Skill UI

This specialized skill is designed to analyze complex security flaws involving forced authentication (coercion) and identity relay chains. It guides users to trace and document the complete, minimal path from the initial coercion trigger (e.g., a specific service or protocol edge) through intermediate hops, to the final service that accepts the relayed credentials. Use this for deep security research, forensics, and documenting the decisive sequence leading to privilege escalation or code execution.

This specialized skill guides deep-dive analysis for binary-heavy challenges, including CTF, malware analysis, and advanced forensics. It covers reverse engineering binaries, unpacking samples, inspecting memory dumps, debugging crashes, and building exploit chains by correlating artifacts like files, memory, and network packets.

A specialized, downstream skill designed for forensic analysis within a confined sandbox environment, particularly for CTF challenges. It guides the user to inspect the full stack behavior, including API interactions, server routing, browser state (cookies, local storage), and asynchronous worker processes. Use this skill to trace complex, end-to-end request flows, debug authentication/session leaks, or diagnose discrepancies between frontend UI and backend enforcement.

This skill provides a structured, multi-step guide for automating interactions with desktop applications. It emphasizes obtaining a reliable context via observation, preferring UI Automation (using element IDs for buttons, menus, or editable fields) over raw coordinates. It covers best practices for keyboard input and ensuring state consistency across major operating systems (Windows/macOS), making it suitable for complex, reliable process automation.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.

This skill guides the creation of computable phenotypes and patient cohorts using the OHDSI/OMOP CDM standards. It allows users to define precise, executable criteria by combining standard concept sets (like PheKB) with advanced Natural Language Processing (NLP) features extracted from free clinical text. Use this when structured codes alone are insufficient to capture critical health information (e.g., symptoms, social context).

A comprehensive guide for authorized digital forensics investigation. It covers critical areas including memory dump analysis (using Volatility), disk timeline reconstruction, PCAP network traffic analysis, and system artifact triage (like Event Logs and Prefetch). Essential for incident response, evidence preservation, and threat hunting to maintain a robust chain of custody.

Generates high-quality, structured technical documentation for READMEs, APIs, and architecture guides, adhering to progressive disclosure principles. It also specializes in creating formal, evidence-backed security reports for penetration testing, CTF writeups, and reverse engineering tasks, ensuring a professional, reusable format.

This guide provides a systematic framework for authorized email security reviews. It covers advanced phishing analysis, including deep dives into email headers, assessing SPF/DKIM/DMARC compliance, identifying Business Email Compromise (BEC) patterns, and researching mailbox token abuse. It is essential for incident response, threat intelligence, and security architecture review.

A comprehensive guide for designing and building large-scale, resilient platforms using the evolutionary modular monolith approach. It enforces strong logical boundaries using DDD principles (bounded contexts, flat-by-aggregate) and implements necessary patterns like Anti-Corruption Layers and transactional outboxes. Use this when defining a system's structure, choosing between monolith and microservices, or ensuring robust decoupling from external vendors (e.g., ERP, AI).

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

This tool provides a comprehensive and safe mechanism to remove a git worktree. It includes multiple safety checks, such as verifying if the branch is protected, checking for uncommitted changes, and confirming merge status. Furthermore, it guides the user through the entire cleanup process, including deleting local and remote branches, pruning references, and reminding about associated database cleanup.