Skill UI

A comprehensive guide for structuring the 'Related Work' section for top-tier HCI conferences (e.g., UIST). This document emphasizes that the section must function as a novelty proof, not a literature survey. It teaches authors to organize content by capability delta, utilize detailed comparison tables, and trace three critical lineages: technique, toolkit, and commercial practice, ensuring the work's unique contribution is clearly established.

This guide outlines the rigorous process for authors responding to a "revise" verdict at top-tier academic conferences. It teaches authors how to treat reviewer feedback as a formal contract, manage a tight revision timeline, structure necessary experiments, and write a highly traceable change document that explicitly addresses every required point.

This comprehensive guide outlines the rigorous standards required for achieving experimental reproducibility in systems research papers (e.g., VLDB). It instructs authors on disclosing critical context, including hardware specifications, software configurations, data provenance, workload patterns, and handling measurement variance. Adhering to these guidelines ensures that all performance claims are fully traceable from raw data to published figures, meeting the highest standards of academic review.

This guide outlines the mandatory requirements for authors publishing quantitative or mixed-method research in academic journals. It details the process of creating a complete replication package—including raw data, master scripts, seeds, and extensive README documentation—and depositing it in a trusted data repository (like Dataverse). It ensures scholarly rigor by guaranteeing that published findings are fully reproducible and traceable.

A specialized skill for analyzing client-side persistence mechanisms, including cookies, localStorage, sessionStorage, IndexedDB, and Service Workers. It is crucial for security testing and CTF environments where application behavior or critical decision branches are determined by stored session state, cached data, or local client-side variables. Use this to trace the smallest stateful sequence leading to a decisive outcome.

A specialized skill for analyzing the discrepancy between static Kubernetes/Compose manifests and the actual live operational state of a container runtime. It traces complex dependencies, such as secrets consumption, sidecar/init container modifications, network routing, and mounted volume paths. Use this when the core challenge involves proving how the live execution path differs from the documented intent, forming a minimal, verifiable evidence chain.

This specialized skill traces the complete lifecycle of an uploaded or imported file through complex backend systems. It maps the sequence from ingress to final consumer, tracking every derived artifact, archive extraction, format conversion, parser invocation, and deserialization step. It is crucial for security analysis, vulnerability research, and understanding how a file reaches a decisive backend effect after initial sandbox assumptions are made.

This specialized skill is designed for advanced reverse engineering of firmware images in CTF environments. It guides users to map partition tables, trace complex boot chains (bootloader, kernel, init), analyze update packages, and recover embedded secrets or credentials. Use it when understanding the device's core architecture and execution path is necessary to find the decisive artifact.

This specialized skill is designed for deep forensic analysis in complex Windows environments, crucial for CTF and red teaming. It traces identity flows, including Active Directory (AD) origins, Kerberos ticket lifecycles, and OAuth authorization claims. Use it to correlate host artifacts (LSA, DPAPI, Sysmon) with identity evidence to map complete lateral movement and privilege escalation chains.

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.

A highly specialized skill for advanced security analysis, designed to trace complex Kerberos delegation chains (including constrained, unconstrained, and RBCD). Use this skill to pinpoint the exact delegation edge, analyze ticket minting (S4U), and prove the effective privilege gained by a target service, going beyond simple domain compromise statements.

This advanced skill specializes in analyzing complex mail-related abuse scenarios, including OAuth consent flows, forwarding rule exploitation, shared mailbox access, and transport rule manipulation. It is used in forensic investigations to trace message artifacts, identify persistence mechanisms, and prove privilege escalation or data exfiltration following a compromise.