Skill UI

Provides IDA Pro reverse engineering capabilities for analyzing binaries, PE/ELF/APK/DLL/SO files, firmware, and malware. Supports decompilation, password discovery, vulnerability analysis, and software cracking workflows. Uses deterministic scripts for HTTP server management and file opening to avoid known MCP schema and lock issues.

This skill helps organizations determine mandatory reporting duties, receiving authorities, and precise deadlines following a security incident, data breach, or vulnerability exploitation. It synthesizes reporting requirements from major EU regimes, including GDPR, NIS2, DORA, and the Cyber Resilience Act, providing a cited map of obligations based on the entity's role and location. It determines *what* must be reported, citing official legal texts.

An advanced, automated pipeline designed for comprehensive, deep-dive Open Source Intelligence (OSINT) gathering and reconnaissance against authorized domains. It executes the full methodology—from passive data harvesting and subdomain discovery to multi-agent content fan-out, vulnerability identification (BOLA/IDOR), and automated findings generation. The output is a single, consolidated, multi-tab deliverable (XLSX), eliminating the need for manual follow-up or superficial reporting.

This skill guides the advanced process of reverse engineering vulnerabilities from vendor-released security patches (N-day). By performing binary diffing between patched and unpatched binaries, users can pinpoint specific code changes (e.g., new boundary checks, locks) to infer the original vulnerability class (e.g., OOB, Race Condition) and develop a working Proof of Concept (PoC) for weaponization.

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.

A practical methodology for turning a known vulnerability into a stable working remote exploit. Covers stack overflow, heap exploitation, and Linux kernel pwn, addressing real-world gaps between local CTF success and reliable remote execution: libc version mismatches, heap spray timing, SMEP/SMAP/KASLR, stack alignment, and network buffering. Uses pwntools with GEF/pwndbg, ROPgadget/Ropper, one_gadget, libc-database, and qemu-system.

This skill analyzes code for language and framework-specific security best practices. It is designed to help users write secure-by-default code, passively detect major vulnerabilities, or generate comprehensive, prioritized vulnerability reports. Supports languages including Python, JavaScript/TypeScript, and Go, ensuring robust security standards throughout the development lifecycle.

A comprehensive, black-box workflow designed for professional bug bounty hunting and penetration testing. It guides users through a 5-stage methodology (Intake, Recon, Enum, Hunt, Report), covering 19+ advanced attack playbooks (e.g., RCE, SQLi, XSS, SSRF). The skill integrates real-world exploit cases, structured payloads, and WAF bypass techniques for maximizing vulnerability discovery in web applications and APIs.

Comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing. Covers vulnerability discovery, authentication bypass, IDOR exploitation, injection attacks, and API-specific vectors.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

This skill enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding. It applies First Principles and 5 Whys at a micro scale to maintain a stable mental model. Used for security auditing, architecture review, and threat modeling to reduce hallucinations and ensure bottom-up understanding.

This skill empowers you to implement secure backend coding practices, focusing on input validation, authentication, and API security. It covers vulnerability prevention, defensive programming, and secure architecture implementation. Ideal for building security-first applications that resist common attack vectors like SQL injection, XSS, and CSRF. Includes expertise in database protection, secret management, and HTTP security headers.