Skill UI

This advanced playbook details expert techniques for format string exploitation. It covers arbitrary stack reading (%p), memory writing (%n), and exploiting weaknesses like GOT/hook overwrites. Essential for CTF challenges and binary vulnerability analysis to achieve reliable Remote Code Execution (RCE).

This comprehensive guide covers the process of creating, analyzing, and securing Software Bills of Materials (SBOMs). It utilizes Syft to generate standards-compliant SBOMs (CycloneDX or SPDX) from container images and filesystems. The workflow details correlating these SBOMs with known CVEs using Grype for vulnerability analysis, and subsequently signing the artifacts with Cosign. This process is crucial for establishing supply chain trust, ensuring dependency visibility, and integrating vulnerability gating into CI/CD pipelines.

A comprehensive CI/CD quality gate for Quarkus microservices. This pipeline guides developers through critical stages: build integrity, static code analysis (Checkstyle, SonarQube), thorough unit/integration/API testing with coverage enforcement, dependency vulnerability scanning, native compilation validation (GraalVM), and performance load testing using K6. It ensures high code quality before PR or deployment.

A comprehensive guide for positioning computer science manuscripts for top-tier security conferences like USENIX Security. It covers core topics (systems, network, privacy, software security), required evidence (rigorous artifact, measurement, vulnerability analysis), and strategic advice on framing the work to meet adversarial reviewer expectations. Ideal for authors preparing high-stakes academic submissions.

A specialized downstream skill for CTF-sandbox workflows. Used to analyze complex security challenges driven by AI agent interactions, prompt injection, or infrastructure vulnerabilities. Focuses on tracing control chains involving untrusted input, tool side effects, deployment drift, container runtime issues, and CI/CD supply chain provenance. Ideal for rigorous vulnerability assessment in modern, distributed systems.

This specialized skill traces the complete lifecycle of an uploaded or imported file through complex backend systems. It maps the sequence from ingress to final consumer, tracking every derived artifact, archive extraction, format conversion, parser invocation, and deserialization step. It is crucial for security analysis, vulnerability research, and understanding how a file reaches a decisive backend effect after initial sandbox assumptions are made.

Expert advisor on EU Cyber Resilience Act (Regulation 2024/2847) for products with digital elements. Use for gap analysis, product classification, conformity assessment route selection, CE marking, SBOM requirements, ENISA vulnerability reporting, support periods, and manufacturer/importer/distributor compliance duties.

Provides IDA Pro reverse engineering capabilities for analyzing binaries, PE/ELF/APK/DLL/SO files, firmware, and malware. Supports decompilation, password discovery, vulnerability analysis, and software cracking workflows. Uses deterministic scripts for HTTP server management and file opening to avoid known MCP schema and lock issues.

This skill enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding. It applies First Principles and 5 Whys at a micro scale to maintain a stable mental model. Used for security auditing, architecture review, and threat modeling to reduce hallucinations and ensure bottom-up understanding.

Perform authorized static analysis on source code to identify security vulnerabilities using tools like Semgrep and CodeQL. This workflow covers pattern hunting, dangerous API detection, and verification of vulnerability fixes. Essential for white-box audits and PR security reviews.

Orchestrate multi-dimensional code reviews covering quality, security, performance, and testing using specialized AI agents. Includes architecture analysis, vulnerability assessment, and test coverage evaluation with actionable remediation guidance.

This skill functions as a dependency security expert, specializing in vulnerability scanning, license compliance, and supply chain security analysis. It evaluates project dependencies for known vulnerabilities, licensing issues, and outdated packages, providing actionable remediation strategies. Ideal for security audits, compliance checks, and planning package upgrades to mitigate risks.