, CodeBuddy) to connect with a Memory Proxy. It handles configuration scanning, gathering necessary credentials (Proxy URL, User Key), selecting the specific agent, and validating connectivity via live API health checks for multiple protocols (Anthropic, OpenAI, etc.) before writing the final configuration.

This expert skill advises critical infrastructure owners and operators (pipelines, railroads, public transit) on complying with complex TSA cybersecurity directives. It provides deep knowledge of CRMP, CIP, CAP, IT/OT segmentation, and incident reporting protocols. Use it for gap assessments, policy drafting, and security architecture reviews related to transportation critical systems.

This skill enforces strict communication protocols for AI agents interacting in shared channels with external parties. It ensures agents speak only when explicitly addressed, prevents internal context leakage, and routes sensitive content to draft-only approval. Ideal for group chats, DMs, and business partnerships where privacy and security are critical.

Specialized legal assistant covering French foreigner, asylum, and nationality law: entry, visas, residence permits, removal, litigation, asylum procedures, and social rights. Provides actionable guidance for social workers and rigorous legal analysis for lawyers, with strict anti-hallucination protocols and multi-source verification via OpenLegi, LibreJustice, and Legal Data Hunter.

Comprehensive reference for NetExec (nxc), a network exploitation and post-exploitation tool for Active Directory environments. Covers all protocols (SMB, LDAP, WinRM, etc.), authentication methods, password spraying, credential dumping, lateral movement, and module usage with practical command examples.