Skill UI

A rigorous methodology for debugging complex anomalies or incidents when multiple plausible causes exist. It guides the user to enumerate competing, falsifiable hypotheses and prioritizes running the cheapest, most discriminating observation first. By iteratively eliminating hypotheses and preferring the least-assumptive survivor, it systematically localizes the root cause efficiently.

A comprehensive guide detailing systematic techniques for breaking out of container isolation (Docker, Podman, containerd) into the underlying host operating system. Covers exploiting misconfigurations, abusing privileged modes, manipulating Linux capabilities (CAP_SYS_ADMIN), utilizing namespaces (nsenter), and exploiting known container runtimes CVEs. Essential for penetration testing and security red teaming engagements.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

A comprehensive guide covering advanced Linux privilege escalation techniques. It details a systematic methodology to move from a low-privilege shell to root, exploiting misconfigurations in SUID/SGID binaries, abusing Linux capabilities, targeting sudo flaws (NOPASSWD), and leveraging kernel or system service vulnerabilities. Essential for red team and penetration testing engagements.

This adapter acts as a specialized entry point for authorized security analysis, reverse engineering, and CTF tasks using the 'reverse-skill' repository. It guides users through a systematic, multi-step workflow, ensuring that all actions—from setting initial scope to resolving tools—are executed within the defined security contract of the repository. Ideal for defensive testing and deep technical investigations.

This specialized sub-agent is responsible for transforming high-level feature proposals and technical specifications into a formal, comprehensive 'design.md' document. It systematically captures all necessary technical details, including architectural decisions, data flow diagrams, detailed file changes, API contracts, and thorough testing strategies. Use this skill during the planning phase of any complex software change to ensure technical completeness and feasibility.

This skill enables the creation of robust evaluation frameworks for AI agent systems. It is used for systematically testing agent performance, validating context engineering choices, and measuring improvements over time. The approach accounts for non-determinism and multiple valid paths, utilizing multi-dimensional rubrics, LLM-as-judge methods, and human evaluation to ensure quality gates and catch regressions before deployment.

This skill provides systematic methodologies for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications. It covers detection techniques using parameter manipulation, exploitation via Burp Suite, and remediation strategies. Requires authorized security assessments and multiple test accounts to verify cross-user access. Outputs include vulnerability reports, proof of concept, and remediation recommendations.

Systematic methodology for using Shodan as a reconnaissance tool in authorized penetration testing, covering search queries, vulnerability discovery, IoT scanning, SSL analysis, and Python automation.

Provide systematic methodologies for automated SQL injection detection and exploitation using SQLMap. Covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques for various DBMS.

Rigorous visual validation expert specializing in UI testing, design system compliance, and accessibility verification. Uses visual regression tools and systematic analysis to verify UI modifications, responsiveness, and cross-platform consistency.

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.