Skill UI

This skill automates the execution of red team phishing campaigns using the Python gophish library. It enables users to create sophisticated email templates with tracking pixels, configure SMTP profiles, import target lists from CSV, and launch full-scale simulations. The system tracks key metrics, including open rates, click rates, and submitted credentials, providing essential data for security awareness training and vulnerability assessments.

Automates Covenant C2 operations for authorized red team engagements by managing listeners, launchers, grunt deployment, and task execution via the REST API, producing JSON reports for documentation.

Executes MITRE ATT&CK atomic tests via atomic-operator to emulate threats, run attack simulations, and validate SIEM/EDR detection coverage during purple team exercises.

Techniques for bypassing Web Application Firewalls using encoding, HTTP tricks, payload splitting, and SQLMap tamper scripts to deliver SQLi and XSS payloads during penetration tests and red-team engagements.

This tool provides a structured methodology for triaging raw vulnerability findings generated by DAST and SAST scanners. It utilizes the OWASP risk rating methodology to validate true positives, filter out false positives, and calculate a comprehensive risk score (Risk = Likelihood x Impact). This process significantly reduces alert fatigue and ensures development teams prioritize remediation efforts on the most critical and exploitable vulnerabilities.

Guides security teams through end-to-end wireless network penetration testing—scanning 802.11 bands, capturing WPA handshakes, cracking credentials, deploying rogue APs, and validating segmentation and client isolation with Aircrack-ng, Hashcat, Bettercap and supporting tools.

Guides security teams through hardening AWS IAM configurations by scoping policies, enabling Access Analyzer, enforcing permission boundaries, and rotating credentials so cloud accounts maintain least privilege for audits, migrations, or remediation.

Guides teams on hardening managed Kubernetes clusters (EKS/AKS/GKE) by enforcing Pod Security Standards, workload identity, RBAC scoping, image admission controls, network policies, and runtime security monitoring tailored to each cloud provider.

Guides teams through securing serverless compute (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least-privilege IAM, replacing hardcoded secrets with managed stores, embedding dependency scanning in CI/CD, validating inputs, and monitoring runtimes to block injections, credential theft, and supply-chain attacks.

Structured incident response playbooks guide SOC analysts through alert acknowledgement, enrichment, severity scoring, playbook selection, team paging, and documentation so high-priority breaches are classified and escalated consistently.

PydanticAI brings Pydantic-style validation and type safety to LLM agent workflows, offering structured outputs, dependency injection, and tool integrations across providers so Python teams can test, monitor, and reuse agents reliably.

Behavioral X-Ray probes models through refusal, formatting, reasoning, persona, tool use, and grounding dimensions, auto-tagging each response and building a styled HTML report for red-team, compliance, and selection workflows.