Skill UI

This guide details the full lifecycle of advanced red team engagements, simulating sophisticated, real-world adversaries. It covers crucial planning elements, including Scope definition, Rules of Engagement (ROE), and deconfliction procedures. Techniques include building resilient, tiered C2 infrastructure, implementing strict Operational Security (OPSEC), advanced evasion methods (EDR/AMSI bypass), and comprehensive mapping using MITRE ATT&CK. Applicable for testing mature defender capabilities against assumed-breach scenarios.

Enables agents to perform authorized security assessments, blue team exercises, and penetration testing on AI products, agents, and infrastructure. Uses first-principles reasoning to identify vulnerabilities like prompt injection and tool abuse, generating evidence-based security reports without relying solely on payload libraries.

This skill provides an end-to-end pipeline for Android APK security assessments. It includes inventorying developer apps, acquiring APKs from sources like APKPure, decompiling DEX files using jadx, and searching for hardcoded secrets like API keys and internal IPs. Suitable for authorized bug bounty engagements and red team operations targeting mobile applications.

End-to-end iOS security assessment pipeline covering app inventory, IPA acquisition, static analysis, and secret extraction. Requires explicit authorization for offensive testing and bug bounty scopes.

A disciplined approach for red teaming and security assessments, emphasizing scope authorization, impact verification, and data minimization. Ensures thorough coverage without over-extraction or premature stopping during authorized engagements.

A structured client-facing format for red-team engagements and penetration testing reports. Includes standardized sections for findings, severity assessment, impact analysis, and proof of concept. Suitable for delivering reports to CISOs and technical stakeholders requiring DOCX/PDF output.