Skill UI

A comprehensive framework for authorized security assessments of Operational Technology (OT) and Industrial Control Systems (ICS). It emphasizes a 'passive-first' approach, covering Purdue model zoning, analyzing industrial protocols (Modbus, DNP3, etc.), and identifying exposure points on SCADA/DCS environments. The methodology strictly avoids disruptive write operations on PLCs, prioritizing read-only validation and safe network analysis for physical safety.

This skill parses standardized C-CDA/CCD XML clinical documents exported from EHRs. It extracts both human-readable section narrative text and coded entries, mapping them by LOINC codes and template IDs. It is essential for preparing clinical free-text data for subsequent NLP analysis and supports XML-aware de-identification while preserving document structure.

This skill decodes complex pipe-delimited HL7 v2.x messages (including ADT, ORU, MDM) into structured segments and fields. It is essential for ingesting HL7 feeds from interface engines, allowing users to surface embedded clinical narratives (OBX-5 and NTE-3) for subsequent Natural Language Processing (NLP) analysis. It also provides segment-aware de-identification capabilities to redact PHI while preserving the native HL7 message structure.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

A specialized framework for conducting non-Wi-Fi RF/SDR security research in controlled, authorized laboratory environments. Focuses on passive signal identification, protocol analysis (e.g., remote controls, ADS-B), and feasibility studies. Emphasizes strict legal compliance, requiring analysis to be performed only in shielded labs with explicit authorization, and defaults to receiving-only mode.

Provides comprehensive techniques for reverse engineering complex software targets. Use this when the primary goal is to understand the internal workings of compiled, obfuscated, packed, or virtualized binaries (including APKs, WASM, and firmware). It covers static and dynamic analysis, anti-debugging bypass, and deobfuscation methods, helping users understand the target code's internal mechanisms for security research and vulnerability analysis.

This skill applies consistent date shifting to clinical text, ensuring that absolute dates are obscured while critically preserving the temporal intervals between medical events. It is essential for longitudinal research or survival analysis where time-to-event data must be preserved under HIPAA Safe Harbor rules. It maintains the integrity of time differences (e.g., length of stay, visit gaps) by applying a stable, per-patient offset.

A comprehensive framework for assessing software supply chain security. It covers generating Software Bill of Materials (SBOM), performing Software Composition Analysis (SCA) on open-source dependencies, auditing CI/CD pipelines, and analyzing container images. This skill helps identify vulnerabilities, ensure build integrity, and verify component provenance across the entire development lifecycle.

This comprehensive guide outlines a structured methodology for conducting authorized security testing on desktop thick clients (Win/macOS/Linux). It covers critical attack vectors, including local storage analysis, Inter-Process Communication (IPC) vulnerabilities, network traffic interception, client-side trust boundaries, and advanced reverse engineering techniques using tools like IDA and Ghidra.

This skill guides the researcher through the comprehensive process of updating the AI agent security threat intelligence database. It involves executing targeted searches for new malicious skills, CVEs, attack vectors, and defensive tools. The process mandates critical analysis, de-duplication, risk assessment, and structured version control to maintain a cutting-edge security posture for AI agents.

This guide outlines a structured methodology for authorized wireless security assessments. It covers essential techniques such as Wi-Fi data capture, WPA/WPA2 handshake analysis, and rogue Access Point detection. It is designed for assessing corporate network security, verifying wireless isolation, and providing professional penetration testing recommendations, strictly adhering to legal scope and authorization.

A comprehensive guide detailing advanced, authorized techniques for Active Directory security testing and red teaming. It covers critical attack vectors such as Kerberos exploitation, BloodHound path analysis, NTLM relay, and domain privilege escalation. Designed for security professionals to systematically map and exploit domain weaknesses.