Agent Skills

Paper Claim Audit

claude-skill-registry

Zero-context verification that every numeric claim in a paper matches raw result files; detects rounding, cherry-picking, config mismatches and scope overclaims

GSD Forensics (post-mortem)

gsd-pi

Turn GSD runtime artifacts (.gsd/) into a filing-ready forensics report: trace symptom → root cause with file:line citations and propose a minimal fix; read-onl

Diagnose Why Work Stopped

paperclip

Run a product-focused forensic investigation on stalled or looping issue trees, produce a root-cause write-up and an approval-gated remediation plan without shi

CTF Write-up Generator

ctf-skills

Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.

Resend — Printing Press CLI

printing-press-library

Agent-facing CLI for the Resend email platform: cross-resource queries, deliverability analytics, audience inventory and operational hygiene for account investi

Code Audit

code-audit

Perform professional code security audits across 9 languages with configurable quick/standard/deep modes and Docker-backed verification.

CTF Cryptography

ctf-skills

Reference of cryptographic attack techniques and tools for CTF challenges (RSA, AES, ECC, lattices, PRNGs, padding oracles, and more).

Threat Hunter — SecOps Hunt

mcp-security

Expert, tool-aware guidance for proactive threat hunting: formulate SIEM/UDM queries, iterate searches, enrich findings, and produce case or report outputs.

Hope Agent — Logs (Self-Service Diagnostics)

hope-agent

Query Hope Agent's local SQLite log and session databases (read-only) to diagnose errors, trace tool failures, and verify fixes without asking users to paste lo

Stronghold of Security (SOS)

solana-vibes-kit

Phase-based adversarial security audit pipeline for Solana/Anchor codebases: scan, analyze, strategize, investigate, and report with parallel auditors and a str

MITRE ATT&CK T1098 — Account Manipulation

MITRE ATT&CK Agent Skills

Defensive analysis and guidance for MITRE ATT&CK technique T1098 (Account Manipulation): detection, triage, hunting, and mitigation planning for enterprise envi

MITRE ATT&CK — Hidden Files & Directories (T1564.001)

MITRE ATT&CK Agent Skills

Defensive analysis aid for MITRE ATT&CK T1564.001 to help triage, detection engineering, hunting, and incident response around hidden files and directories.

IGF (Grapefruit) CLI

grapefruit

CLI skill to control the IGF (Grapefruit) dynamic instrumentation server for mobile security testing: enumerate Frida devices, inspect apps, run hooks, access f

rsbkb (Rust BlackBag)

rsbkb

Collection of fast CLI applets for binary data manipulation, encoding/decoding, checksums, compression, and reverse-engineering workflows.

MITRE ATT&CK T1557.001: Name Resolution Poisoning & SMB Relay

MITRE ATT&CK Agent Skills

Defensive analysis skill for MITRE ATT&CK T1557.001: helps triage, detection engineering, hunting, and incident response for name-resolution poisoning and SMB r

QNAP QuTS Hero ZFS Rescue

qnap-zfs-rescue

Step-by-step rescue process for importing and extracting data from QNAP QuTS Hero (QZFS) pools with corrupted ZFS metadata using QNAP's own tools inside QEMU.

ATT&CK T1560.003 — Archive via Custom Method

MITRE ATT&CK Agent Skills

Defensive analysis skill for MITRE ATT&CK T1560.003: helps map observations, produce detection ideas, and create triage and mitigation briefs for custom archive

Packet Capture Analysis

agent-skills

Analyze pcap/pcapng captures to produce protocol summaries, evidence-backed IP labeling, PNG visualizations and a structured Markdown report.

CTF Web Exploitation

ctf-skills

Comprehensive web-exploitation playbook for CTFs: XSS, SQLi, SSTI, SSRF, XXE, JWT abuse, auth bypass, file upload chains, and web-related reconnaissance.

OSINT Investigator

osint-ai

Turn an LLM into an OSINT analyst: generate advanced search queries, run recon pivots, build timelines, and produce structured intelligence reports using browse

Charles Proxy Session Extractor

skills_all-in-one

Parses Charles Proxy .chlsj session files to extract requests and responses, filter by path or method, and export structured JSON for inspection or analysis.

Dune Analytics (MoonPay Integration)

cryptoskill

Run Dune SQL and saved queries via the Dune REST API for on-chain analytics; pairs with MoonPay CLI to create/fund wallets for analysis.

Memory Forensics Playbook

opencode-skills-collection

Practical guidance and commands for acquiring, analyzing, and extracting artifacts from memory dumps using tools like Volatility3 and common acquisition methods

OSINT Investigator

osint-ai

Comprehensive OSINT playbook for agents: generates dorks, runs recon, builds timelines, analyzes metadata, and produces structured intelligence reports while re

FireEye

application-skills

Integrate with FireEye via the Membrane CLI to discover alerts, events, hosts, malware details and run actions using pre-built connectors. Use when you need pro

Memory Forensics

awesome-skills-cn

Guidance and practical commands for acquiring, analyzing, and extracting artifacts from volatile memory dumps for incident response and malware analysis.

Memory Forensics

awesome-skills-cn

Procedural guidance and tool-focused workflows for acquiring, analyzing, and extracting artifacts from RAM dumps for incident response and malware analysis.

Generate Report

ai-runbooks

Save investigation findings into a timestamped markdown report file with a standard filename and structure.

History — Temporal Investigation

wizards-of-the-ghosts

Performs structured reconstruction of how a system, decision, or codebase arrived at its current state: timelines, key decision points, and contextual analysis

CTI Expert

cti-expert

Comprehensive CTI/OSINT analyst skill that turns an agent into a multi-technique investigator for domain, email, username, phone, and image forensics without pa