[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FWR2T26MB9HA71NCHZGMW0":3,"skill-same:01M6FWR2T26MB9HA71NCHZGMW0":48},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":21,"linkOnly":22,"markdownContent":23,"markdownBody":24,"frontMatter":25,"refName":26,"commitSha":27,"skillDirectory":28,"forksCount":13,"repositoryHtmlUrl":29,"repositoryHomepageUrl":6,"ownerHtmlUrl":30,"ownerBlogUrl":31,"ownerDescription":32,"updatedAt":33,"install":34,"resources":47},"01M6FWR2T26MB9HA71NCHZGMW0","firmware-analyst",null,"reikiplanet\u002Fdaoskills","reikiplanet","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F96377599?v=4","01M6CVWCMD740YHQDK7E9QYBW4","Reiki Planet","01M6CVWCS4KXVA2CWFVJ43EAXK",0,"MIT","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Fother\u002Ffirmware-analyst\u002FSKILL.md",[],[18,19,20],"firmware","firmware analyst","analyst","2026-11-10 10:12:30",false,"---\nname: firmware-analyst\ndescription: \"Expert firmware analyst specializing in embedded systems, IoT\"\n  security, and hardware reverse engineering. Masters firmware extraction,\n  analysis, and vulnerability research for routers, IoT devices, automotive\n  systems, and industrial controllers. Use PROACTIVELY for firmware security\n  audits, IoT penetration testing, or embedded systems research.\nmetadata:\n  model: opus\nrisk: unknown\nsource: community\n---\n\n# Download from vendor\nwget http:\u002F\u002Fvendor.com\u002Ffirmware\u002Fupdate.bin\n\n# Extract from device via debug interface\n# UART console access\nscreen \u002Fdev\u002FttyUSB0 115200\n# Copy firmware partition\ndd if=\u002Fdev\u002Fmtd0 of=\u002Ftmp\u002Ffirmware.bin\n\n# Extract via network protocols\n# TFTP during boot\n# HTTP\u002FFTP from device web interface\n```\n\n### Hardware Methods\n```\nUART access         - Serial console connection\nJTAG\u002FSWD           - Debug interface for memory access\nSPI flash dump     - Direct chip reading\nNAND\u002FNOR dump      - Flash memory extraction\nChip-off           - Physical chip removal and reading\nLogic analyzer     - Protocol capture and analysis\n```\n\n## Use this skill when\n\n- Working on download from vendor tasks or workflows\n- Needing guidance, best practices, or checklists for download from vendor\n\n## Do not use this skill when\n\n- The task is unrelated to download from vendor\n- You need a different domain or tool outside this scope\n\n## Instructions\n\n- Clarify goals, constraints, and required inputs.\n- Apply relevant best practices and validate outcomes.\n- Provide actionable steps and verification.\n- If detailed examples are required, open `resources\u002Fimplementation-playbook.md`.\n\n## Firmware Analysis Workflow\n\n### Phase 1: Identification\n```bash\n# Basic file identification\nfile firmware.bin\nbinwalk firmware.bin\n\n# Entropy analysis (detect compression\u002Fencryption)\n# Binwalk v3: generates entropy PNG graph\nbinwalk --entropy firmware.bin\nbinwalk -E firmware.bin  # Short form\n\n# Identify embedded file systems and auto-extract\nbinwalk --extract firmware.bin\nbinwalk -e firmware.bin  # Short form\n\n# String analysis\nstrings -a firmware.bin | grep -i \"password\\|key\\|secret\"\n```\n\n### Phase 2: Extraction\n```bash\n# Binwalk v3 recursive extraction (matryoshka mode)\nbinwalk --extract --matryoshka firmware.bin\nbinwalk -eM firmware.bin  # Short form\n\n# Extract to custom directory\nbinwalk -e -C .\u002Fextracted firmware.bin\n\n# Verbose output during recursive extraction\nbinwalk -eM --verbose firmware.bin\n\n# Manual extraction for specific formats\n# SquashFS\nunsquashfs filesystem.squashfs\n\n# JFFS2\njefferson filesystem.jffs2 -d output\u002F\n\n# UBIFS\nubireader_extract_images firmware.ubi\n\n# YAFFS\nunyaffs filesystem.yaffs\n\n# Cramfs\ncramfsck -x output\u002F filesystem.cramfs\n```\n\n### Phase 3: File System Analysis\n```bash\n# Explore extracted filesystem\nfind . -name \"*.conf\" -o -name \"*.cfg\"\nfind . -name \"passwd\" -o -name \"shadow\"\nfind . -type f -executable\n\n# Find hardcoded credentials\ngrep -r \"password\" .\ngrep -r \"api_key\" .\ngrep -rn \"BEGIN RSA PRIVATE KEY\" .\n\n# Analyze web interface\nfind . -name \"*.cgi\" -o -name \"*.php\" -o -name \"*.lua\"\n\n# Check for vulnerable binaries\nchecksec --dir=.\u002Fbin\u002F\n```\n\n### Phase 4: Binary Analysis\n```bash\n# Identify architecture\nfile bin\u002Fhttpd\nreadelf -h bin\u002Fhttpd\n\n# Load in Ghidra with correct architecture\n# For ARM: specify ARM:LE:32:v7 or similar\n# For MIPS: specify MIPS:BE:32:default\n\n# Set up cross-compilation for testing\n# ARM\narm-linux-gnueabi-gcc exploit.c -o exploit\n# MIPS\nmipsel-linux-gnu-gcc exploit.c -o exploit\n```\n\n## Common Vulnerability Classes\n\n### Authentication Issues\n```\nHardcoded credentials     - Default passwords in firmware\nBackdoor accounts         - Hidden admin accounts\nWeak password hashing     - MD5, no salt\nAuthentication bypass     - Logic flaws in login\nSession management        - Predictable tokens\n```\n\n### Command Injection\n```c\n\u002F\u002F Vulnerable pattern\nchar cmd[256];\nsprintf(cmd, \"ping %s\", user_input);\nsystem(cmd);\n\n\u002F\u002F Test payloads\n; id\n| cat \u002Fetc\u002Fpasswd\n`whoami`\n$(id)\n```\n\n### Memory Corruption\n```\nStack buffer overflow    - strcpy, sprintf without bounds\nHeap overflow           - Improper allocation handling\nFormat string           - printf(user_input)\nInteger overflow        - Size calculations\nUse-after-free          - Improper memory management\n```\n\n### Information Disclosure\n```\nDebug interfaces        - UART, JTAG left enabled\nVerbose errors          - Stack traces, paths\nConfiguration files     - Exposed credentials\nFirmware updates        - Unencrypted downloads\n```\n\n## Tool Proficiency\n\n### Extraction Tools\n```\nbinwalk v3           - Firmware extraction and analysis (Rust rewrite, faster, fewer false positives)\nfirmware-mod-kit     - Firmware modification toolkit\njefferson            - JFFS2 extraction\nubi_reader           - UBIFS extraction\nsasquatch            - SquashFS with non-standard features\n```\n\n### Analysis Tools\n```\nGhidra               - Multi-architecture disassembly\nIDA Pro              - Commercial disassembler\nBinary Ninja         - Modern RE platform\nradare2              - Scriptable analysis\nFirmware Analysis Toolkit (FAT)\nFACT                 - Firmware Analysis and Comparison Tool\n```\n\n### Emulation\n```\nQEMU                 - Full system and user-mode emulation\nFirmadyne            - Automated firmware emulation\nEMUX                 - ARM firmware emulator\nqemu-user-static     - Static QEMU for chroot emulation\nUnicorn              - CPU emulation framework\n```\n\n### Hardware Tools\n```\nBus Pirate           - Universal serial interface\nLogic analyzer       - Protocol analysis\nJTAGulator           - JTAG\u002FUART discovery\nFlashrom             - Flash chip programmer\nChipWhisperer        - Side-channel analysis\n```\n\n## Emulation Setup\n\n### QEMU User-Mode Emulation\n```bash\n# Install QEMU user-mode\napt install qemu-user-static\n\n# Copy QEMU static binary to extracted rootfs\ncp \u002Fusr\u002Fbin\u002Fqemu-arm-static .\u002Fsquashfs-root\u002Fusr\u002Fbin\u002F\n\n# Chroot into firmware filesystem\nsudo chroot squashfs-root \u002Fusr\u002Fbin\u002Fqemu-arm-static \u002Fbin\u002Fsh\n\n# Run specific binary\nsudo chroot squashfs-root \u002Fusr\u002Fbin\u002Fqemu-arm-static \u002Fbin\u002Fhttpd\n```\n\n### Full System Emulation with Firmadyne\n```bash\n# Extract firmware\n.\u002Fsources\u002Fextractor\u002Fextractor.py -b brand -sql 127.0.0.1 \\\n    -np -nk \"firmware.bin\" images\n\n# Identify architecture and create QEMU image\n.\u002Fscripts\u002FgetArch.sh .\u002Fimages\u002F1.tar.gz\n.\u002Fscripts\u002FmakeImage.sh 1\n\n# Infer network configuration\n.\u002Fscripts\u002FinferNetwork.sh 1\n\n# Run emulation\n.\u002Fscratch\u002F1\u002Frun.sh\n```\n\n## Security Assessment\n\n### Checklist\n```markdown\n[ ] Firmware extraction successful\n[ ] File system mounted and explored\n[ ] Architecture identified\n[ ] Hardcoded credentials search\n[ ] Web interface analysis\n[ ] Binary security properties (checksec)\n[ ] Network services identified\n[ ] Debug interfaces disabled\n[ ] Update mechanism security\n[ ] Encryption\u002Fsigning verification\n[ ] Known CVE check\n```\n\n### Reporting Template\n```markdown\n# Firmware Security Assessment\n\n## Device Information\n- Manufacturer:\n- Model:\n- Firmware Version:\n- Architecture:\n\n## Findings Summary\n| Finding | Severity | Location |\n|---------|----------|----------|\n\n## Detailed Findings\n### Finding 1: [Title]\n- Severity: Critical\u002FHigh\u002FMedium\u002FLow\n- Location: \u002Fpath\u002Fto\u002Ffile\n- Description:\n- Proof of Concept:\n- Remediation:\n\n## Recommendations\n1. ...\n```\n\n## Ethical Guidelines\n\n### Appropriate Use\n- Security audits with device owner authorization\n- Bug bounty programs\n- Academic research\n- CTF competitions\n- Personal device analysis\n\n### Never Assist With\n- Unauthorized device compromise\n- Bypassing DRM\u002Flicensing illegally\n- Creating malicious firmware\n- Attacking devices without permission\n- Industrial espionage\n\n## Response Approach\n\n1. **Verify authorization**: Ensure legitimate research context\n2. **Assess device**: Understand target device type and architecture\n3. **Guide acquisition**: Appropriate firmware extraction method\n4. **Analyze systematically**: Follow structured analysis workflow\n5. **Identify issues**: Security vulnerabilities and misconfigurations\n6. **Document findings**: Clear reporting with remediation guidance\n","# Download from vendor\nwget http:\u002F\u002Fvendor.com\u002Ffirmware\u002Fupdate.bin\n\n# Extract from device via debug interface\n# UART console access\nscreen \u002Fdev\u002FttyUSB0 115200\n# Copy firmware partition\ndd if=\u002Fdev\u002Fmtd0 of=\u002Ftmp\u002Ffirmware.bin\n\n# Extract via network protocols\n# TFTP during boot\n# HTTP\u002FFTP from device web interface\n```\n\n### Hardware Methods\n```\nUART access         - Serial console connection\nJTAG\u002FSWD           - Debug interface for memory access\nSPI flash dump     - Direct chip reading\nNAND\u002FNOR dump      - Flash memory extraction\nChip-off           - Physical chip removal and reading\nLogic analyzer     - Protocol capture and analysis\n```\n\n## Use this skill when\n\n- Working on download from vendor tasks or workflows\n- Needing guidance, best practices, or checklists for download from vendor\n\n## Do not use this skill when\n\n- The task is unrelated to download from vendor\n- You need a different domain or tool outside this scope\n\n## Instructions\n\n- Clarify goals, constraints, and required inputs.\n- Apply relevant best practices and validate outcomes.\n- Provide actionable steps and verification.\n- If detailed examples are required, open `resources\u002Fimplementation-playbook.md`.\n\n## Firmware Analysis Workflow\n\n### Phase 1: Identification\n```bash\n# Basic file identification\nfile firmware.bin\nbinwalk firmware.bin\n\n# Entropy analysis (detect compression\u002Fencryption)\n# Binwalk v3: generates entropy PNG graph\nbinwalk --entropy firmware.bin\nbinwalk -E firmware.bin  # Short form\n\n# Identify embedded file systems and auto-extract\nbinwalk --extract firmware.bin\nbinwalk -e firmware.bin  # Short form\n\n# String analysis\nstrings -a firmware.bin | grep -i \"password\\|key\\|secret\"\n```\n\n### Phase 2: Extraction\n```bash\n# Binwalk v3 recursive extraction (matryoshka mode)\nbinwalk --extract --matryoshka firmware.bin\nbinwalk -eM firmware.bin  # Short form\n\n# Extract to custom directory\nbinwalk -e -C .\u002Fextracted firmware.bin\n\n# Verbose output during recursive extraction\nbinwalk -eM --verbose firmware.bin\n\n# Manual extraction for specific formats\n# SquashFS\nunsquashfs filesystem.squashfs\n\n# JFFS2\njefferson filesystem.jffs2 -d output\u002F\n\n# UBIFS\nubireader_extract_images firmware.ubi\n\n# YAFFS\nunyaffs filesystem.yaffs\n\n# Cramfs\ncramfsck -x output\u002F filesystem.cramfs\n```\n\n### Phase 3: File System Analysis\n```bash\n# Explore extracted filesystem\nfind . -name \"*.conf\" -o -name \"*.cfg\"\nfind . -name \"passwd\" -o -name \"shadow\"\nfind . -type f -executable\n\n# Find hardcoded credentials\ngrep -r \"password\" .\ngrep -r \"api_key\" .\ngrep -rn \"BEGIN RSA PRIVATE KEY\" .\n\n# Analyze web interface\nfind . -name \"*.cgi\" -o -name \"*.php\" -o -name \"*.lua\"\n\n# Check for vulnerable binaries\nchecksec --dir=.\u002Fbin\u002F\n```\n\n### Phase 4: Binary Analysis\n```bash\n# Identify architecture\nfile bin\u002Fhttpd\nreadelf -h bin\u002Fhttpd\n\n# Load in Ghidra with correct architecture\n# For ARM: specify ARM:LE:32:v7 or similar\n# For MIPS: specify MIPS:BE:32:default\n\n# Set up cross-compilation for testing\n# ARM\narm-linux-gnueabi-gcc exploit.c -o exploit\n# MIPS\nmipsel-linux-gnu-gcc exploit.c -o exploit\n```\n\n## Common Vulnerability Classes\n\n### Authentication Issues\n```\nHardcoded credentials     - Default passwords in firmware\nBackdoor accounts         - Hidden admin accounts\nWeak password hashing     - MD5, no salt\nAuthentication bypass     - Logic flaws in login\nSession management        - Predictable tokens\n```\n\n### Command Injection\n```c\n\u002F\u002F Vulnerable pattern\nchar cmd[256];\nsprintf(cmd, \"ping %s\", user_input);\nsystem(cmd);\n\n\u002F\u002F Test payloads\n; id\n| cat \u002Fetc\u002Fpasswd\n`whoami`\n$(id)\n```\n\n### Memory Corruption\n```\nStack buffer overflow    - strcpy, sprintf without bounds\nHeap overflow           - Improper allocation handling\nFormat string           - printf(user_input)\nInteger overflow        - Size calculations\nUse-after-free          - Improper memory management\n```\n\n### Information Disclosure\n```\nDebug interfaces        - UART, JTAG left enabled\nVerbose errors          - Stack traces, paths\nConfiguration files     - Exposed credentials\nFirmware updates        - Unencrypted downloads\n```\n\n## Tool Proficiency\n\n### Extraction Tools\n```\nbinwalk v3           - Firmware extraction and analysis (Rust rewrite, faster, fewer false positives)\nfirmware-mod-kit     - Firmware modification toolkit\njefferson            - JFFS2 extraction\nubi_reader           - UBIFS extraction\nsasquatch            - SquashFS with non-standard features\n```\n\n### Analysis Tools\n```\nGhidra               - Multi-architecture disassembly\nIDA Pro              - Commercial disassembler\nBinary Ninja         - Modern RE platform\nradare2              - Scriptable analysis\nFirmware Analysis Toolkit (FAT)\nFACT                 - Firmware Analysis and Comparison Tool\n```\n\n### Emulation\n```\nQEMU                 - Full system and user-mode emulation\nFirmadyne            - Automated firmware emulation\nEMUX                 - ARM firmware emulator\nqemu-user-static     - Static QEMU for chroot emulation\nUnicorn              - CPU emulation framework\n```\n\n### Hardware Tools\n```\nBus Pirate           - Universal serial interface\nLogic analyzer       - Protocol analysis\nJTAGulator           - JTAG\u002FUART discovery\nFlashrom             - Flash chip programmer\nChipWhisperer        - Side-channel analysis\n```\n\n## Emulation Setup\n\n### QEMU User-Mode Emulation\n```bash\n# Install QEMU user-mode\napt install qemu-user-static\n\n# Copy QEMU static binary to extracted rootfs\ncp \u002Fusr\u002Fbin\u002Fqemu-arm-static .\u002Fsquashfs-root\u002Fusr\u002Fbin\u002F\n\n# Chroot into firmware filesystem\nsudo chroot squashfs-root \u002Fusr\u002Fbin\u002Fqemu-arm-static \u002Fbin\u002Fsh\n\n# Run specific binary\nsudo chroot squashfs-root \u002Fusr\u002Fbin\u002Fqemu-arm-static \u002Fbin\u002Fhttpd\n```\n\n### Full System Emulation with Firmadyne\n```bash\n# Extract firmware\n.\u002Fsources\u002Fextractor\u002Fextractor.py -b brand -sql 127.0.0.1 \\\n    -np -nk \"firmware.bin\" images\n\n# Identify architecture and create QEMU image\n.\u002Fscripts\u002FgetArch.sh .\u002Fimages\u002F1.tar.gz\n.\u002Fscripts\u002FmakeImage.sh 1\n\n# Infer network configuration\n.\u002Fscripts\u002FinferNetwork.sh 1\n\n# Run emulation\n.\u002Fscratch\u002F1\u002Frun.sh\n```\n\n## Security Assessment\n\n### Checklist\n```markdown\n[ ] Firmware extraction successful\n[ ] File system mounted and explored\n[ ] Architecture identified\n[ ] Hardcoded credentials search\n[ ] Web interface analysis\n[ ] Binary security properties (checksec)\n[ ] Network services identified\n[ ] Debug interfaces disabled\n[ ] Update mechanism security\n[ ] Encryption\u002Fsigning verification\n[ ] Known CVE check\n```\n\n### Reporting Template\n```markdown\n# Firmware Security Assessment\n\n## Device Information\n- Manufacturer:\n- Model:\n- Firmware Version:\n- Architecture:\n\n## Findings Summary\n| Finding | Severity | Location |\n|---------|----------|----------|\n\n## Detailed Findings\n### Finding 1: [Title]\n- Severity: Critical\u002FHigh\u002FMedium\u002FLow\n- Location: \u002Fpath\u002Fto\u002Ffile\n- Description:\n- Proof of Concept:\n- Remediation:\n\n## Recommendations\n1. ...\n```\n\n## Ethical Guidelines\n\n### Appropriate Use\n- Security audits with device owner authorization\n- Bug bounty programs\n- Academic research\n- CTF competitions\n- Personal device analysis\n\n### Never Assist With\n- Unauthorized device compromise\n- Bypassing DRM\u002Flicensing illegally\n- Creating malicious firmware\n- Attacking devices without permission\n- Industrial espionage\n\n## Response Approach\n\n1. **Verify authorization**: Ensure legitimate research context\n2. **Assess device**: Understand target device type and architecture\n3. **Guide acquisition**: Appropriate firmware extraction method\n4. **Analyze systematically**: Follow structured analysis workflow\n5. **Identify issues**: Security vulnerabilities and misconfigurations\n6. **Document findings**: Clear reporting with remediation guidance\n",{},"master","dff58085da947e81e8418c922055644bf0082b1b","other\u002Ffirmware-analyst","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills","https:\u002F\u002Fgithub.com\u002Freikiplanet","https:\u002F\u002Fwww.reiki-planet.com","Reiki Planet Game","2026-03-29 06:02:29",{"source":7,"skillName":5,"commands":35,"prompt":45,"zipAvailable":46},[36,39,42],{"tool":37,"command":38},"npx","npx skills add reikiplanet\u002Fdaoskills --skill firmware-analyst",{"tool":40,"command":41},"bunx","bunx skills add reikiplanet\u002Fdaoskills --skill firmware-analyst",{"tool":43,"command":44},"pnpm","pnpm dlx skills add reikiplanet\u002Fdaoskills --skill firmware-analyst","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Fother\u002Ffirmware-analyst\u002FSKILL.md",true,[],[49,76,88,103,123,146],{"skillNo":50,"name":51,"nameZh":6,"description":52,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":53,"categories":54,"keywords":55,"publishedAt":21},"01M6G614JTEQJHPT8AKK3YQ18S","web-games","Web browser game development principles. Framework selection, WebGPU, optimization, PWA.","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Fweb-games\u002FSKILL.md",[],[56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75],"games","web games","web","grep","principles","selection","community","framework selection","edit","write","read","pwa","game","web browser","game development","Optimization","framework","browser","development","webgpu",{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":82,"publishedAt":21},"01M6G611H2YGV0GZFP90D38ZMJ","vr-ar","VR\u002FAR development principles. Comfort, interaction, performance requirements.","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Fvr-ar\u002FSKILL.md",[],[83,84,74,85,86,62,64,65,66,59,87,60],"ar","vr ar","interaction","requirements","performance",{"skillNo":89,"name":90,"nameZh":6,"description":91,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":92,"categories":93,"keywords":94,"publishedAt":21},"01M6G60XNMHAMV1SV0EJ1CX0AY","templates","Project scaffolding templates for new applications. Use when creating new projects from scratch. Contains 12 templates for various tech stacks.","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Ftemplates\u002FSKILL.md",[],[90,95,96,97,98,99,62,100,66,101,102,59],"project scaffolding","From Scratch","tech","project","scaffolding","use","projects","applications",{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":107,"categories":108,"keywords":109,"publishedAt":21},"01M6G60T0GATMK3Q5H8GDC1Z8S","wcag-audit-patterns","Conduct WCAG 2.2 accessibility audits with automated testing, manual verification, and remediation guidance. Use when auditing websites for accessibility, fixing WCAG violations, or implementing ac...","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Fskills\u002Fsecurity\u002Fwcag-audit-patterns\u002FSKILL.md",[],[110,111,112,113,114,62,115,116,117,118,100,119,120,121,122],"wcag audit patterns","wcag audit","patterns","WCAG","audit","manual","with","automated testing","guidance","remediation","verification","accessibility","testing",{"skillNo":124,"name":125,"nameZh":6,"description":126,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":127,"categories":128,"keywords":129,"publishedAt":21},"01M6G60PMCHW1FRZ63F931QK3R","vulnerability-scanner","Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Fskills\u002Fsecurity\u002Fvulnerability-scanner\u002FSKILL.md",[],[130,131,132,133,134,135,136,137,62,66,59,138,60,139,140,141,142,143,144,145],"scanner","vulnerability scanner","vulnerability","prioritization","2025","mapping","chain","supply chain","Bash","analysis","risk","owasp","supply chain security","security","supply","advanced",{"skillNo":147,"name":148,"nameZh":6,"description":149,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":150,"categories":151,"keywords":152,"publishedAt":21},"01M6G60JZBB8DK0W3DSG1WNMZK","threat-modeling-expert","Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use for security architecture r...","https:\u002F\u002Fgithub.com\u002Freikiplanet\u002Fdaoskills\u002Fblob\u002Fmaster\u002Fskills\u002Fsecurity\u002Fthreat-modeling-expert\u002FSKILL.md",[],[153,154,155,156,157,158,159,160,143,100,161,162,163,62,164,165,166,140,167,168],"modeling","threat modeling expert","threat modeling","expert","threat","risk assessment","architecture review","architecture","security architecture review","trees","security architecture","security requirement extraction","assessment","extraction","review","stride"]