Skill UI

Utilizes structured critical reasoning to rigorously stress-test ideas, plans, and decisions. This skill allows you to play devil's advocate, conduct pre-mortems, execute red-teaming exercises, or audit underlying assumptions. It employs multiple advanced modes, including Socratic questioning, Hegelian dialectics, and Falsificationism, to identify blind spots, weaknesses, and unstated assumptions before commitment.

Guides planning and executing MITRE ATT&CK-aligned red team engagements from reconnaissance through reporting, emphasizing stealthy payloads, lateral movement, defined objectives like domain dominance and data exfiltration, and the legal/prerequisite controls needed to validate detection and response readiness.

This guide details advanced techniques used in red teaming and penetration testing to elevate user privileges from a low-level account to root access on a compromised Linux system. It covers exploiting misconfigurations, vulnerable services (like SUID/SGID binaries), improper sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), and abuse of system services like Cron jobs and Systemd. Essential for authorized security assessments.

A comprehensive security auditing framework designed to systematically detect sensitive information disclosure from Large Language Models (LLMs). It uses multi-phase, escalating dialogue probes to test for leaks such as system prompts, API keys, PII, and internal configurations. Essential for red teaming and rigorous model security assessment.

A comprehensive offensive checklist for assessing the security and robustness of AI and Large Language Model (LLM) applications. It covers advanced adversarial techniques such as prompt injection, jailbreaking, model extraction, data poisoning, and analyzing system vulnerabilities across components. Essential for red-teaming and security assessment.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.