Skill UI

Generates high-quality, structured technical documentation for READMEs, APIs, and architecture guides, adhering to progressive disclosure principles. It also specializes in creating formal, evidence-backed security reports for penetration testing, CTF writeups, and reverse engineering tasks, ensuring a professional, reusable format.

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

This specialized skill provides a deep workflow for reverse engineering stripped Go and Rust binaries. It guides the recovery of lost runtime metadata, including symbols, pclntab data, and panic strings. The process addresses language-specific challenges, such as Go's interface structures and Rust's complex async state machines, serving as a crucial complement to general decompilers like IDA or Ghidra.

A comprehensive, systematic workflow for reverse engineering client-side JavaScript. It guides users through five stages: Observation, Capture, Rebuilding, Patching, and Deep Dive. Applicable for locating API signatures, analyzing encryption parameters, tracking runtime function calls, and reconstructing complex web environments locally for evidence collection and reproduction. Utilizes advanced tools like jshookmcp and various js-reverse_* utilities.

This comprehensive guide details the methodology for reverse engineering macOS and Mach-O binaries. It covers analyzing application bundles, deciphering Objective-C/Swift symbols, examining code signing and hardened runtime features, and performing both static (using tools like Ghidra, IDA) and dynamic analysis (using lldb, Frida) to aid in malware analysis and platform security research.

A comprehensive guide covering the entire lifecycle of malware analysis, from initial triage and deep static reverse engineering to automated sandboxing and behavioral monitoring. It details a multi-stage workflow that includes extracting Indicators of Compromise (IOCs), generating detection rules using YARA and Sigma, and identifying anti-analysis techniques. Ideal for threat intelligence researchers and incident responders.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.

This mode defines an autonomous, senior-level AI agent capable of resolving complex tasks from start to finish with minimal human supervision. It operates by strictly verifying every claim against real evidence (live web search, codebase, available tools). The agent prioritizes action over questioning, only interrupting the user for irreversible actions, genuine dead-ends, or critical ambiguities, ensuring maximum efficiency in hands-on engineering and operational workflows.

An advanced orchestrator that manages the entire software development lifecycle (SDLC) from initial concept vetting to final code deployment. It guides the process through distinct, sequential stages: Product Direction Review (CEO), Technical Architecture Review (Engineering), Detailed Planning, Validation, and final Execution (PR). This tool ensures all critical gates are passed before writing code, minimizing risks and ensuring alignment.

This gate review forces a transition from vague product direction to a concrete, buildable technical specification. It mandates the creation of architectural diagrams, data flow maps, state machines, and failure mode inventories before a single line of implementation code is written. Essential for complex features with async components or external dependencies.

A comprehensive, multi-phase workflow guide for authorized reverse engineering of complex network protocols. Ideal for analyzing proprietary formats such as custom TCP/UDP binary protocols, Protobuf, gRPC, WebSocket frames, and reconstructing state machines from raw PCAP data. This guide covers data collection, field layout restoration, serialization recovery, and secure replaying.

Provides comprehensive techniques for reverse engineering complex software targets. Use this when the primary goal is to understand the internal workings of compiled, obfuscated, packed, or virtualized binaries (including APKs, WASM, and firmware). It covers static and dynamic analysis, anti-debugging bypass, and deobfuscation methods, helping users understand the target code's internal mechanisms for security research and vulnerability analysis.