MCP App StoreMCP App Store
from opencode-skills-collection23
Guided methodology and best practices for binary reverse engineering, covering static and dynamic analysis workflows and common tooling.
This skill provides a compact, practical methodology for binary reverse engineering tasks. It outlines reconnaissance, static and dynamic analysis phases, tooling recommendations (IDA/Ghidra, radare2, capstone, unicorn, angr), and documentation practices to produce reproducible findings. The skill is focused on authorized analysis: CTFs, security research, and defensive investigations.
Use this skill when you need a step-by-step approach to analyze binaries: identifying file type and architecture, mapping program structure, instrumenting execution, or producing technical documentation of results. It's suited for CTF challenges, library analysis, malware triage (defensive only), and developer interoperability investigations.
Suitable for agents that can reason about code and shell workflows (Copilot-style/code assistants, Claude Code, Codex). For dynamic analysis steps, human oversight is required to run tooling and handle isolated environments.
Reverse engineering guidance skill with a solid methodology covering recon, static analysis, dynamic analysis, and documentation phases. Includes ethical guidelines and authorized-use framing. No bundled scripts — purely instructional. Notable formatting issue: stray closing code fence after the scripting environments list. References a resources/implementation-playbook.md that was not included. The skill is well-intentioned but mostly a checklist with no automation or tooling.
Risk marked as 'offensive' in frontmatter but content is defensive/educational. Strong ethics section. No security concerns despite the domain — properly scoped to authorized use.
Python Performance Optimization
Profile, analyze, and optimize Python applications for CPU and memory efficiency using profiling tools and performance best practices.
API Security Testing Workflow
Structured workflow for testing REST and GraphQL API security: auth, authorization, rate limiting, input validation and error handling.
Azure AI Projects SDK (TypeScript)
TypeScript SDK and examples for managing Azure AI Projects: agents, connections, deployments, datasets, indexes, and evaluations.
Memory Forensics Playbook
Practical guidance and commands for acquiring, analyzing, and extracting artifacts from memory dumps using tools like Volatility3 and common acquisition methods
Testing Patterns & Utilities
Guidelines and utilities for TDD, factory-based test data, mocking strategies, and testing patterns for React/TypeScript projects.
Skill Optimizer
Diagnose and optimize Agent Skills (SKILL.md) using session transcripts and static analysis to improve triggers, workflows, and token efficiency.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Code Spec Backfill
Identify missing function-level contracts and backfill docstrings and type annotations; report ambiguous gaps with misuse scenarios. Incremental, state-driven w
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r
Bash Pro
Defensive, production-grade Bash scripting patterns and CI/CD best practices: strict mode, safe argument parsing, testing with Bats, and tooling (ShellCheck/shf