Agent Skills

Paper Claim Audit

claude-skill-registry

Zero-context verification that every numeric claim in a paper matches raw result files; detects rounding, cherry-picking, config mismatches and scope overclaims

CTF Write-up Generator

CTF Skills Collection

Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.

Diagnose Why Work Stopped

paperclip

Run a product-focused forensic investigation on stalled or looping issue trees, produce a root-cause write-up and an approval-gated remediation plan without shi

Code Audit

code-audit

Perform professional code security audits across 9 languages with configurable quick/standard/deep modes and Docker-backed verification.

CTF Cryptography

CTF Skills Collection

Reference of cryptographic attack techniques and tools for CTF challenges (RSA, AES, ECC, lattices, PRNGs, padding oracles, and more).

Threat Hunter — SecOps Hunt

mcp-security

Expert, tool-aware guidance for proactive threat hunting: formulate SIEM/UDM queries, iterate searches, enrich findings, and produce case or report outputs.

Stronghold of Security (SOS)

solana-vibes-kit

Phase-based adversarial security audit pipeline for Solana/Anchor codebases: scan, analyze, strategize, investigate, and report with parallel auditors and a str

Hope Agent — Logs (Self-Service Diagnostics)

hope-agent

Query Hope Agent's local SQLite log and session databases (read-only) to diagnose errors, trace tool failures, and verify fixes without asking users to paste lo

IGF (Grapefruit) CLI

grapefruit

CLI skill to control the IGF (Grapefruit) dynamic instrumentation server for mobile security testing: enumerate Frida devices, inspect apps, run hooks, access f

MITRE ATT&CK T1098 — Account Manipulation

mitre-attack-agent-skills

Defensive analysis and guidance for MITRE ATT&CK technique T1098 (Account Manipulation): detection, triage, hunting, and mitigation planning for enterprise envi

MITRE ATT&CK T1557.001: Name Resolution Poisoning & SMB Relay

mitre-attack-agent-skills

Defensive analysis skill for MITRE ATT&CK T1557.001: helps triage, detection engineering, hunting, and incident response for name-resolution poisoning and SMB r

rsbkb (Rust BlackBag)

rsbkb

Collection of fast CLI applets for binary data manipulation, encoding/decoding, checksums, compression, and reverse-engineering workflows.

QNAP QuTS Hero ZFS Rescue

qnap-zfs-rescue

Step-by-step rescue process for importing and extracting data from QNAP QuTS Hero (QZFS) pools with corrupted ZFS metadata using QNAP's own tools inside QEMU.

ATT&CK T1560.003 — Archive via Custom Method

mitre-attack-agent-skills

Defensive analysis skill for MITRE ATT&CK T1560.003: helps map observations, produce detection ideas, and create triage and mitigation briefs for custom archive

Packet Capture Analysis

agent-skills

Analyze pcap/pcapng captures to produce protocol summaries, evidence-backed IP labeling, PNG visualizations and a structured Markdown report.

CTF Web Exploitation

CTF Skills Collection

Comprehensive web-exploitation playbook for CTFs: XSS, SQLi, SSTI, SSRF, XXE, JWT abuse, auth bypass, file upload chains, and web-related reconnaissance.

OSINT Investigator

osint-ai

Turn an LLM into an OSINT analyst: generate advanced search queries, run recon pivots, build timelines, and produce structured intelligence reports using browse

Charles Proxy Session Extractor

skills_all-in-one

Parses Charles Proxy .chlsj session files to extract requests and responses, filter by path or method, and export structured JSON for inspection or analysis.

Dune Analytics (MoonPay Integration)

cryptoskill

Run Dune SQL and saved queries via the Dune REST API for on-chain analytics; pairs with MoonPay CLI to create/fund wallets for analysis.

Memory Forensics Playbook

opencode-skills-collection

Practical guidance and commands for acquiring, analyzing, and extracting artifacts from memory dumps using tools like Volatility3 and common acquisition methods

OSINT Investigator

osint-ai

Comprehensive OSINT playbook for agents: generates dorks, runs recon, builds timelines, analyzes metadata, and produces structured intelligence reports while re

FireEye

application-skills

Integrate with FireEye via the Membrane CLI to discover alerts, events, hosts, malware details and run actions using pre-built connectors. Use when you need pro

Memory Forensics

lingxling

Guidance and practical commands for acquiring, analyzing, and extracting artifacts from volatile memory dumps for incident response and malware analysis.

Memory Forensics

lingxling

Procedural guidance and tool-focused workflows for acquiring, analyzing, and extracting artifacts from RAM dumps for incident response and malware analysis.

History — Temporal Investigation

wizards-of-the-ghosts

Performs structured reconstruction of how a system, decision, or codebase arrived at its current state: timelines, key decision points, and contextual analysis

CTI Expert

cti-expert

Comprehensive CTI/OSINT analyst skill that turns an agent into a multi-technique investigator for domain, email, username, phone, and image forensics without pa

Attack Transaction Analysis

txanalyzer

Audit-grade transaction analysis skill: pull chain-specific artifacts (EVM/Solana), run a 6-phase root-cause forensic workflow, generate PoC/replay harnesses an

CTF Miscellaneous Techniques

skills

A compact reference of miscellaneous CTF techniques: encodings, jails, RF/SDR, DNS tricks, steganography, Z3 solving, WASM patching, and privilege escalation ti

Kali Docker Pentesting

kali-docker-pentesting

Provides a Kali Linux Docker container with 200+ penetration-testing tools and guidance for running scans, exploitation, and forensics via direct docker exec co

Resend — Printing Press CLI

printing-press-library

Agent-facing CLI for the Resend email platform: cross-resource queries, deliverability analytics, audience inventory and operational hygiene for account investi