MCP App StoreMCP App StoreThis skill provides a structured, multi-step workflow for analyze. It is driven by a script included in the repo that orchestrates exploration, focused investigation, verification and synthesis, producing prioritized findings with file:line evidence and recommended remediation actions.
Use when a request spans multiple files or components and you need an architecture review, security assessment, or broad code-quality analysis. Not for single-file quick checks.
Claude Code, Copilot-style assistants, or agents that can run repository scripts and read files.
The 'analyze' skill provides a structured 6-phase codebase analysis workflow (explore, focus, plan, investigate, verify, synthesize) for AI agents. The SKILL.md is exceptionally well-written with clear triggers, anti-patterns, and verification checklists. The script is a clean Python CLI using argparse that outputs step-specific guidance — it requires mandatory arguments (--step-number, --total-steps, --thoughts) and exits with a clear usage message when missing, which is expected behavior. No security concerns found; the skill explicitly warns about command injection (CWE-78). Architecture follows the skill spec well with references/ directory and progressive disclosure.
Well-crafted skill for systematic codebase analysis. The script is essentially a state machine that generates context-appropriate prompts for each phase. Clean code, good security practices (explicit CWE-78 warning), thorough documentation. The only reason run_succeeded is false is that the script requires runtime arguments — it validates and exits cleanly rather than crashing.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Run Execute
Orchestrates execution of work items across modes (autopilot, confirm, validate) with scripted init/complete tooling, plan/test/report artifacts and strict gati
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Codex Collab
Bridge Claude and Codex to run tasks, perform code reviews, and run background jobs for research or implementation workflows.
BK-CI Design Patterns Guide
Practical guide to design patterns used in the BK-CI project (Kotlin/Spring). Covers factory, strategy, singleton, decorator, observer, template method, chain-o
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
