Skill UI

This skill detects malicious Command and Control (C2) communications tunneled through the DNS protocol. It analyzes DNS query logs for indicators such as DNS tunneling tools (Iodine, dnscat2), Domain Generation Algorithms (DGA), and encoded payloads within TXT/CNAME records. Techniques include Shannon entropy analysis of subdomains, statistical anomaly detection, and machine learning classification. Ideal for network security analysts conducting deep threat hunting and forensic investigations.

Guides teams through classifying and triaging declared security incidents, scoring severity, filtering false positives, routing escalations, and starting forensic collection consistent with NIST SP 800-61.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

This skill provides comprehensive automation for managing GitHub workflows across the entire development lifecycle. It covers detailed issue triage, PR review status checks, CI/CD failure debugging, official release management, and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and streamlining team development processes.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

This skill provides comprehensive security and monitoring for Large Language Model (LLM) powered trading agents. It helps to audit trade decisions, ensure compliance with risk parameters, and mitigate potential risks associated with automated financial operations.

A guide for security researchers focused on finding exploitable, remote-reachable vulnerabilities for bug bounties or responsible disclosure. It emphasizes high-signal flaws such as SSRF, RCE, and SQL injection, while guiding users through the professional triage and PoC creation process for penetration testing.

Automates CI/CD pipeline setup, from linting and type checks to integration, E2E, security, and deployment stages, plus feedback loops for AI agents and preview deployments.

Guides structured reviews for Flutter/Dart pull or merge requests, checking correctness, security, style, tests, and documentation while verifying branch scope and CI health.

Helps users discover and install open agent skills by translating requests like “how do I do X” into CLI searches, reviewing sources, and guiding safe installs with security warnings and confirmations.

This skill guides developers on integrating Firebase AI (Gemini) into Flutter applications. It covers essential topics including initial setup and configuration, generating text and managing multi-turn chat responses, implementing real-time streaming output, handling multimodal prompts (text and images), and ensuring robust error handling, security, and adherence to data privacy best practices.

This comprehensive guide details how to correctly implement Firebase App Check for Flutter applications. It covers selecting platform-specific attestation providers (like Android Play Integrity and Apple DeviceCheck), configuring debug tokens, handling token refresh, and setting up enforcement mechanisms. Use this skill to significantly harden your app's security against abuse, ensuring only legitimate clients can access protected backend resources.