Skill UI

A comprehensive toolset for digital forensics, designed to detect, extract, and analyze covert data hidden within images, audio, and video files. It utilizes advanced steganalysis techniques (LSB, DCT, frequency domain analysis) and specialized tools (StegDetect, zsteg, binwalk) to uncover hidden communications channels, making it crucial for investigations involving data exfiltration or insider threats.

This tool builds comprehensive forensic super-timelines by using Plaso to correlate events across diverse sources. It aggregates data from file system metadata, event logs, browser history, and registry artifacts into a unified chronological view. This capability is essential for complex digital forensic investigations requiring cross-source event correlation or detailed activity sequence reporting.

This suite provides comprehensive utilities for digital forensic investigations, allowing users to analyze critical Windows artifacts. Tools like KAPE, MFTECmd, PECmd, and RECmd parse registry hives, $MFT records, prefetch files, and event logs. It is essential for building a robust timeline of program execution, file access patterns, and system persistence during DFIR incident response.

This comprehensive tool manages the complete lifecycle of ML experiments, providing robust deployment capabilities across diverse environments. It supports running training jobs on local GPUs, dedicated remote servers, Vast.ai, and serverless platforms like Modal. The workflow handles environment detection, code synchronization (rsync/git), dependency pinning, and integrates advanced logging tools (e.g., W&B), ensuring reliable, scalable, and reproducible ML training runs.

Grype is an open-source vulnerability scanner by Anchore that inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated Software Bill of Materials (SBOMs) to match packages against multiple databases including NVD, GitHub Advisories, and OS-specific feeds. It is ideal for security assessments, CI/CD integration, and implementing severity-based build gates.

A comprehensive guide for securing container registries by enforcing vulnerability scanning (Trivy, Grype), generating Software Bill of Materials (SBOM), and implementing digital signing using Cosign and Sigstore. This solution is essential for establishing robust CI/CD pipelines and preventing supply chain attacks before image promotion.

A comprehensive guide to hardening GitHub Actions CI/CD workflows against modern supply chain attacks, credential theft, and privilege escalation. Learn techniques such as pinning actions to immutable SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection from untrusted inputs, and implementing required review gates for secure deployment pipelines. Essential for any project handling production secrets or elevated permissions.

Vibers provides a human code review workflow for AI-generated GitHub projects; add the collaborator, GitHub Action, and commit guidance to receive spec- and security-focused feedback plus follow-up PR fixes.

Spawns multiple AI agents in isolated git worktrees to compete on the same task, then ranks results by metrics or LLM judge and merges the winning branch.

This guide details the process of parsing Windows LNK shortcut files to extract crucial forensic artifacts. It gathers information such as target paths, MAC timestamps, volume serial numbers, and machine identifiers. This technique is invaluable in digital forensics, helping investigators reconstruct user activity timelines, track accessed files on removable media, or build comprehensive evidence from compromised systems.

CCPM orchestrates software delivery from PRD through epics and GitHub issues into parallel agent execution, covering planning, decomposition, syncing, workstart, and status checks with mandated script-based reporting.

This command merges the results of the highest-ranked agent from a specified or latest session into the base branch. It automates the finalization of a development cycle by ensuring a clean and traceable history. Functionality includes merging the winner's branch, archiving all losing agents' commits using Git tags, and cleaning up temporary worktrees.