Skill UI

A comprehensive tool designed to discover and map adversary-controlled assets, including C2 servers, phishing domains, and exploit kits. It utilizes sophisticated pivoting techniques across passive DNS records, Certificate Transparency logs, Shodan/Censys scans, and network fingerprints (JARM/JA3S) to generate actionable threat intelligence, perfect for CTI investigations and security operations.

A comprehensive skill for managing AWS operational excellence, cost governance, and observability. It provides guidance on pre-deployment cost estimation (TCO), detailed spending analysis using Cost Explorer, setup of CloudWatch alarms, auditing activity via CloudTrail, and overall security posture assessment. Essential for optimizing cloud spending and ensuring reliable infrastructure.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

Manage GitHub repositories effectively through issue triaging, PR reviews, and CI/CD workflow debugging. Automate release management and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and developer experience.

This skill provides comprehensive security and monitoring for Large Language Model (LLM) powered trading agents. It helps to audit trade decisions, ensure compliance with risk parameters, and mitigate potential risks associated with automated financial operations.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

The Safety Guard skill is designed to prevent destructive actions when working in production systems or when autonomous agents are executing tasks. It offers three protection modes (Careful, Freeze, and Guard) to monitor dangerous commands, lock specific directories, and ensure code changes are confined to intended areas, enhancing system stability and security.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

This skill provides an end-to-end pipeline for Android APK security assessments. It includes inventorying developer apps, acquiring APKs from sources like APKPure, decompiling DEX files using jadx, and searching for hardcoded secrets like API keys and internal IPs. Suitable for authorized bug bounty engagements and red team operations targeting mobile applications.

This skill provides expert guidance on AWS cost optimization, monitoring, and operational excellence. It integrates MCP servers for cost estimation, analysis, CloudWatch metrics, alarms, and security auditing. Use it to analyze bills, estimate deployment costs, set up observability, and assess security posture effectively.

This skill provides comprehensive techniques for penetrating AWS cloud environments, covering IAM enumeration, privilege escalation, SSRF attacks, S3 exploitation, and Lambda code extraction. It supports red team operations and security assessments with tools like Pacu and Prowler. Requires AWS CLI and Python knowledge.

Manage secrets, keys, and certificates securely in Azure Key Vault using CLI. Configure access policies, implement RBAC, and handle encryption operations. Essential for DevOps security and cloud infrastructure administration.