
from asi23
Technical cookbook describing capability-safe interactions between Goblins actors and verified WASM runtimes, with runtime selection guidance, syscall mappings,
WASM Goblins documents patterns for integrating Goblins actor systems with verified WebAssembly runtimes (Wasmtime, Wasmer, WAMR, WasmEdge, wasm3 and Hoot). It maps syscall categories to capability models, explains verification properties (Iris-Wasm, Cranelift proofs), and provides code examples showing actors compiled to or wrapping WASM modules. The material is a technical cookbook for teams building capability-isolated, sandboxed actor systems where compositional security and verified semantics matter.
Use this skill when designing or auditing an architecture that runs untrusted modules in WASM sandboxes, when selecting a runtime for specific constraints (edge, enclave, POSIX-capable), or when implementing capability-passing between actors and WASM modules. It's aimed at engineers working on runtime security, embedded/IoT deployments, or cloud-native WASM platforms.
Best consumed by developer-oriented agents with code-reading and synthesis skills (Copilot-style or Code-focused LLMs) able to produce integration examples and runtime configuration recommendations.
This is a purely informational reference document about capability-secure WASM runtime patterns with Goblins actors. It contains no executable scripts, no workflow steps, and no actionable instructions — just technical tables, Scheme code examples, and ASCII diagrams. The source file is a .bak file, suggesting it may not even be maintained. Not functional as a skill; more of a knowledge-base article for a very niche ecosystem (Spritely Goblins + WASM).
This is essentially a technical essay/cookbook, not an actionable agent skill. It has no scripts, no workflow, no triggers, and no output contracts. The .bak extension on the source file suggests it may have been deprecated. The content itself is harmless — all code examples are Scheme/WASM snippets with no shell commands, network calls, or security concerns. Would score higher as documentation than as a skill.
Analyzing Ransomware Leak Site Intelligence
Collect and analyze ransomware data-leak site (DLS) posts to extract victim, group, sector and geographic trends for threat intelligence and proactive defense.
nhero — Aftermarket Dispenser Network
Framework treating pill dispensers as network devices: routing, access control, scramble-indexing and confidential supply tracking for custom dispenser workflow
snix — Rust Nix Reimplementation
snix is a Rust reimplementation of Nix focused on content-addressed build stores and minimal rootfs images for lightweight VM agent runtimes.
Flox Services Guide
Practical patterns and commands for running and managing background services in Flox environments: service manifests, logging, venv handling, and common service
Performing Container Escape Detection
Audit Kubernetes pods to detect container escape vectors like privileged containers, dangerous capabilities, host namespace sharing, writable hostPath mounts, a