Skill UI

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.

A specialized downstream skill for CTF-sandbox workflows. Used to analyze complex security challenges driven by AI agent interactions, prompt injection, or infrastructure vulnerabilities. Focuses on tracing control chains involving untrusted input, tool side effects, deployment drift, container runtime issues, and CI/CD supply chain provenance. Ideal for rigorous vulnerability assessment in modern, distributed systems.

This specialized skill is designed for advanced security analysis, tracing the complete trust chain from cloud metadata services to accepted privilege. It is used in penetration testing or CTF environments to meticulously prove how metadata-derived credentials (such as instance identities or tokens) are issued and subsequently accepted by a cloud or control plane API, thereby exposing the decisive trust edge.

This is the master workflow for complex security competitions, including CTF, reverse engineering, cloud, pwnable, and forensics. It establishes a controlled sandbox model, treating user-presented targets as internal fixtures by default. The orchestrator's role is to map the entry surface, prove one minimal end-to-end path, and intelligently route the investigation to the most relevant specialized analysis skill or reference material.

This tool analyzes SonarCloud quality issues for a specific pull request (PR). It fetches detailed metrics, including severity, issue type, and violation count, and generates a comprehensive, structured report. The output provides an executive summary, identifies top violating files and rules, and delivers a clear, actionable plan to guide developers toward merging high-quality code.