================================================================================ CYBERSECURITY, BUG HUNTING & OFFICIAL ANDROID AI AGENT SKILLS GUIDE (සිංහල තේරුම සහ භාවිතය සමඟ සම්පූර්ණ විධාන නාමාවලිය) ================================================================================ මෙම ලේඛනය තුළ ඔබ ලබාදුන් GitHub Repositories 3 හි අඩංගු සියලුම Skills (Cybersecurity 682+, Bug Hunting Framework, සහ Official Google Android Skills 30) සඳහා විධාන, ඉංග්‍රීසි සහ සිංහල පැහැදිලි කිරීම් අඩංගු වේ. ස්ථාපිත ස්ථාන (Installed Paths): - Workspace: c:\em\Main Project\skillls\.agents\skills\ - Global Config: C:\Users\Dell\.gemini\config\skills\ - Web & Desktop App: c:\em\Main Project\skillls\Agent_Command_Hub.bat ================================================================================ PART 1: BUG BOUNTY HUNTING & PEN-TESTING FRAMEWORK (m4vic/bug-hunting) ================================================================================ 1. /bug-hunting • Title: Bug Bounty Hunting & Penetration Testing Framework Router • සිංහල තේරුම: Bug Bounty සහ Penetration Testing මඟපෙන්වීම් රාමුව • English: Systematic penetration testing methodology across 7 security domains: Web endpoints, APIs (REST/GraphQL), iOS/Android mobile apps, Cloud/IAM identity, AI/LLM security, and Recon. • සිංහල: Web, REST/GraphQL APIs, Mobile Apps, Cloud Identity සහ AI/LLM ආරක්ෂාව විධිමත්ව පරීක්ෂා කර vulnerabilities සෙවීමේ සම්පූර්ණ bug hunting රාමුව. • Example: /bug-hunting web recon and business logic flaw discovery on target scope 2. /bug-hunting web • Domain: Web Application Security • Covers: IDOR, SSRF, SQL Injection, XSS, CSRF, Race Conditions, Open Redirects, CORS misconfigurations, Cache Poisoning, and Authentication bypasses. • සිංහල: වෙබ් අඩවි වල IDOR, SSRF, SQLi, XSS, CSRF සහ Authentication bypasses සොයාගැනීම. 3. /bug-hunting api • Domain: API Security (REST / GraphQL / gRPC / WebSockets) • Covers: BOLA/BFLA, Broken Object Level Authorization, mass assignment, unauthenticated endpoints, and GraphQL schema introspection leaks. • සිංහල: REST, GraphQL සහ WebSockets APIs වල BOLA/IDOR සහ authorization දෝෂ සෙවීම. 4. /bug-hunting mobile • Domain: Mobile App Security (Android APK / iOS IPA) • Covers: Insecure local storage, hardcoded secrets, certificate pinning bypass, Frida hooking, exported components, and Deeplink validation. • සිංහල: Mobile apps වල hardcoded API keys, local storage leaks, සහ Frida hooks පරීක්ෂාව. 5. /bug-hunting cloud-identity • Domain: Cloud & Enterprise Identity (AWS, GCP, Azure, Okta, Entra, SAML) • Covers: IAM privilege escalation, S3/GCS bucket permissions, SSRF to metadata service, OAuth token leakage, and SAML signature bypasses. • සිංහල: Cloud Storage buckets, AWS/GCP IAM permissions සහ OAuth tokens වල ආරක්ෂාව. 6. /bug-hunting ai-llm • Domain: AI / LLM Feature Security (OWASP Top 10 for LLMs) • Covers: Direct & indirect prompt injection, tool-call hijacking, insecure output handling, training data poisoning, and sensitive data leakage. • සිංහල: Chatbots, RAG සහ AI Agents වල Prompt Injection සහ Tool hijacking පරීක්ෂාව. 7. /bug-hunting recon • Domain: Attack Surface Mapping & Reconnaissance • Covers: Subdomain enumeration, ASN discovery, tech stack fingerprinting, exposed git/env files, historical wayback URLs, and parameter discovery. • සිංහල: ආයතනයක attack surface එක සහ subdomains, exposed endpoints හඳුනාගැනීම. ================================================================================ PART 2: ANTHROPIC CYBERSECURITY SKILLS LIBRARY (mukul975) - CORE SUITE ================================================================================ 1. /performing-csrf-attack-simulation • Title: CSRF Attack Simulation & Verification • සිංහල: Cross-Site Request Forgery (CSRF) පරීක්ෂාව • English: Test web applications for Cross-Site Request Forgery vulnerabilities by crafting forged requests that exploit authenticated user sessions. • සිංහල: Web app එකක form submissions සහ cookies වල anti-CSRF tokens සහ SameSite ආරක්ෂාව පරීක්ෂා කිරීම. • Example: /performing-csrf-attack-simulation analyze password change endpoint 2. /performing-memory-forensics-with-volatility3 • Title: Memory Forensics with Volatility 3 • සිංහල: Volatility 3 මඟින් Memory Forensics විශ්ලේෂණය • English: Analyze volatile memory dumps (RAM) using Volatility 3 plugins to detect rootkits, injected code, hidden processes, and active network connections. • සිංහල: පරිගණකයක RAM memory dump එකක් පරීක්ෂා කර සැඟවුණු malware සහ injected code හඳුනාගැනීම. • Example: /performing-memory-forensics-with-volatility3 analyze memory.dmp 3. /performing-kerberoasting-attack • Title: Active Directory Kerberoasting Audit • සිංහල: Active Directory Kerberos ආරක්ෂක විගණනය • English: Audit Active Directory service principal names (SPNs) for weak encryption and vulnerable service accounts susceptible to Kerberoasting ticket cracking. • සිංහල: Active Directory ජාලයක Service Principal Names (SPN) පරීක්ෂා කර service accounts වල ආරක්ෂාව තහවුරු කිරීම. • Example: /performing-kerberoasting-attack audit domain SPNs for RC4 ticket encryption 4. /performing-kubernetes-penetration-testing • Title: Kubernetes Cluster Penetration Testing • සිංහල: Kubernetes Cluster Penetration Testing • English: Assess Kubernetes clusters for misconfigurations, overly permissive RBAC roles, exposed kubelet/API endpoints, and insecure pod policies. • සිංහල: Kubernetes clusters වල RBAC අවසර, Kubelet endpoints සහ container escape අවදානම් පරීක්ෂා කිරීම. • Example: /performing-kubernetes-penetration-testing evaluate cluster RBAC permissions 5. /performing-dynamic-analysis-of-android-app • Title: Android App Dynamic Security Analysis • සිංහල: Android App Dynamic Security විශ්ලේෂණය • English: Conduct runtime dynamic security analysis of Android APKs: intercept network traffic, hook functions with Frida, bypass SSL pinning, and inspect storage. • සිංහල: Android App එකක් ධාවනය වන අතරතුර එහි network traffic, SSL pinning, Frida hooks සහ data storage ආරක්ෂාව පරීක්ෂා කිරීම. • Example: /performing-dynamic-analysis-of-android-app inspect package com.example.app 6. /performing-graphql-security-assessment • Title: GraphQL API Security Assessment • සිංහල: GraphQL API ආරක්ෂණ තක්සේරුව • English: Assess GraphQL endpoints for schema introspection leakage, query depth/complexity denial of service, object-level authorization (BOLA), and batching attacks. • සිංහල: GraphQL APIs වල introspection leaks, query depth DoS සහ BOLA/IDOR අවදානම් පරීක්ෂා කිරීම. • Example: /performing-graphql-security-assessment audit https://api.target.com/graphql 7. /performing-cloud-storage-forensic-acquisition • Title: Cloud Storage Forensic Acquisition • සිංහල: Cloud Storage Forensics දත්ත ලබාගැනීම • English: Forensically acquire and preserve evidence from AWS S3, Google Cloud Storage, and Azure Blob containers with cryptographic integrity hashing. • සිංහල: Cloud Storage (S3 / GCS / Azure) බාහිර ප්‍රහාරයකදී සාක්ෂි forensic මට්ටමින් සුරක්ෂිත කරගැනීම. 8. /performing-container-escape-detection • Title: Container Escape & Breakout Detection • සිංහල: Container Escape හඳුනාගැනීම • English: Detect container breakout techniques, privileged container abuse, mounted host docker sockets, and Linux kernel capability exploits. • සිංහල: Docker/Container එකක් බිඳ දමා host machine එකට ඇතුළුවන ප්‍රහාර හඳුනාගැනීම. 9. /performing-cve-prioritization-with-kev-catalog • Title: CISA Known Exploited Vulnerabilities (KEV) Prioritization • සිංහල: KEV මඟින් අවදානම් සහිත CVEs ප්‍රමුඛීකරණය • English: Prioritize vulnerability remediation using CISA's Known Exploited Vulnerabilities (KEV) catalog and EPSS scores to patch real-world active threats first. • සිංහල: CISA KEV ලැයිස්තුව අනුව සැබෑ ප්‍රහාර වලට ලක්වන CVEs හඳුනාගෙන මුලින්ම patch කිරීම. 10. /performing-log-analysis-for-forensic-investigation • Title: Forensic SIEM Log Analysis • සිංහල: Forensic Log විග්‍රහය සහ විමර්ශනය • English: Reconstruct timeline of security breaches by correlating Windows Event logs, Linux syslog, authentication logs, and firewall traffic. • සිංහල: ප්‍රහාරයක් සිදු වූ ආකාරය තේරුම් ගැනීමට Windows Event logs සහ Syslogs විමර්ශනය කිරීම. ================================================================================ PART 3: OFFICIAL GOOGLE ANDROID SKILLS (android/skills) - TOP 30 SKILLS ================================================================================ 1. /jetpack-compose-performance • Title: Jetpack Compose Performance & Recomposition Optimization • සිංහල: Jetpack Compose Performance ප්‍රශස්තකරණය • English: Diagnose and optimize Android Jetpack Compose UI code. Minimize recomposition overhead, resolve state derivation issues, and eliminate UI lag and dropped frames. • සිංහල: Android Jetpack Compose UI වල අනවශ්‍ය recomposition අවම කිරීම සහ UI lag වීම වැළැක්වීම. • Example: /jetpack-compose-performance optimize LazyColumn feed screen 2. /agp-9-upgrade • Title: Android Gradle Plugin 9.0 Upgrade • සිංහල: Android Gradle Plugin 9.0 යාවත්කාලීන කිරීම • English: Automate migration to Android Gradle Plugin 9.0, resolving deprecated APIs, buildSrc changes, Gradle configuration cache compatibility, and Kotlin DSL updates. • සිංහල: Android ව්‍යාපෘතියක් Android Gradle Plugin 9.0 (AGP) වෙත පහසුවෙන් upgrade කිරීම. • Example: /agp-9-upgrade migrate app build configuration to AGP 9.0 3. /adaptive • Title: Adaptive Compose Layouts (Foldables & Tablets) • සිංහල: Foldables සහ Tablets සඳහා Adaptive Layouts • English: Build adaptive Jetpack Compose layouts for Android that seamlessly scale across phones, foldables, tablets, and desktop ChromeOS with window size classes. • සිංහල: Smartphones, Foldables සහ Tablets වලට එකසේ ගැළපෙන Adaptive Compose Layouts සකස් කිරීම. • Example: /adaptive implement list-detail pane layout for tablet and phone form factors 4. /camerax • Title: Modern Android CameraX Integration • සිංහල: CameraX කැමරා ඒකාබද්ධතාව • English: Integrate Android CameraX for high-reliability photo capture, video recording, image analysis (ML Kit), and lifecycle-aware camera management. • සිංහල: Android යෙදුමකට photo capture, video recording සහ QR analysis සඳහා CameraX එක් කිරීම. • Example: /camerax build a lifecycle-aware camera preview screen with photo capture 5. /litert-runtime • Title: LiteRT (TFLite) On-Device AI Runtime • සිංහල: LiteRT On-Device AI ධාවක පද්ධතිය • English: Deploy and optimize machine learning models on Android using Google LiteRT (formerly TensorFlow Lite) with NPU, GPU, and CPU hardware acceleration. • සිංහල: Android උපාංගය මතම ක්‍රියාත්මක වන AI models LiteRT සහ GPU acceleration මඟින් ධාවනය කිරීම. • Example: /litert-runtime integrate quantized object detection model with GPU delegate 6. /ml-kit-genai-prompt-api • Title: On-Device GenAI Prompt API (Gemini Nano) • සිංහල: On-Device Gemini Nano Prompt API • English: Harness on-device Generative AI with Google's Prompt API backed by Gemini Nano: summarize text, smart reply, and extract entities with zero latency and total privacy. • සිංහල: දුරකථනයේම ඇති Gemini Nano AI model එක Prompt API හරහා භාවිත කරමින් text summarization සහ smart replies සකස් කිරීම. • Example: /ml-kit-genai-prompt-api build on-device note summarization using Gemini Nano 7. /android-intent-security • Title: Android Intent & Deep Link Security • සිංහල: Android Intent සහ Deep Link ආරක්ෂණ විගණනය • English: Audit Android components for Intent redirection, unauthorized component exposure, implicit intent hijacking, and unvalidated deep link vulnerabilities. • සිංහල: Android App එකේ exported components සහ Intent hijacking අනතුරු වැළැක්වීම. • Example: /android-intent-security audit exported activities and custom URI scheme deep links 8. /android-permissions-security • Title: Android Permissions & Scoped Storage Security • සිංහල: Android Permissions සහ Storage ආරක්ෂාව • English: Audit Android app permissions, Scoped Storage compliance, Photo Picker usage, and runtime permission request flows following Android 14/15 privacy standards. • සිංහල: Android 14/15 අනුව runtime permissions, Scoped Storage සහ Photo Picker නිවැරදිව භාවිත කිරීම. 9. /testing-setup • Title: Android Automated Testing Suite • සිංහල: Android Automated Testing පද්ධතිය සැකසීම • English: Establish a modern, robust Android automated testing suite: Compose UI tests, ViewModel unit tests, Coroutines/Turbine testing, and MockK mocking. • සිංහල: Jetpack Compose UI tests, Coroutines Turbine tests සහ ViewModel unit tests සඳහා සම්පූර්ණ Android automated testing setup එක සකස් කිරීම. • Example: /testing-setup configure Compose test rule and MockK test suite for ViewModel 10. /edge-to-edge • Title: Edge-to-Edge System Bars Integration (Android 15+) • සිංහල: Edge-to-Edge විනිවිද පෙනෙන System Bars • English: Enforce Android 15 edge-to-edge layout standards with WindowInsetsCompat, transparent status/navigation bars, and IME keyboard insets handling. • සිංහල: Android 15 හි edge-to-edge තිර සැලසුම සහ keyboard insets නිවැරදිව කළමනාකරණය කිරීම. 11. /migrate-xml-views-to-jetpack-compose • Title: Migrate Legacy XML Views to Jetpack Compose • සිංහල: පැරණි XML Views Jetpack Compose බවට පත්කිරීම • English: Step-by-step migration guide for converting legacy Android XML layouts, Fragments, and ViewBinding to modern Jetpack Compose declarative UI. • සිංහල: පැරණි Android XML layouts පහසුවෙන් Jetpack Compose composables බවට පරිවර්තනය කිරීම. 12. /navigation-3 • Title: Android Navigation 3.0 in Jetpack Compose • සිංහල: Navigation 3.0 ඒකාබද්ධතාව • English: Implement type-safe navigation in Compose apps using modern Navigation 3 with deep link handling, custom transitions, and backstack management. • සිංහල: Jetpack Compose හි Type-safe Navigation සහ backstack නිවැරදිව හැසිරවීම. 13. /media3-cast-integration • Title: Media3 & Google Cast Integration • සිංහල: Media3 සහ Google Cast වීඩියෝ ධාවනය • English: Build video and audio streaming apps using AndroidX Media3 (ExoPlayer) with Google Cast, background playback, and Picture-in-Picture (PiP). • සිංහල: ExoPlayer Media3 මඟින් video streaming, background playback සහ Google Cast සකස් කිරීම. 14. /r8-analyzer • Title: R8 / ProGuard Shrinker & Optimizer Analyzer • සිංහල: R8 ProGuard Optimization සහ Size Reduction • English: Diagnose R8/ProGuard shrinking and minification rules, investigate missing classes, optimize DEX bytecode, and reduce APK/AAB download size. • සිංහල: Android APK එකේ ප්‍රමාණය (size) අඩු කර ගැනීමට සහ Proguard rules නිවැරදි කිරීමට. 15. /play-billing-library-version-upgrade • Title: Google Play Billing Library Upgrade • සිංහල: Google Play In-App Purchases සහ Billing යාවත්කාලීනය • English: Upgrade Google Play In-App Billing Library, handle multi-quantity purchases, subscriptions with base plans, and pending transactions. • සිංහල: Google Play Billing හරහා in-app purchases සහ subscriptions ලබාදීම. 16. /android-profiler • Title: Android Studio CPU, Memory & Network Profiler • සිංහල: Android Profiler මඟින් Memory සහ CPU පරීක්ෂාව • English: Guide for using Android Studio Profilers to find memory leaks, track allocations, inspect network payloads, and analyze CPU method traces. • සිංහල: Android app එකක memory leaks සහ high CPU usage සොයාගැනීම. 17. /glance-canonical-layouts • Title: Jetpack Glance App Widgets • සිංහල: Jetpack Glance Home Screen Widgets • English: Build modern, battery-efficient Android Home Screen and Lock Screen widgets using Jetpack Glance declarative Kotlin DSL. • සිංහල: Android Home Screen widgets Jetpack Glance මඟින් සෑදීම. 18. /wear-compose-m3 • Title: Wear OS Compose Material 3 • සිංහල: Smartwatch (Wear OS) යෙදුම් නිර්මාණය • English: Build responsive smartwatch applications for Wear OS using Compose Material 3 components, rotary input, and curved text. • සිංහල: Smartwatches සඳහා Wear OS Material 3 app interfaces සකස් කිරීම. 19. /android-cli • Title: Android SDK & ADB Command Line Mastery • සිංහල: Android SDK සහ ADB විධාන මෙහෙයුම් • English: Guide for ADB shell commands, device debugging, logcat filtering, screen recording, and package management from the terminal. • සිංහල: Terminal එකෙන් ADB හරහා Android devices debug කිරීම සහ logcat පරීක්ෂාව. 20. /display-glasses-with-jetpack-compose-glimmer • Title: XR & Smart Glasses Display with Compose Glimmer • සිංහල: Smart Glasses සහ XR උපාංග සඳහා Compose UI • English: Build augmented reality and smart glasses interfaces using Jetpack Compose Glimmer for extended reality (XR) hardware. • සිංහල: Smart Glasses සහ AR/XR උපාංග සඳහා lightweight Compose interfaces නිර්මාණය කිරීම. ================================================================================ END OF GUIDE ================================================================================