Manual Telnet assessment is slow and difficult to document. This skill runs logged commands, batch enumeration, and structured output against authorized IoT targets.

UART testing can be slow when serial output is noisy and difficult to capture. This skill guides authorized serial sessions with logging, prompt detection, and structured embedded device checks.

ONVIF cameras can expose services or use weak credentials. This skill guides authorized authentication checks and controlled credential tests with onvifscan.

Unknown services and exposed ports make authorized network assessment difficult. This skill guides structured Nmap scans, output capture, service detection, and result review.

Reviewing Android bytecode manually makes application behavior and security weaknesses hard to understand. This skill guides jadx decompilation, code search, deobfuscation, and structured APK analysis.

UART console work is difficult because devices use different prompts, baud rates, and terminal behavior. This skill provides picocom guidance and a serial helper to connect, log sessions, and collect device evidence during authorized testing.

IoT packet captures can hide insecure protocols, plaintext data, and weak authentication. This skill guides IoTNet analysis and presents prioritized findings with remediation advice.

Firmware images can hide filesystems and security artifacts that are difficult to locate. This skill guides ffind analysis, type detection, and optional filesystem extraction.

Firmware dumps are difficult to inspect consistently, and missed changes can hide persistent threats. This skill provides repeatable offline CHIPSEC workflows for scanning, inventory, decoding, and comparison.

Android APK internals are difficult to inspect in packaged form. This skill guides decoding, resource review, smali analysis, rebuilding, signing, and troubleshooting with Apktool.

Neovim configurations can hide deprecated APIs, security issues, and startup bottlenecks. This skill provides structured checks, version guidance, and practical recommendations.

Security reviews can miss issues across authentication, input handling, APIs, and secrets. This skill provides structured guidance, checklists, and remediation patterns for application-security work.

Incomplete authentication settings can expose accounts or disrupt password recovery. This skill provides Better Auth guidance for verification, resets, policies, sessions, and hashing.

Security-sensitive code is easy to ship with hidden flaws in authentication, input handling, and secrets. This skill gives Claude, Codex, and Claude Code structured security references and scanner guidance for safer reviews.

Security mistakes often hide in key storage, caches, logs, and environment handling. This skill gives review checklists and safer patterns for those areas.

Authentication systems are difficult to design safely across tokens, sessions, roles, and MFA. This skill provides framework-neutral examples for common web application security patterns.

JWT authentication requires careful token creation, validation, and claim handling. This skill guides FastAPI implementations for access tokens, dependencies, RBAC, and safe configuration.

Authentication work is easy to under-specify and hard to secure. This skill guides Claude, Codex, and Claude Code through forms, sessions, protected routes, and role checks.

Security reviews can miss common vulnerabilities and inconsistent controls. This skill provides structured OWASP checks, secure examples, and scanning workflows for repeatable assessments.

SharePoint permission reviews expose sensitive access paths but can be hard to collect consistently. This skill guides a local audit that produces readable reports.