Browse Skills

Offensive Mobile provides a methodology for penetration testing Android and iOS applications, covering static analysis, dynamic instrumentation with Frida, SSL pinning bypass, and insecure data storage audits.

Windows Mitigations covers Windows exploit mitigations such as ASLR, DEP, CFG, CET, SEHOP, and ACG, including known bypass techniques. Use it when researching Windows hardening, planning mitigation bypass strategies, or analyzing crash dumps to identify which protection stopped an exploit.

Windows Security Boundaries maps Windows security boundary taxonomy and enumerates attack surfaces such as kernel/user, sandbox, COM/RPC, and hypervisor boundaries, used when planning privilege escalation and sandbox escape paths.

Code Review reviews code diffs and files for security vulnerabilities (OWASP Top 10), error handling, complexity, naming conventions, and performance issues. Use when you need to review a PR, pull request, diff, merge request, or code changes.

Document Review reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use it when checking financial statements, audit documents, regulatory filings, or compliance issues.

Regulatory Analysis examines documents and processes against FINRA, SEC, Federal Reserve, and CFPB frameworks to identify compliance gaps, classify findings by severity, and recommend remediation. Use it for compliance audits, regulatory reviews, and policy adherence checks.

Wiki Lint audits a wiki for contradictions, stale claims, orphan pages, missing cross-references, and knowledge gaps. Use it periodically or when asked to check wiki health.

DebugView CLI captures real-time debug output from Windows applications and kernel drivers via command line. Use it to filter, bound, and log OutputDebugString and DbgPrint/KdPrint output for scripted or agent-driven debugging.

Architecture Patterns provides templates and guidance for implementing Clean Architecture, Hexagonal Architecture, and Domain-Driven Design in backend systems. Use it when architecting new services or refactoring existing code for maintainability and testability.

Code Reviewer performs broad code and pull request reviews focusing on correctness, bugs, maintainability, readability, regression risk, and test coverage gaps. Use it for fresh reviews and route dedicated security, TDD, or existing-comment tasks to more specific skills.

Auto Setup detects the project type and configures quality gates, hooks, and settings for a new codebase. Use it when onboarding a new project or setting up CI integration.

Deslop removes AI-generated code slop, unnecessary comments, and over-engineering from the current branch diff. Use it before committing or when reviewing a SKILL.md before promoting it.