Skill UI

This skill enables comprehensive security assessments of SSH services. It covers enumeration, credential attacks, vulnerability exploitation, and configuration auditing using tools like Nmap, Hydra, and Metasploit. Suitable for authorized penetration testing and security research to identify weaknesses in SSH implementations.

This skill performs external reconnaissance on software supply chain attack surfaces. It identifies public GitHub organizations, internal package names in JS/Python bundles, and Docker images. It checks for dependency confusion vulnerabilities by verifying if internal package names are available on public registries. Requires explicit authorization for offensive security assessments.

This skill identifies dependencies at heightened risk of exploitation or takeover by evaluating factors like maintainer activity, popularity, and security history. It generates a security report for supply chain attack surface assessment and pre-engagement scoping.

This skill enables comprehensive software supply chain security assessment, covering SBOM generation, SCA scanning, CI/CD pipeline review, and container image auditing. It involves verifying build integrity, dependency provenance, and vulnerability reachability. Key activities include auditing upstream repositories, integrating security gates in CI/CD, ensuring artifact integrity, and monitoring CVEs for actual exploitability to mitigate supply chain attacks.

This skill enables authorized security testing of desktop thick clients. It focuses on local storage, update channels, IPC, traffic interception, and client-side trust-boundary review. Techniques include reverse engineering, network analysis, and vulnerability assessment for C/S architectures like Electron or .NET.

This skill specializes in threat modeling methodologies like STRIDE and PASTA for security architecture reviews and risk assessment. It helps identify attack vectors, prioritize security risks, and design mitigation strategies to build secure-by-design systems. Ideal for security audits and system design phases.

Provides a structured reference for the 100 most critical web application vulnerabilities. Enables systematic vulnerability identification, impact assessment, and remediation guidance. Suitable for authorized security assessments and educational purposes.

A security assessment skill that enforces a 7-question validation gate before submitting any vulnerability finding, ensuring only confirmed, in-scope, high-impact issues are reported. It provides a structured decision framework to kill false positives, verify authorization, and avoid known invalid bug classes.

External attack matrix for VMware vSphere/vCenter Server, covering version fingerprinting, CVE probing, and exploitation techniques for authorized security assessments.

Scan systems and dependencies for CVEs and security vulnerabilities using industry-standard tools like Nessus, OpenVAS, and Nuclei. Supports Docker deployment, API integration, and template-based scanning for infrastructure and application security assessments. Requires authorized scope and explicit permission before execution.

A comprehensive asset discovery pipeline for authorized security assessments. It automates subdomain enumeration, live host detection, URL crawling, and vulnerability scanning using tools like subfinder, httpx, nuclei, and katana, delivering prioritized URL lists for penetration testing.

This skill provides a framework for auditing Web3 smart contracts for security vulnerabilities. It includes pre-audit risk assessment strategies, critical bug class identification (like accounting desynchronization and access control), and Solidity code analysis techniques. Designed for authorized security assessments and educational purposes, it helps identify high-value targets and common exploit patterns in blockchain protocols.