Skill UI

This skill specializes in analyzing built frontend artifacts, going beyond static source code. It reconstructs the dynamic JavaScript structure, tracks chunk loading paths, and interprets source maps and build manifests to recover hidden routes, APIs, and runtime behaviors. Essential for deep security analysis and understanding execution flow from deployed bundles.

This specialized skill is designed for advanced security analysis, tracing the complete trust chain from cloud metadata services to accepted privilege. It is used in penetration testing or CTF environments to meticulously prove how metadata-derived credentials (such as instance identities or tokens) are issued and subsequently accepted by a cloud or control plane API, thereby exposing the decisive trust edge.

This specialized skill is designed for in-depth security and forensic analysis of Windows secrets protected by DPAPI. It maps the entire lifecycle of encrypted credentials, tracing the flow from the initial protected blob or masterkey through the context unwrapping (e.g., user logon, machine context, domain backup keys) to the specific service that finally accepts the plaintext secret. Use this to prove the decisive access edge in a complex compromise scenario.

A specialized skill for detecting discrepancies (drift) between declared API contracts (such as GraphQL schemas, OpenAPI specs, and RPC manifests) and the actual behavior of live backend handlers. It is used to identify hidden operations, contract mismatches, or vulnerabilities resulting from schema evolution, versioning skew, or implementation gaps. Must be used after initial sandbox assumptions are established.

This specialized skill is designed for deep forensic analysis in complex Windows environments, crucial for CTF and red teaming. It traces identity flows, including Active Directory (AD) origins, Kerberos ticket lifecycles, and OAuth authorization claims. Use it to correlate host artifacts (LSA, DPAPI, Sysmon) with identity evidence to map complete lateral movement and privilege escalation chains.

This specialized skill is designed for advanced forensic analysis and penetration testing within Windows environments. It focuses on extracting and proving the replayability of credentials, tickets, and secrets stored in LSASS memory, Kerberos ticket caches, DPAPI, and SSP artifacts. Use it to establish the minimal, actionable chain (host artifact -> extracted material -> accepted privilege) that proves a decisive edge for privilege escalation.

A specialized, downstream skill designed for forensic analysis within a confined sandbox environment, particularly for CTF challenges. It guides the user to inspect the full stack behavior, including API interactions, server routing, browser state (cookies, local storage), and asynchronous worker processes. Use this skill to trace complex, end-to-end request flows, debug authentication/session leaks, or diagnose discrepancies between frontend UI and backend enforcement.

Generates high-quality, structured technical documentation for READMEs, APIs, and architecture guides, adhering to progressive disclosure principles. It also specializes in creating formal, evidence-backed security reports for penetration testing, CTF writeups, and reverse engineering tasks, ensuring a professional, reusable format.

This skill facilitates the ingestion of unstructured clinical notes and reports from FHIR R4 EHR APIs (e.g., Epic, Cerner). It handles complex tasks including paginating large search results, decoding base64 attachments (PDF, text), and extracting narrative content. The extracted text is then passed to the OpenMed pipeline for HIPAA-compliant de-identification and subsequent NLP analysis, enabling structured data insights from raw clinical records.

A comprehensive, systematic workflow for reverse engineering client-side JavaScript. It guides users through five stages: Observation, Capture, Rebuilding, Patching, and Deep Dive. Applicable for locating API signatures, analyzing encryption parameters, tracking runtime function calls, and reconstructing complex web environments locally for evidence collection and reproduction. Utilizes advanced tools like jshookmcp and various js-reverse_* utilities.

This extension provides comprehensive management for external access using the standard Kubernetes Gateway API and Traefik as the underlying proxy. It supports multi-tenant scoping across cluster, workspace, and namespace levels, enabling robust, modern API gateway configuration within the KubeSphere ecosystem.

A comprehensive tool designed to help developers compare multiple technical approaches for solving a single problem. It systematically identifies and analyzes the trade-offs, complexity, performance, and learning curves associated with different design patterns (e.g., state management, data fetching, API design). Ideal for architectural reviews and making informed, robust technology stack decisions.