Skill UI

A comprehensive audit checklist for designing and evaluating security experiments, adhering to the highest academic standards (e.g., USENIX Security). It guides users through verifying adaptive attacker models, calculating precision at realistic base rates, ensuring statistical honesty for stochastic results, and maintaining ethical compliance when working with live systems.

This detailed guide helps researchers determine the optimal top-tier venue (e.g., USENIX Security, IEEE S&P, ACM CCS) for their security research paper. It emphasizes that venue selection must be based on the committee's core expertise and the existence of reusable artifacts, measurements, or systems evidence, ensuring the work has the necessary technical depth to succeed.

A specialized downstream skill for CTF-sandbox workflows. Used to analyze complex security challenges driven by AI agent interactions, prompt injection, or infrastructure vulnerabilities. Focuses on tracing control chains involving untrusted input, tool side effects, deployment drift, container runtime issues, and CI/CD supply chain provenance. Ideal for rigorous vulnerability assessment in modern, distributed systems.

This specialized skill traces the complete lifecycle of an uploaded or imported file through complex backend systems. It maps the sequence from ingress to final consumer, tracking every derived artifact, archive extraction, format conversion, parser invocation, and deserialization step. It is crucial for security analysis, vulnerability research, and understanding how a file reaches a decisive backend effect after initial sandbox assumptions are made.

A specialized downstream skill for analyzing security vulnerabilities in complex agentic systems. This tool is designed for red teaming and penetration testing, focusing on detecting prompt injection, retrieval poisoning, memory contamination, planner drift, and tool boundary abuse within multi-step LLM chains. Use when proving how untrusted inputs compromise system integrity.

A specialized skill for analyzing and reproducing complex, timing-dependent bugs in concurrent systems. Use this to investigate race windows, ordering bugs, lock gaps, stale reads, or state inconsistencies where the final outcome depends critically on request timing or asynchronous execution order. Essential for deep security auditing and debugging of distributed transactions.

This guide outlines the methodology for conducting hardware security research on embedded systems. It covers physical interface analysis (UART, JTAG, SWD), debug pad triage, secure boot evaluation, and offline firmware extraction. It emphasizes systematic, non-destructive testing protocols and responsible handling of physical devices.

A comprehensive security assessment skill for identifying vulnerabilities in federated identity systems, including SAML, OIDC, and OAuth 2.0 flows. It covers common misconfigurations, such as signature tampering, PKCE failures, redirect URI issues, and token confusion, ensuring robust SSO implementation.

A comprehensive framework for conducting authorized security assessments on Large Language Models (LLMs) and AI agents. It covers critical vulnerabilities including advanced prompt injection (OWASP Top 10), tool abuse, RAG data poisoning, memory manipulation, and system prompt extraction. Ideal for red teaming, security auditing, and ensuring the robustness of AI systems in production environments.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

This framework provides a rigorous pre-execution review mechanism for proposed actions by AI agents or systems. It functions as a critical safety boundary, auditing the entire decision path—from initial request to proposed tool execution—without authorizing or executing anything. It verifies action conformity, evidence integrity, temporal validity, and reviewer independence to ensure system compliance and security.

An expert advisor for Australian government entities and their supply chains, specializing in the Australian Defence Signal (ASD) Information Security Manual (ISM). This skill guides users through the entire lifecycle of system security, including Gap Analysis, System Authorisation (ATO), IRAP preparation, and creating mandated security documentation (e.g., SSP). It ensures compliance with risk-based security standards for classified government systems.