Loading...
Loading...
Found 34 Skills
Master smart contract security with auditing, vulnerability detection, and incident response
Run the participant-facing CTFd CLI directly from its Git repository with uvx. Use when an agent needs to list or inspect CTFd challenges, view hints or the scoreboard, inspect the current user's solves and submissions, submit a flag, or unlock a hint without installing the ctfd package globally.
Safely inspect .env files by showing key names and clearly non-sensitive values while redacting anything that looks like a secret. Best-effort heuristic redaction (keyword block + token-pattern blocklist + Shannon-entropy check + value allowlist) — not a cryptographic guarantee. Use when you need to understand a project's environment configuration without exposing credentials.
Detector and proof-of-concept LPE toolkit for CVE-2026-31431 ("Copy Fail"), a Linux kernel algif_aead page-cache scratch-write vulnerability enabling local privilege escalation.
Professional Skills for Cross-Site Scripting (XSS) Attack Testing
Read/write config files (.env, YAML, TOML, JSON, docker-compose, etc.) safely. Use this instead of Read/Write/Edit tools whenever touching config files that may contain API keys, tokens, passwords, or other secrets — it auto-detects and redacts them.
Identify and report potentially malicious software repositories masquerading as legitimate security tools
Expert in detecting private information, secrets, API keys, credentials, and sensitive data in codebases before open sourcing
Professional Skills and Methodologies for Mobile Application Security Testing
End-to-end protocol replay toolkit for ChatGPT Team subscription with hCaptcha solver and anti-fraud research tools
Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks
Professional Skills and Methodologies for API Security Testing