Skill UI

This skill converts unstructured documents (PDF, EPUB, DOCX, etc.) into actionable, structured agent skills. Instead of providing simple summaries, it deep-dives to extract core frameworks, mental models, key principles, techniques, and anti-patterns from educational material. Use this when you need to transform academic knowledge into a reusable, machine-readable toolkit for agents like Copilot CLI, Amp, or Claude Code.

A specialized skill for advanced runtime analysis of Android applications, primarily used in CTF and security research. It covers techniques like hooking specific system boundaries (JNI, WebView), bypassing security measures (SSL pinning, root checks), and recovering sensitive data or request signatures. Ideal for deep inspection of app trust boundaries and complex mobile logic.

Creates task-oriented technical documentation with progressive disclosure for READMEs, API docs, architecture docs, and markdown. Also generates formal security reports (reverse engineering, penetration testing, CTF, malware/APT analysis) in the user's project directory with Evidence-Finding-Path chain.

A comprehensive methodology for advanced red teaming and adversary emulation. This skill details how to bypass modern Endpoint Detection and Response (EDR) solutions (e.g., Defender, CrowdStrike, SentinelOne). Techniques include unhooking ntdll, utilizing indirect syscalls (Hell's Gate), patching ETW providers, and AMSI context blinding. Essential for authorized penetration testing and self-developed implant development, aligning with MITRE ATT&CK T1562.

This tool performs a comprehensive analysis of AI configuration file evolution within a Git repository. It tracks when specific AI configs were first introduced, charts monthly commit velocity related to AI features, highlights key PRs that shaped the development, and synthesizes the project's AI maturity phases. Ideal for mapping AI adoption timelines and assessing technical maturity.

This skill generates complete, deploy-ready static landing pages by analyzing a source code repository. It reads key files (README.md, CHANGELOG.md, etc.), extracts structured content (features, installation guides, FAQ), and compiles it into a professional, responsive HTML/CSS/JS site. Ideal for standardizing open-source project showcases, converting technical documentation into marketing pages, or quickly building a project homepage.

A comprehensive tool designed to help developers compare multiple technical approaches for solving a single problem. It systematically identifies and analyzes the trade-offs, complexity, performance, and learning curves associated with different design patterns (e.g., state management, data fetching, API design). Ideal for architectural reviews and making informed, robust technology stack decisions.

This tool tests your deep understanding of code you have recently written or reviewed. It generates structured, multi-level questions (Recall, Understanding, Application, Analysis, Synthesis) based on the provided code. Users can focus the quiz on specific areas like error handling, performance, or security, making it an excellent mechanism for continuous learning and solidifying technical knowledge.

This tool provides a structured, multi-stage method for learning any technical concept, from basic definitions to advanced implementation details and common pitfalls. It progressively deepens the explanation, making complex topics easy to grasp.

Comprehensive workflow for analyzing suspected malware via static, dynamic, and behavioral techniques. Covers IOC extraction, YARA/Sigma rule generation, sandbox automation, and anti-analysis bypassing.

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

An advanced orchestrator that manages the entire software development lifecycle (SDLC) from initial concept vetting to final code deployment. It guides the process through distinct, sequential stages: Product Direction Review (CEO), Technical Architecture Review (Engineering), Detailed Planning, Validation, and final Execution (PR). This tool ensures all critical gates are passed before writing code, minimizing risks and ensuring alignment.