Browse Skills

Explore Codebase uses knowledge graph tools to navigate and understand codebase structure, trace relationships, and find execution paths. Use it for code review, debugging, and refactoring with minimal context.

Refactor Safely plans and executes code refactoring using dependency analysis from a knowledge graph. It helps developers safely rename symbols, remove dead code, and verify refactoring impact before and after applying changes.

Review Changes performs a structured, risk-aware code review using change detection and impact analysis from a knowledge graph. It identifies risk levels, affected execution paths, test coverage gaps, and provides a merge recommendation.

Review Delta reviews only changes since the last commit using graph impact analysis, automatically detecting blast radius. Use it for token-efficient code review when you need to focus on changed code and its affected dependents.

Review PR performs a comprehensive code review of a pull request or branch diff using a knowledge graph for structural context and blast-radius impact analysis. Use it to assess risk, check test coverage, and produce a structured file-by-file review.

Herdr Pre-Release Audit compares commits since the base release against the next-release changelog, docs, and issue reference lines to confirm release readiness and CI behavior. Use it when finalizing herdr release docs or validating docs/next before a release.

Herdr Throwaway Repro creates a disposable named Herdr session inside an existing session to reproduce runtime, pane, terminal, process, API, persistence, or agent issues without touching the default session. Use it when a bug needs a real Herdr environment driven through the CLI/API with safe cleanup.

Achieving CMMC Level 2 Compliance guides defense contractors through scoping CUI and FCI, implementing the 110 NIST SP 800-171 controls, computing the SPRS score, and preparing for a C3PAO assessment. Use it when handling CUI under DoD contracts or responding to DFARS 7012/7019/7020/7021 requirements.

Analyzing Android Malware with Apktool performs static analysis of Android APK files using apktool, jadx, and androguard to extract permissions, detect dangerous permission combinations, and identify suspicious API calls without executing the sample. Use it to triage a suspicious APK or build mobile malware detection rules.

Bootkit and Rootkit Analysis analyzes bootkits and advanced rootkits infecting MBR, VBR, and UEFI firmware. Use it when investigating persistent firmware-level threats that survive OS reinstallation, performing boot sector acquisition, firmware analysis, memory forensics, and boot chain integrity verification.

Ethereum Smart Contract Security Analysis performs static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect vulnerabilities like reentrancy and integer overflows. Use it to audit contracts before deployment, investigate security incidents, or build detection rules for threat hunting.

Security Skill Improvement provides a structured way to submit improvement requests for existing cybersecurity skills. Use it to identify issues in agent code, API references, frontmatter, or ATT&CK mappings and propose specific changes.