Skill UI

A comprehensive firmware and IoT penetration testing skill following OWASP FSTM. Covers firmware acquisition, static analysis, file system extraction with binwalk/unblob, automated EMBA scanning, system emulation via Firmadyne/QEMU, dynamic debugging, and binary exploitation for ARM/MIPS devices. Ideal for auditing routers, cameras, smart home devices, reproducing IoT CVEs, and discovering embedded 0-days.

This skill provides an expert framework for conducting comprehensive legal gap analyses between European Economic Area (EEA) law and Icelandic national legislation. It guides users through identifying transposition delays, inconsistencies, and compliance risks by systematically comparing EU directives, Joint Committee Decisions, and specific Icelandic statutes, ensuring thorough assessment of adherence to EEA obligations.

An expert advisor for Australian government entities and their supply chains, specializing in the Australian Defence Signal (ASD) Information Security Manual (ISM). This skill guides users through the entire lifecycle of system security, including Gap Analysis, System Authorisation (ATO), IRAP preparation, and creating mandated security documentation (e.g., SSP). It ensures compliance with risk-based security standards for classified government systems.

This expert skill provides comprehensive assistance for Information Security Management System (ISMS) compliance based on ISO 27001 (2013/2022). It is ideal for security and compliance teams needing support with gap analysis, risk assessment, policy drafting, Statement of Applicability (SoA) generation, and auditing preparation. It covers all mandatory clauses and Annex A controls.

This sophisticated skill assists in-house legal teams with comprehensive legal risk assessment and classification. It uses a structured framework based on severity and likelihood, but critically, it enforces a rigorous three-step research methodology: adversarial searching for contradicting case law, systematic doctrinal web searches for context, and a temporal confidence check to ensure legal positions are current. It ensures that risk assessments are grounded in the most reliable and updated legal landscape.

An expert advisor specializing in civil litigation under civil law systems across Latin America. It assists legal professionals, internal teams, and clients with procedural strategy, risk analysis, tactical options, and guidance on civil procedure across multiple jurisdictions (e.g., Colombia, Mexico, Argentina). The tool uses accurate local terminology and generates clear summary emails for the client.

An expert advisory tool for the New Zealand Information Security Manual (NZISM). Provides comprehensive guidance for NZ government agencies, contractors, and supply chains on mandatory security compliance. Use cases include gap analysis, system classification (Unclassified to Top Secret), security risk management, and achieving GCSB/NCSC NZ accreditation.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

This adapter acts as a specialized entry point for authorized security analysis, reverse engineering, and CTF tasks using the 'reverse-skill' repository. It guides users through a systematic, multi-step workflow, ensuring that all actions—from setting initial scope to resolving tools—are executed within the defined security contract of the repository. Ideal for defensive testing and deep technical investigations.

A comprehensive skill for conducting rigorous sanctions screening and export control compliance analysis. It covers individual designations, sectoral restrictions (energy, finance), dual-use goods, international payment systems (SWIFT/USD/EUR), and complex extraterritorial regimes (OFAC, EAR, ITAR, Chinese ECL). The skill enforces strict legal due diligence, requiring real-time source verification and explicitly flagging all potential risks and limitations to prevent legal hallucinations in global transactions.

This skill provides a structured legal analysis framework for assessing potential unfair dismissal claims under English and Welsh law. It systematically guides users through key legal concepts, including qualifying service periods, the Burchell test for conduct, the Polkey test for procedural fairness, and ACAS code compliance. Ideal for pre-dismissal planning or post-dismissal claim risk assessment.