Skill UI

Implements GitHub Advanced Security with CodeQL to provide automated static analysis, secret detection, dependency review, and push protection across repositories, enabling enterprise-scale vulnerability monitoring and compliance-aligned controls.

Structured verification loop for Laravel projects that runs environment checks, linting/static analysis, tests with coverage, security audits, migrations, and build/deployment readiness before PRs or deployments.

Automate MobSF-powered static analysis for Android APK/AAB files to uncover hardcoded secrets, misconfigurations, risky permissions, and weak cryptography before deployment or during pentests, and gate CI/CD pipelines with measurable security scores.

Analyzes PLC firmware to uncover vulnerabilities such as hardcoded credentials, insecure updates, backdoors, memory corruption, and undocumented debug interfaces. Covers extraction from Siemens, Allen-Bradley, and Schneider platforms, static and dynamic inspection, and baseline comparison to detect tampering.

Performs static Windows PE malware triage with PEStudio, examining headers, sections, imports, strings, and resources to spot packing, anti-analysis traits, and IOC clues before deciding if sandbox execution is warranted.

This guide details a comprehensive methodology for penetration testing desktop (thick client) applications. It covers static and dynamic analysis, focusing on identifying vulnerabilities such as hardcoded credentials, insecure local storage, DLL hijacking, memory manipulation, and API communication flaws. Tools like dnSpy, Procmon, and Burp Suite are utilized for in-depth security auditing of enterprise and banking software.

Decode ransomware encryption routines via static and dynamic analysis to identify used ciphers, key-gen weaknesses, and whether decryption without ransom is viable during controlled malware testing.

Detects and prevents injection attacks targeting serverless functions by combining static analysis, event mapping, runtime behavior monitoring, and IAM auditing so SOCs can spot poisoned triggers, malicious layers, and privilege escalations across Lambda, Azure, and GCP environments.

Performs comprehensive iOS app security audits with Frida and Objection for dynamic instrumentation, SSL pinning bypass, keychain dumps, and IPA static analysis to validate OWASP MASTG controls during authorized pentests.

A comprehensive tool designed to scan any agent skill for potential security risks and vulnerabilities before implementation or use. Powered by local static analysis (A.I.G.), it ensures that no file contents, credentials, or personal data ever leave your device, providing maximum privacy and safety for integrating new AI capabilities across various agent platforms.

A comprehensive methodology for discovering potential software vulnerabilities. It outlines advanced techniques including static analysis, dynamic analysis, fuzzing, taint tracking, and modern attack surface mapping (e.g., kernel, drivers). Ideal for professional code audits, bug bounty hunting, and building robust vulnerability research pipelines.