Skill UI

A comprehensive guide and toolkit for advanced network reconnaissance using Nmap. It covers sophisticated techniques including service version detection, vulnerability scanning via Nmap Scripting Engine (NSE), firewall evasion methods (e.g., fragmentation, decoy addressing), and structured output parsing for integration into vulnerability management pipelines. Essential for authorized penetration testing.

A comprehensive guide to securing serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions). It covers critical security aspects including enforcing least-privilege IAM roles, integrating secrets management, vulnerability scanning of dependencies, input validation, and implementing runtime monitoring for robust DevSecOps practices.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

This skill enforces best practices for managing Go modules, focusing on stability, security, and maintainability. It guides users through essential workflows like dependency addition, safe upgrading (e.g., patch updates), cleanup (go mod tidy), and critical vulnerability scanning (govulncheck). Use this when initializing, updating, or auditing a Go project's dependency tree to ensure supply chain safety.

This skill guides users through advanced security auditing and best practices for Golang development. It acts as a senior security engineer, focusing on defense in depth by analyzing critical areas like injection patterns, cryptography, secrets management, and authorization flaws. It supports full codebase audits (using STRIDE and DREAD scoring) and precise PR vulnerability reviews, ensuring secure and resilient Go applications.

This skill provides a comprehensive framework for conducting high-quality code reviews. It guides developers through checking code across four critical dimensions: Correctness (functional accuracy and edge cases), Maintainability (readability and documentation), Performance (efficiency and resource usage), and Security (input validation and vulnerability management). It also emphasizes providing actionable, constructive, and empathetic feedback.

This router guides the testing of systemic flaws in business processes and state machines. It is essential when vulnerabilities stem from workflow abuse, race conditions, pricing flaws, or multi-step state attacks, rather than simple input sanitation issues. Use it to test complex business flows like payments, inventory management, and approval sequences.

A comprehensive guide detailing various 802.11 management frame attacks, including deauthentication and disassociation. It covers targeted single-client deauth for handshake capture, broadcast DoS attacks, and advanced action-frame exploitation to bypass PMF (802.11w). Essential for professional penetration testing and wireless vulnerability assessment.