Skill UI

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

A comprehensive, four-phase methodology for debugging complex software issues. It guides users through root cause investigation, pattern analysis, hypothesis testing, and controlled implementation. The core principle emphasizes finding the underlying cause rather than applying quick, symptomatic fixes, ensuring robust and reliable code improvements across various failure scenarios.

A comprehensive resource providing codified expertise for managing complex energy portfolios for large commercial and industrial (C&I) consumers. Covers electricity and gas procurement, tariff structure analysis (TOU, RTP), demand charge mitigation, PPA evaluation, and multi-site energy strategy development. Ideal for optimizing utility spending, understanding complex utility bills, and building resilient, sustainable energy supply chains.

A guide for designing and structuring empirical tables and figures for submissions to International Organizations (IOs). Focuses on meeting strict word limits, ensuring exhibits are self-contained, reproducible, and clearly separating core arguments (main text) from supporting details (supplementary material). Best practices include explicit unit labeling, prioritizing effect plots over dense tables, and guaranteeing that all displayed numbers match the original analysis code.

A guide for advanced data analysis in policy evaluation, extending beyond standard causal estimates. It emphasizes rigorous reporting of cost-benefit ratios, distributional consequences (who gains and who pays), robust heterogeneity testing, and honest uncertainty quantification necessary for high-level policy academic journals. Essential for turning effect sizes into decision-relevant policy narratives.

A specialized skill for advanced security analysis, particularly in CTF scenarios. This tool guides users through analyzing live iOS runtime behavior, including Objective-C/Swift method tracing, inspecting Keychain data, bypassing SSL pinning, and recovering accepted network requests. It is designed to be used after a primary orchestration tool has established the sandbox environment, focusing on the details of trust boundaries.

This advanced skill specializes in analyzing complex mail-related abuse scenarios, including OAuth consent flows, forwarding rule exploitation, shared mailbox access, and transport rule manipulation. It is used in forensic investigations to trace message artifacts, identify persistence mechanisms, and prove privilege escalation or data exfiltration following a compromise.

A specialized skill for analyzing complex, host-to-host lateral movement chains within a Windows environment. It focuses on tracing protocols like WinRM, SMB, and RDP, replaying captured Kerberos tickets, understanding privilege edges, and identifying the exact accepting service or host that facilitates credential movement. Used in advanced penetration testing and digital forensics scenarios.

A comprehensive guide for performing reverse engineering using Ghidra. This skill is essential for scenarios where commercial tools like IDA are unavailable, or when performing large-scale, automated headless analysis. It covers the entire workflow, from project setup and function decompilation to advanced headless scripting and integration with other exploit tools.

A comprehensive methodology for deep security testing of both Android (APK) and iOS (IPA) applications. This guide covers the entire workflow, from initial information gathering and static analysis (decompilation, code structure analysis) to advanced dynamic instrumentation, network interception, and bypassing modern security measures like SSL Pinning, Root/Jailbreak detection, and anti-debugging.