Skill UI

A comprehensive collection of six expert-level, structured workflows designed to elevate AI assistance from ad-hoc querying to repeatable, production-grade engineering practices. Users can evaluate prompts, design RAG architectures, plan context budgets, run security audits, build eval harnesses, and coach product strategy.

A comprehensive tool designed to search, download, and summarize academic papers from the arXiv repository. Users can search by topic or specific ID, manage result limits, and save PDFs locally. The system extracts detailed metadata, provides abstract summaries, and identifies key research contributions.

Detects cyber attacks against SCADA systems by analyzing industrial protocols, OT-focused IDS telemetry, and historian anomalies to highlight MITM, PLC injection, HMI compromise, and DoS threats that evade traditional IT tools.

Detect LSASS credential dumping, SAM exports, NTDS.dit theft, and comsvcs MiniDump abuse by correlating Sysmon Event ID 10, Windows Security logs, and SIEM rules, enabling SOC analysts to alert on suspicious access masks, tools, and shadow-copy creation patterns.

Detect defense-evasion techniques in endpoint logs by identifying log tampering, timestomping, process injection, security-tool disabling, and masquerading; use in threat hunting, detection engineering, or investigations that query telemetry from Sysmon, SIEM, or EDR.

Guides SOC teams through full phishing email investigations, from header and link analysis to attachment detonation, user impact mapping, and containment using tools such as Splunk, Microsoft Defender, URLScan, and sandboxes.

Use Wireshark, tshark, tcpdump, and Python tooling to inspect PCAP/PCAPNG data, reconstruct communications, surface malicious traffic, and support incident investigations with evidence of exfiltration or C2 activity.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Use steganalysis and metadata tools to detect concealed payloads inside images, audio, and video, guiding investigators through metadata review, automated scans, LSB statistics, and extraction attempts for covert channel detection.

This guide details how to use OWASP Threat Dragon, an open-source tool, for comprehensive threat modeling. It enables security teams and developers to create data flow diagrams (DFD), identify potential vulnerabilities using standard methodologies like STRIDE and LINDDUN, and generate detailed threat reports. It is crucial for secure design review, risk assessment, and continuous security validation in DevSecOps pipelines.

Use Eric Zimmerman’s EZ Tools suite with KAPE orchestrating MFTECmd, PECmd, RECmd and related utilities to parse registries, MFT, prefetch, logs and jump lists for structured Windows forensic timelines.

Connects to the MAXIA AI-to-AI marketplace on the Solana blockchain. This tool allows users to discover, buy, and sell AI services directly between decentralized agents. Features include comprehensive crypto intelligence, such as sentiment analysis and trending data; DeFi yield tracking; Web3 wallet security analysis (e.g., rug detection); and real-time GPU pricing, making it a comprehensive hub for Web3 AI interactions.