Skill UI

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

This module converts diverse clinical inputs—including scanned images, faxes, CSV/TSV exports, and C-CDA XML—into a normalized, clean text format (`ExtractedDocument`). It supports on-device OCR (Tesseract/PaddleOCR) and structured redaction for tables. It is the crucial first stage for feeding de-identification and Named Entity Recognition (NER) pipelines.

This skill maps free-text laboratory and clinical observation names to standardized LOINC codes. It resolves ambiguous terms by considering the full six-axis model: Component, Property, Time, System (specimen), Scale, and Method. It integrates with FHIR terminology services to ensure accuracy, supporting US Core Laboratory Results and UCUM units.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

A comprehensive multi-step pipeline tool that executes a fully validated development plan. It handles worktree isolation, TDD scaffolding, parallel task execution across architectural layers, quality gating (linting, testing, smoke tests), documentation reconciliation, PR creation, and final merge, ensuring the feature is fully documented and integrated.

Streamlines the complex process of documenting software releases. This tool scans Git history, categorizes changes (features, fixes, performance), and generates multiple outputs—including a structured CHANGELOG, PR body, and user-friendly communication announcements—while also detecting necessary database migrations. Ideal for professional software teams preparing for production deployments.

Provides comprehensive techniques for reverse engineering complex software targets. Use this when the primary goal is to understand the internal workings of compiled, obfuscated, packed, or virtualized binaries (including APKs, WASM, and firmware). It covers static and dynamic analysis, anti-debugging bypass, and deobfuscation methods, helping users understand the target code's internal mechanisms for security research and vulnerability analysis.

An interactive wizard designed to help developers identify the optimal architectural pattern (Agent, Command, Skill, Hook, or Rule) for a new automation or feature. By asking a series of guided questions regarding trigger, complexity, and scope, it diagnoses the best fit and generates a complete, ready-to-use template (scaffold) for immediate development.

A comprehensive guide for embedding OpenMed-powered tools into Electronic Health Records (EHRs) like Epic or Cerner. It covers the entire SMART on FHIR workflow, including OAuth2 PKCE authorization, granular scoping (e.g., patient/DocumentReference.rs), secure token handling, and processing clinical notes locally on-device for de-identification and Named Entity Recognition (NER).

This tool performs a rapid, heuristic security assessment focused on identifying common vulnerabilities listed in the OWASP Top 10. It scans source code for hardcoded secrets, SQL injection risks, XSS vectors, insecure dependencies, and authentication flaws. It is ideal for pre-commit checks or code reviews before merging sensitive changes.

This tool simulates a senior application security engineer, performing a comprehensive, multi-phase audit. It checks for exposed secrets, prompt injection vectors, dependency vulnerabilities (supporting multiple languages), and critical configuration misconfigurations. It provides a scored, prioritized remediation report, ensuring a robust security posture before deployment.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.