Skill UI

Guides teams through designing, implementing, and evidencing SOC 2 Type II controls aligned with the AICPA Trust Services Criteria, covering scoping, control mapping, evidence collection, remediation, and audit collaboration for a six- to twelve-month examination.

This skill covers the comprehensive automation of X.509 certificate lifecycle management, including requesting, issuing, deploying, monitoring, renewing, and revoking certificates. Utilizing Python and the ACME protocol (like Let's Encrypt), it helps organizations mitigate security risks and prevent service outages caused by expired or poorly managed certificates. Ideal for security auditing, incident response, and continuous security testing.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Guides building Progressive Web Apps with manifests, service workers, caching strategies, offline fallbacks, and install prompt handling so web projects feel native, survive unreliable networks, and support add-to-home-screen workflows.

Uses JADX to reverse-engineer Android APKs, inspect Java/Kotlin code, permissions, services, overlay layers, and C2 logic so analysts can uncover data theft, privilege abuse, and mobile malware behaviors.

A comprehensive guide to advanced network reconnaissance using Nmap. This skill covers multi-stage asset discovery, deep service enumeration, vulnerability scanning via the Nmap Scripting Engine (NSE), and advanced evasion techniques (e.g., fragmentation, decoys). It is designed for authorized penetration testing and thorough assessment of enterprise infrastructure.

Walks testers through intercepting REST/GraphQL API calls, identifying object ID parameters, and swapping them with other users’ identifiers to confirm OWASP API1:BOLA protections in multi-tenant services.

Guides penetration testers through discovering and exploiting XML External Entity vulnerabilities across APIs, file uploads, and SOAP services to read files, trigger SSRF, and exfiltrate data with tools like Burp Suite, interactsh, and custom payloads.

Performs targeted security assessments of JSON Web Token implementations, probing algorithm confusion, claim tampering, brute-force secrets, and misuse during penetration tests of APIs, SSO, and microservice authentication flows.

Auto-generate professional GEO service proposals from audit data, translating findings into business risks, tiered recommendations, pricing, timeline, and PDF-ready documentation for prospect follow-up.

Connect to the MAXIA AI-to-AI marketplace on Solana to discover, buy, and sell agent services, earn USDC, and query sentiment, DeFi yields, rug detection, GPU rental tiers, and wallet analysis through its public APIs.

Refactors large SwiftUI views into small, stable components by enforcing explicit dependency injection, keeping business logic in services/models, and avoiding unnecessary view models so the UI tree stays predictable and maintainable.