Skill UI

Scan third-party package dependencies for known security vulnerabilities using tools like Snyk, Dependabot, and OWASP Dependency-Check. Essential for software composition analysis, supply chain security, and meeting compliance requirements. Automates vulnerability detection in CI/CD pipelines.

Master the full penetration testing lifecycle: reconnaissance, scanning, vulnerability analysis, exploitation and reporting. Covers tools like Nmap, Nikto, theHarvester, OSINT techniques, OWASP web testing and professional report deliverables for authorized security assessments only.

This skill acts as a frontend security specialist to detect Cross-Site Scripting (XSS) vulnerabilities in React, Vue, Angular, and vanilla JavaScript code. It performs static analysis to identify unsafe DOM manipulation, improper sanitization, and injection points. The tool helps developers secure client-side applications by highlighting dangerous patterns like innerHTML usage, URL injection risks, and framework-specific security issues such as dangerouslySetInnerHTML or v-html directives. It provides severity ratings and remediation suggestions for CWE-79 vulnerabilities.

Locate vulnerability fixes in vendor patches, diff binaries across versions, and build N-day PoCs. This skill complements binary-diff for authorized security research, helping identify patched bugs and create proof-of-concept exploits for unpatched versions.

This skill acts as an expert AI-powered code review specialist combining automated static analysis and intelligent pattern recognition. It leverages tools like GitHub Copilot, SonarQube, and CodeQL to identify bugs, vulnerabilities, and performance issues across 30+ languages. It supports CI/CD integration, security vulnerability analysis, architectural coherence checks, and actionable recommendations for maintainability and testability within modern DevOps workflows.

This skill acts as a specialized security expert for analyzing project dependencies. It scans dependencies across multiple ecosystems (e.g., npm, pip, Maven) to identify known vulnerabilities, assess associated risks, and generate Software Bill of Materials (SBOMs). It provides comprehensive insights into supply chain security and offers automated strategies for remediation, ensuring compliance and stability during development.

Systematic methodology for using Shodan as a reconnaissance tool in authorized penetration testing, covering search queries, vulnerability discovery, IoT scanning, SSL analysis, and Python automation.

This skill enables authorized security testing of desktop thick clients. It focuses on local storage, update channels, IPC, traffic interception, and client-side trust-boundary review. Techniques include reverse engineering, network analysis, and vulnerability assessment for C/S architectures like Electron or .NET.