opencode-skills-collection 4.0.43 → 4.0.45

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (270) hide show
  1. package/bundled-skills/.antigravity-install-manifest.json +47 -1
  2. package/bundled-skills/api-rate-limit-handler/SKILL.md +282 -0
  3. package/bundled-skills/api-security/SKILL.md +205 -0
  4. package/bundled-skills/api-security/references/jwt-oauth-testing.md +123 -0
  5. package/bundled-skills/api-security/references/rest-graphql-testing.md +137 -0
  6. package/bundled-skills/apk-reverse/SKILL.md +438 -0
  7. package/bundled-skills/apk-reverse/references/android-advanced.md +365 -0
  8. package/bundled-skills/apk-reverse/references/apk-security-checklist.md +230 -0
  9. package/bundled-skills/apk-reverse/references/frida-bypass-kit.md +70 -0
  10. package/bundled-skills/apk-reverse/references/frida-cookbook.md +472 -0
  11. package/bundled-skills/attack-chain/SKILL.md +185 -0
  12. package/bundled-skills/attack-chain/references/attack-playbooks.md +126 -0
  13. package/bundled-skills/attack-chain/references/evasion-cheatsheet.md +133 -0
  14. package/bundled-skills/attack-chain/references/lifecycle-checklist.md +37 -0
  15. package/bundled-skills/attack-chain/references/phases.md +490 -0
  16. package/bundled-skills/binary-diff/SKILL.md +320 -0
  17. package/bundled-skills/binary-diff/references/prompt-template.md +173 -0
  18. package/bundled-skills/browser-extension-reverse/SKILL.md +99 -0
  19. package/bundled-skills/browser-extension-reverse/references/extension-analysis.md +10 -0
  20. package/bundled-skills/case-review/SKILL.md +167 -0
  21. package/bundled-skills/cloud-k8s/SKILL.md +124 -0
  22. package/bundled-skills/cloud-k8s/references/k8s-cloud-checklist.md +16 -0
  23. package/bundled-skills/code-audit/SKILL.md +92 -0
  24. package/bundled-skills/code-audit/references/sast-review-checklist.md +10 -0
  25. package/bundled-skills/database-security/SKILL.md +81 -0
  26. package/bundled-skills/database-security/references/db-misconfig-checklist.md +9 -0
  27. package/bundled-skills/diagram-generator/SKILL.md +199 -0
  28. package/bundled-skills/diagram-generator/references/README.md +3 -0
  29. package/bundled-skills/diagram-generator/references/diagram-patterns.md +254 -0
  30. package/bundled-skills/digital-forensics/SKILL.md +93 -0
  31. package/bundled-skills/digital-forensics/references/forensics-triage.md +10 -0
  32. package/bundled-skills/docs/integrations/jetski-cortex.md +3 -3
  33. package/bundled-skills/docs/integrations/jetski-gemini-loader/README.md +1 -1
  34. package/bundled-skills/docs/maintainers/repo-growth-seo.md +1 -1
  35. package/bundled-skills/docs/maintainers/skills-update-guide.md +1 -1
  36. package/bundled-skills/docs/sources/sources.md +9 -0
  37. package/bundled-skills/docs/users/aas-core.md +1 -1
  38. package/bundled-skills/docs/users/bundles.md +1 -1
  39. package/bundled-skills/docs/users/claude-code-skills.md +1 -1
  40. package/bundled-skills/docs/users/gemini-cli-skills.md +1 -1
  41. package/bundled-skills/docs/users/kiro-integration.md +1 -1
  42. package/bundled-skills/docs/users/usage.md +3 -3
  43. package/bundled-skills/docs/users/visual-guide.md +4 -4
  44. package/bundled-skills/docs-generator/SKILL.md +197 -0
  45. package/bundled-skills/docs-generator/references/security-report-templates.md +348 -0
  46. package/bundled-skills/docs-generator/references/templates.md +102 -0
  47. package/bundled-skills/docs-generator/references/vendor-report-rules.md +263 -0
  48. package/bundled-skills/dotnet-reverse/SKILL.md +197 -0
  49. package/bundled-skills/dotnet-reverse/references/common-workflow.md +171 -0
  50. package/bundled-skills/dotnet-reverse/references/obfuscators.md +145 -0
  51. package/bundled-skills/dotnet-reverse/references/sharp-tools.md +164 -0
  52. package/bundled-skills/edr-bypass-re/SKILL.md +248 -0
  53. package/bundled-skills/edr-bypass-re/references/hook-survey.md +226 -0
  54. package/bundled-skills/edr-bypass-re/references/telemetry-blinding.md +346 -0
  55. package/bundled-skills/edr-bypass-re/references/unhook-techniques.md +338 -0
  56. package/bundled-skills/email-security/SKILL.md +81 -0
  57. package/bundled-skills/email-security/references/email-auth-checklist.md +8 -0
  58. package/bundled-skills/firmware-pentest/SKILL.md +381 -0
  59. package/bundled-skills/firmware-pentest/references/emba-automated-analysis.md +192 -0
  60. package/bundled-skills/firmware-pentest/references/emulation-and-fuzz.md +337 -0
  61. package/bundled-skills/firmware-pentest/references/extraction-methodology.md +285 -0
  62. package/bundled-skills/ghidra-reverse/SKILL.md +98 -0
  63. package/bundled-skills/ghidra-reverse/references/ghidra-cheatsheet.md +12 -0
  64. package/bundled-skills/go-rust-reverse/SKILL.md +82 -0
  65. package/bundled-skills/go-rust-reverse/references/go-rust-notes.md +5 -0
  66. package/bundled-skills/hardware-security/SKILL.md +80 -0
  67. package/bundled-skills/hardware-security/references/debug-interface-triage.md +7 -0
  68. package/bundled-skills/ida-reverse/SKILL.md +401 -0
  69. package/bundled-skills/ida-reverse/references/LOCAL-SETUP.md +66 -0
  70. package/bundled-skills/ida-reverse/references/ida-mcp-cheatsheet.md +515 -0
  71. package/bundled-skills/identity-federation/SKILL.md +81 -0
  72. package/bundled-skills/identity-federation/references/sso-flow-checklist.md +9 -0
  73. package/bundled-skills/instructree/SKILL.md +94 -0
  74. package/bundled-skills/js-reverse/SKILL.md +239 -0
  75. package/bundled-skills/js-reverse/references/ast-deobfuscation.md +3 -0
  76. package/bundled-skills/js-reverse/references/automation-entry.md +12 -0
  77. package/bundled-skills/js-reverse/references/env-patching.md +6 -0
  78. package/bundled-skills/js-reverse/references/fallbacks.md +8 -0
  79. package/bundled-skills/js-reverse/references/instrumentation.md +9 -0
  80. package/bundled-skills/js-reverse/references/local-rebuild.md +11 -0
  81. package/bundled-skills/js-reverse/references/mcp-task-template.md +30 -0
  82. package/bundled-skills/js-reverse/references/node-env-rebuild.md +9 -0
  83. package/bundled-skills/js-reverse/references/output-contract.md +9 -0
  84. package/bundled-skills/js-reverse/references/task-artifacts.md +11 -0
  85. package/bundled-skills/js-reverse/references/task-input-template.md +11 -0
  86. package/bundled-skills/js-reverse/references/tool-defaults.md +7 -0
  87. package/bundled-skills/llm-security/SKILL.md +160 -0
  88. package/bundled-skills/llm-security/references/agent-obedience-engineering.md +243 -0
  89. package/bundled-skills/llm-security/references/agent-security-testing.md +116 -0
  90. package/bundled-skills/llm-security/references/owasp-llm-top10.md +48 -0
  91. package/bundled-skills/llm-security/references/prompt-injection-methodology.md +107 -0
  92. package/bundled-skills/loki-mode/examples/todo-app-generated/backend/package-lock.json +4 -4
  93. package/bundled-skills/loki-mode/examples/todo-app-generated/backend/package.json +1 -1
  94. package/bundled-skills/macos-reverse/SKILL.md +85 -0
  95. package/bundled-skills/macos-reverse/references/macho-triage.md +10 -0
  96. package/bundled-skills/malware-analysis/SKILL.md +311 -0
  97. package/bundled-skills/malware-analysis/references/anti-analysis-techniques.md +205 -0
  98. package/bundled-skills/malware-analysis/references/sandbox-orchestration.md +204 -0
  99. package/bundled-skills/malware-analysis/references/yara-sigma-rules.md +232 -0
  100. package/bundled-skills/mobile-reverse/SKILL.md +222 -0
  101. package/bundled-skills/mobile-reverse/references/anti-detection-bypass.md +182 -0
  102. package/bundled-skills/mobile-reverse/references/frida-objection-deep.md +218 -0
  103. package/bundled-skills/mobile-reverse/references/ios-reverse-guide.md +177 -0
  104. package/bundled-skills/muapi-media/SKILL.md +311 -0
  105. package/bundled-skills/ot-ics/SKILL.md +117 -0
  106. package/bundled-skills/ot-ics/references/ot-safe-assessment.md +10 -0
  107. package/bundled-skills/patch-diff-exploit/SKILL.md +278 -0
  108. package/bundled-skills/patch-diff-exploit/references/diff-tools-comparison.md +271 -0
  109. package/bundled-skills/patch-diff-exploit/references/patch-tuesday-workflow.md +253 -0
  110. package/bundled-skills/patch-diff-exploit/references/root-cause-and-poc.md +198 -0
  111. package/bundled-skills/pentest-tools/SKILL.md +346 -0
  112. package/bundled-skills/pentest-tools/references/ai-pentest-agents.md +148 -0
  113. package/bundled-skills/pentest-tools/references/ai-pentesting-landscape-2026.md +73 -0
  114. package/bundled-skills/pentest-tools/references/automation-loop-pattern.md +153 -0
  115. package/bundled-skills/pentest-tools/references/awesome-pentest-digest.md +175 -0
  116. package/bundled-skills/pentest-tools/references/burpsuite-mcp-guide.md +769 -0
  117. package/bundled-skills/pentest-tools/references/client-side-lab-playbook.md +155 -0
  118. package/bundled-skills/pentest-tools/references/kali-mcp-ecosystem.md +119 -0
  119. package/bundled-skills/pentest-tools/references/msf-protocol.md +169 -0
  120. package/bundled-skills/pentest-tools/references/network-attack-defense.md +350 -0
  121. package/bundled-skills/pentest-tools/references/nuclei-guide-2026.md +157 -0
  122. package/bundled-skills/pentest-tools/references/payloads.md +32 -0
  123. package/bundled-skills/pentest-tools/references/pentest-ai-agents-matrix.md +117 -0
  124. package/bundled-skills/pentest-tools/references/pentest-loop.md +270 -0
  125. package/bundled-skills/pentest-tools/references/recon-pipeline.md +154 -0
  126. package/bundled-skills/pentest-tools/references/templates/findings.md +21 -0
  127. package/bundled-skills/pentest-tools/references/templates/progress.md +17 -0
  128. package/bundled-skills/pentest-tools/references/templates/rules.md +35 -0
  129. package/bundled-skills/pentest-tools/references/templates/scope.md +29 -0
  130. package/bundled-skills/pentest-tools/references/templates/task_plan.md +27 -0
  131. package/bundled-skills/pentest-tools/references/web-attack-cheatsheet.md +387 -0
  132. package/bundled-skills/pentest-tools/src-hunter/SKILL.md +243 -0
  133. package/bundled-skills/pentest-tools/src-hunter/references/README.en.md +115 -0
  134. package/bundled-skills/pentest-tools/src-hunter/references/README.md +148 -0
  135. package/bundled-skills/pentest-tools/src-hunter/references/dictionaries/00-index.md +44 -0
  136. package/bundled-skills/pentest-tools/src-hunter/references/dictionaries/chinese-srcfingerprints.md +515 -0
  137. package/bundled-skills/pentest-tools/src-hunter/references/dictionaries/default-credentials-cn.md +274 -0
  138. package/bundled-skills/pentest-tools/src-hunter/references/industry/00-index.md +66 -0
  139. package/bundled-skills/pentest-tools/src-hunter/references/industry/banking-finance.md +338 -0
  140. package/bundled-skills/pentest-tools/src-hunter/references/industry/telecom-isp.md +315 -0
  141. package/bundled-skills/pentest-tools/src-hunter/references/methodology/00-index.md +68 -0
  142. package/bundled-skills/pentest-tools/src-hunter/references/methodology/01-attack-priority.md +143 -0
  143. package/bundled-skills/pentest-tools/src-hunter/references/methodology/02-bypass-toolkit.md +357 -0
  144. package/bundled-skills/pentest-tools/src-hunter/references/methodology/03-evidence-discipline.md +205 -0
  145. package/bundled-skills/pentest-tools/src-hunter/references/methodology/04-control-gap-hunting.md +238 -0
  146. package/bundled-skills/pentest-tools/src-hunter/references/methodology/05-srctimebox-priority.md +161 -0
  147. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/adcs/346/224/273/345/207/273.md +254 -0
  148. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/exchange/346/224/273/345/207/273.md +254 -0
  149. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet/sharepoint/346/224/273/345/207/273.md +113 -0
  150. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//344/277/241/346/201/257/346/224/266/351/233/206.md +947 -0
  151. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//345/205/215/346/235/200/344/270/216/350/247/204/351/201/277.md +780 -0
  152. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//345/207/255/350/257/201/347/252/203/345/217/226.md +1259 -0
  153. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//345/237/237/346/270/227/351/200/217/346/224/273/345/207/273.md +753 -0
  154. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//346/235/203/351/231/220/346/217/220/345/215/207.md +819 -0
  155. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//346/235/203/351/231/220/347/273/264/346/214/201.md +577 -0
  156. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//346/250/252/345/220/221/347/247/273/345/212/250.md +838 -0
  157. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/intranet//351/232/247/351/201/223/344/273/243/347/220/206.md +604 -0
  158. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/ai/345/256/211/345/205/250.md +698 -0
  159. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/api/345/256/211/345/205/250.md +1935 -0
  160. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/csrf/350/267/250/347/253/231/350/257/267/346/261/202/344/274/252/351/200/240.md +952 -0
  161. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/jwt/345/256/211/345/205/250.md +496 -0
  162. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/lfi-rfi/346/226/207/344/273/266/345/214/205/345/220/253.md +1365 -0
  163. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/rce/350/277/234/347/250/213/344/273/243/347/240/201/346/211/247/350/241/214.md +1329 -0
  164. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/sql-nosql/346/263/250/345/205/245.md +1924 -0
  165. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssrf/346/234/215/345/212/241/347/253/257/350/257/267/346/261/202/344/274/252/351/200/240.md +1256 -0
  166. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/ssti/346/250/241/346/235/277/346/263/250/345/205/245.md +1151 -0
  167. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/websocket/345/256/211/345/205/250.md +487 -0
  168. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/xss/350/267/250/347/253/231/350/204/232/346/234/254.md +1465 -0
  169. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web/xxe/345/256/236/344/275/223/346/263/250/345/205/245.md +815 -0
  170. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//344/270/232/345/212/241/351/200/273/350/276/221/346/274/217/346/264/236.md +594 -0
  171. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//344/272/221/345/256/211/345/205/250/346/274/217/346/264/236.md +561 -0
  172. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//344/276/233/345/272/224/351/223/276/346/224/273/345/207/273.md +399 -0
  173. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//345/216/237/345/236/213/351/223/276/346/261/241/346/237/223.md +401 -0
  174. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//345/274/200/346/224/276/351/207/215/345/256/232/345/220/221.md +396 -0
  175. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//346/226/207/344/273/266/346/274/217/346/264/236.md +0 -0
  176. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//346/241/206/346/236/266/346/274/217/346/264/236.md +2304 -0
  177. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//347/202/271/345/207/273/345/212/253/346/214/201.md +339 -0
  178. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//347/274/223/345/255/230/344/270/216cdn/345/256/211/345/205/250.md +497 -0
  179. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//350/256/244/350/257/201/346/274/217/346/264/236.md +1778 -0
  180. package/bundled-skills/pentest-tools/src-hunter/references/payloader/by-category/web//350/257/267/346/261/202/350/265/260/347/247/201.md +854 -0
  181. package/bundled-skills/pentest-tools/src-hunter/references/payloader/index.md +69 -0
  182. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools/web/346/270/227/351/200/217.md +662 -0
  183. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools/windows/346/270/227/351/200/217.md +100 -0
  184. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//344/277/241/346/201/257/346/224/266/351/233/206.md +852 -0
  185. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//345/206/205/347/275/221/346/270/227/351/200/217.md +873 -0
  186. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//345/207/255/350/257/201/347/252/203/345/217/226.md +186 -0
  187. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//345/237/237/346/270/227/351/200/217.md +50 -0
  188. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//345/257/206/347/240/201/346/224/273/345/207/273.md +462 -0
  189. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//346/235/203/351/231/220/346/217/220/345/215/207.md +168 -0
  190. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//346/274/217/346/264/236/345/210/251/347/224/250.md +445 -0
  191. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//347/263/273/347/273/237/345/221/275/344/273/244.md +410 -0
  192. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//347/272/242/351/230/237/345/267/245/345/205/267.md +64 -0
  193. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//347/274/226/347/240/201/350/247/243/347/240/201.md +226 -0
  194. package/bundled-skills/pentest-tools/src-hunter/references/payloader/tools//351/232/247/351/201/223/344/273/243/347/220/206.md +84 -0
  195. package/bundled-skills/pentest-tools/src-hunter/references/payloader/waf-bypass.md +6504 -0
  196. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/00-index.md +57 -0
  197. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/api-rest.md +2050 -0
  198. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/arbitrary-x-authz.md +481 -0
  199. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/dos.md +615 -0
  200. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/file-upload.md +1365 -0
  201. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/graphql.md +253 -0
  202. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/http-smuggling.md +924 -0
  203. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/info-disclosure.md +432 -0
  204. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/intranet-postexp.md +4845 -0
  205. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/llm-prompt-injection.md +1394 -0
  206. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/logic-flaws.md +1796 -0
  207. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/mobile.md +397 -0
  208. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/oauth-saml-jwt.md +2504 -0
  209. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/path-traversal.md +1297 -0
  210. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/race-conditions.md +207 -0
  211. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/rce.md +4829 -0
  212. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/sqli.md +1620 -0
  213. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/ssrf-cache-host.md +2098 -0
  214. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/unauth-access.md +330 -0
  215. package/bundled-skills/pentest-tools/src-hunter/references/playbooks/xss.md +1159 -0
  216. package/bundled-skills/pentest-tools/src-hunter/references/templates/report-submission.md +346 -0
  217. package/bundled-skills/pentest-tools/src-hunter/references/tools/mcp-jshook.md +174 -0
  218. package/bundled-skills/protocol-reverse/SKILL.md +108 -0
  219. package/bundled-skills/protocol-reverse/references/protocol-workflow.md +29 -0
  220. package/bundled-skills/pwn-chain/SKILL.md +209 -0
  221. package/bundled-skills/pwn-chain/references/heap-pwn.md +283 -0
  222. package/bundled-skills/pwn-chain/references/kernel-pwn.md +370 -0
  223. package/bundled-skills/pwn-chain/references/stack-pwn.md +312 -0
  224. package/bundled-skills/radare2/SKILL.md +460 -0
  225. package/bundled-skills/radare2/references/cheatsheet.md +129 -0
  226. package/bundled-skills/radio-sdr/SKILL.md +77 -0
  227. package/bundled-skills/radio-sdr/references/sdr-lab-rules.md +6 -0
  228. package/bundled-skills/reverse-browser-automation/SKILL.md +249 -0
  229. package/bundled-skills/reverse-browser-automation/references/playwright-cheatsheet.md +425 -0
  230. package/bundled-skills/reverse-engineering/SKILL.md +213 -0
  231. package/bundled-skills/reverse-engineering/dsl-vm-reverse/SKILL.md +388 -0
  232. package/bundled-skills/reverse-engineering/references/ai-assisted-re.md +149 -0
  233. package/bundled-skills/reverse-engineering/references/anti-analysis.md +836 -0
  234. package/bundled-skills/reverse-engineering/references/awesome-re-resources.md +135 -0
  235. package/bundled-skills/reverse-engineering/references/crypto-decode-tools.md +220 -0
  236. package/bundled-skills/reverse-engineering/references/elf-analysis.md +296 -0
  237. package/bundled-skills/reverse-engineering/references/field-notes.md +540 -0
  238. package/bundled-skills/reverse-engineering/references/go-reverse.md +240 -0
  239. package/bundled-skills/reverse-engineering/references/kernel-driver-reverse.md +298 -0
  240. package/bundled-skills/reverse-engineering/references/languages-compiled.md +587 -0
  241. package/bundled-skills/reverse-engineering/references/languages-platforms.md +486 -0
  242. package/bundled-skills/reverse-engineering/references/languages.md +499 -0
  243. package/bundled-skills/reverse-engineering/references/nonpe-format-cookbook.md +301 -0
  244. package/bundled-skills/reverse-engineering/references/ollvm-deobfuscation.md +501 -0
  245. package/bundled-skills/reverse-engineering/references/patterns-ctf-2.md +397 -0
  246. package/bundled-skills/reverse-engineering/references/patterns-ctf-3.md +719 -0
  247. package/bundled-skills/reverse-engineering/references/patterns-ctf.md +532 -0
  248. package/bundled-skills/reverse-engineering/references/patterns.md +801 -0
  249. package/bundled-skills/reverse-engineering/references/platforms-hardware.md +304 -0
  250. package/bundled-skills/reverse-engineering/references/platforms.md +442 -0
  251. package/bundled-skills/reverse-engineering/references/re-agent-workflow.md +240 -0
  252. package/bundled-skills/reverse-engineering/references/tools-advanced.md +822 -0
  253. package/bundled-skills/reverse-engineering/references/tools-dynamic.md +846 -0
  254. package/bundled-skills/reverse-engineering/references/tools.md +546 -0
  255. package/bundled-skills/supply-chain-security/SKILL.md +180 -0
  256. package/bundled-skills/supply-chain-security/references/cicd-pipeline-security.md +137 -0
  257. package/bundled-skills/supply-chain-security/references/sbom-sca-methodology.md +74 -0
  258. package/bundled-skills/thick-client/SKILL.md +104 -0
  259. package/bundled-skills/thick-client/references/thick-client-checklist.md +9 -0
  260. package/bundled-skills/threat-hunting/SKILL.md +94 -0
  261. package/bundled-skills/threat-hunting/references/hunting-loop.md +5 -0
  262. package/bundled-skills/threat-intelligence/SKILL.md +176 -0
  263. package/bundled-skills/threat-intelligence/references/x-public-intelligence.md +93 -0
  264. package/bundled-skills/tree-ring-memory/SKILL.md +29 -9
  265. package/bundled-skills/wifi-wireless/SKILL.md +80 -0
  266. package/bundled-skills/wifi-wireless/references/wireless-lab-rules.md +6 -0
  267. package/bundled-skills/windows-ad/SKILL.md +109 -0
  268. package/bundled-skills/windows-ad/references/ad-attack-paths.md +12 -0
  269. package/package.json +1 -1
  270. package/skills_index.json +1214 -2
package/skills_index.json CHANGED
@@ -3003,6 +3003,39 @@
3003
3003
  "reasons": []
3004
3004
  }
3005
3005
  },
3006
+ {
3007
+ "id": "api-rate-limit-handler",
3008
+ "path": "skills/api-rate-limit-handler",
3009
+ "category": "development",
3010
+ "name": "api-rate-limit-handler",
3011
+ "description": "Implement bounded, idempotency-aware API throttling, backoff, and retry handling for 429 and transient 5xx responses.",
3012
+ "risk": "safe",
3013
+ "source": "self",
3014
+ "date_added": "2026-08-26",
3015
+ "plugin": {
3016
+ "targets": {
3017
+ "codex": "supported",
3018
+ "claude": "supported"
3019
+ },
3020
+ "setup": {
3021
+ "type": "none",
3022
+ "summary": "",
3023
+ "docs": null
3024
+ },
3025
+ "reasons": []
3026
+ },
3027
+ "source_type": "self",
3028
+ "license": "MIT",
3029
+ "tags": [
3030
+ "rate-limiting",
3031
+ "retry",
3032
+ "backoff",
3033
+ "api",
3034
+ "resilience",
3035
+ "throttle",
3036
+ "429"
3037
+ ]
3038
+ },
3006
3039
  {
3007
3040
  "id": "api-sdk-generator",
3008
3041
  "path": "skills/api-sdk-generator",
@@ -3029,6 +3062,32 @@
3029
3062
  "license": "MIT",
3030
3063
  "license_source": "https://github.com/LambdaTest/agent-skills/blob/main/LICENSE"
3031
3064
  },
3065
+ {
3066
+ "id": "api-security",
3067
+ "path": "skills/api-security",
3068
+ "category": "backend",
3069
+ "name": "api-security",
3070
+ "description": "Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs: discovery, authentication and authorization flaws (BOLA/IDOR, JWT/OAuth), rate-limit testing, and a structured multi-phase methodology.",
3071
+ "risk": "offensive",
3072
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
3073
+ "date_added": "2026-08-25",
3074
+ "plugin": {
3075
+ "targets": {
3076
+ "codex": "supported",
3077
+ "claude": "supported"
3078
+ },
3079
+ "setup": {
3080
+ "type": "none",
3081
+ "summary": "",
3082
+ "docs": null
3083
+ },
3084
+ "reasons": []
3085
+ },
3086
+ "source_type": "community",
3087
+ "source_repo": "zhaoxuya520/reverse-skill",
3088
+ "license": "MIT",
3089
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
3090
+ },
3032
3091
  {
3033
3092
  "id": "api-security-best-practices",
3034
3093
  "path": "skills/api-security-best-practices",
@@ -3361,6 +3420,32 @@
3361
3420
  "reasons": []
3362
3421
  }
3363
3422
  },
3423
+ {
3424
+ "id": "apk-reverse",
3425
+ "path": "skills/apk-reverse",
3426
+ "category": "uncategorized",
3427
+ "name": "apk-reverse",
3428
+ "description": "Android APK reverse engineering: unpacking, Java decompilation, smali modification, repacking and signing, Frida dynamic hooking, and native .so analysis with jadx, apktool, adb, and related tools.",
3429
+ "risk": "offensive",
3430
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
3431
+ "date_added": "2026-08-25",
3432
+ "plugin": {
3433
+ "targets": {
3434
+ "codex": "supported",
3435
+ "claude": "supported"
3436
+ },
3437
+ "setup": {
3438
+ "type": "none",
3439
+ "summary": "",
3440
+ "docs": null
3441
+ },
3442
+ "reasons": []
3443
+ },
3444
+ "source_type": "community",
3445
+ "source_repo": "zhaoxuya520/reverse-skill",
3446
+ "license": "MIT",
3447
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
3448
+ },
3364
3449
  {
3365
3450
  "id": "app-builder",
3366
3451
  "path": "skills/app-builder",
@@ -4030,6 +4115,32 @@
4030
4115
  "license": "MIT",
4031
4116
  "license_source": "https://github.com/wede-wx/atlas/blob/main/LICENSE"
4032
4117
  },
4118
+ {
4119
+ "id": "attack-chain",
4120
+ "path": "skills/attack-chain",
4121
+ "category": "uncategorized",
4122
+ "name": "attack-chain",
4123
+ "description": "Authorized multi-stage attack-path planning and orchestration spanning reconnaissance, initial access, privilege escalation, lateral movement, and reporting. Entry point for full engagements and cross-phase operations.",
4124
+ "risk": "offensive",
4125
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
4126
+ "date_added": "2026-08-25",
4127
+ "plugin": {
4128
+ "targets": {
4129
+ "codex": "supported",
4130
+ "claude": "supported"
4131
+ },
4132
+ "setup": {
4133
+ "type": "none",
4134
+ "summary": "",
4135
+ "docs": null
4136
+ },
4137
+ "reasons": []
4138
+ },
4139
+ "source_type": "community",
4140
+ "source_repo": "zhaoxuya520/reverse-skill",
4141
+ "license": "MIT",
4142
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
4143
+ },
4033
4144
  {
4034
4145
  "id": "attack-tree-construction",
4035
4146
  "path": "skills/attack-tree-construction",
@@ -8199,6 +8310,32 @@
8199
8310
  "reasons": []
8200
8311
  }
8201
8312
  },
8313
+ {
8314
+ "id": "binary-diff",
8315
+ "path": "skills/binary-diff",
8316
+ "category": "uncategorized",
8317
+ "name": "binary-diff",
8318
+ "description": "Cross-version binary symbol migration: diff updated binaries, recover function names without PDBs, and propagate annotations after software updates using BinDiff-style tooling.",
8319
+ "risk": "safe",
8320
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
8321
+ "date_added": "2026-08-25",
8322
+ "plugin": {
8323
+ "targets": {
8324
+ "codex": "supported",
8325
+ "claude": "supported"
8326
+ },
8327
+ "setup": {
8328
+ "type": "none",
8329
+ "summary": "",
8330
+ "docs": null
8331
+ },
8332
+ "reasons": []
8333
+ },
8334
+ "source_type": "community",
8335
+ "source_repo": "zhaoxuya520/reverse-skill",
8336
+ "license": "MIT",
8337
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
8338
+ },
8202
8339
  {
8203
8340
  "id": "biopython",
8204
8341
  "path": "skills/biopython",
@@ -8898,6 +9035,32 @@
8898
9035
  "reasons": []
8899
9036
  }
8900
9037
  },
9038
+ {
9039
+ "id": "browser-extension-reverse",
9040
+ "path": "skills/browser-extension-reverse",
9041
+ "category": "web-development",
9042
+ "name": "browser-extension-reverse",
9043
+ "description": "Authorized reverse engineering of Chrome/Firefox extensions: manifest analysis, background workers, content scripts, and extension-based credential or data-exposure research.",
9044
+ "risk": "offensive",
9045
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
9046
+ "date_added": "2026-08-25",
9047
+ "plugin": {
9048
+ "targets": {
9049
+ "codex": "supported",
9050
+ "claude": "supported"
9051
+ },
9052
+ "setup": {
9053
+ "type": "none",
9054
+ "summary": "",
9055
+ "docs": null
9056
+ },
9057
+ "reasons": []
9058
+ },
9059
+ "source_type": "community",
9060
+ "source_repo": "zhaoxuya520/reverse-skill",
9061
+ "license": "MIT",
9062
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
9063
+ },
8901
9064
  {
8902
9065
  "id": "browser-harness",
8903
9066
  "path": "skills/browser-harness",
@@ -9643,6 +9806,32 @@
9643
9806
  "reasons": []
9644
9807
  }
9645
9808
  },
9809
+ {
9810
+ "id": "case-review",
9811
+ "path": "skills/case-review",
9812
+ "category": "uncategorized",
9813
+ "name": "case-review",
9814
+ "description": "Quality-gate review of a reverse-engineering or assessment case package: scope readiness, Evidence-to-Finding-to-Path traceability, work-item coverage, timeline consistency, and artifact hashes.",
9815
+ "risk": "safe",
9816
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
9817
+ "date_added": "2026-08-25",
9818
+ "plugin": {
9819
+ "targets": {
9820
+ "codex": "supported",
9821
+ "claude": "supported"
9822
+ },
9823
+ "setup": {
9824
+ "type": "none",
9825
+ "summary": "",
9826
+ "docs": null
9827
+ },
9828
+ "reasons": []
9829
+ },
9830
+ "source_type": "community",
9831
+ "source_repo": "zhaoxuya520/reverse-skill",
9832
+ "license": "MIT",
9833
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
9834
+ },
9646
9835
  {
9647
9836
  "id": "cc-skill-backend-patterns",
9648
9837
  "path": "skills/cc-skill-backend-patterns",
@@ -10647,6 +10836,32 @@
10647
10836
  "reasons": []
10648
10837
  }
10649
10838
  },
10839
+ {
10840
+ "id": "cloud-k8s",
10841
+ "path": "skills/cloud-k8s",
10842
+ "category": "uncategorized",
10843
+ "name": "cloud-k8s",
10844
+ "description": "Authorized cloud, container, and Kubernetes security assessment: metadata SSRF, IAM misconfiguration, container escape paths, and cluster RBAC review.",
10845
+ "risk": "offensive",
10846
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
10847
+ "date_added": "2026-08-25",
10848
+ "plugin": {
10849
+ "targets": {
10850
+ "codex": "supported",
10851
+ "claude": "supported"
10852
+ },
10853
+ "setup": {
10854
+ "type": "none",
10855
+ "summary": "",
10856
+ "docs": null
10857
+ },
10858
+ "reasons": []
10859
+ },
10860
+ "source_type": "community",
10861
+ "source_repo": "zhaoxuya520/reverse-skill",
10862
+ "license": "MIT",
10863
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
10864
+ },
10650
10865
  {
10651
10866
  "id": "cloudflare-security-audit",
10652
10867
  "path": "skills/cloudflare-security-audit",
@@ -10795,6 +11010,32 @@
10795
11010
  "reasons": []
10796
11011
  }
10797
11012
  },
11013
+ {
11014
+ "id": "code-audit",
11015
+ "path": "skills/code-audit",
11016
+ "category": "development",
11017
+ "name": "code-audit",
11018
+ "description": "Authorized source-code security review and SAST workflows: Semgrep and CodeQL pattern hunting, dangerous API identification, and fix verification.",
11019
+ "risk": "safe",
11020
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
11021
+ "date_added": "2026-08-25",
11022
+ "plugin": {
11023
+ "targets": {
11024
+ "codex": "supported",
11025
+ "claude": "supported"
11026
+ },
11027
+ "setup": {
11028
+ "type": "none",
11029
+ "summary": "",
11030
+ "docs": null
11031
+ },
11032
+ "reasons": []
11033
+ },
11034
+ "source_type": "community",
11035
+ "source_repo": "zhaoxuya520/reverse-skill",
11036
+ "license": "MIT",
11037
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
11038
+ },
10798
11039
  {
10799
11040
  "id": "code-documentation-code-explain",
10800
11041
  "path": "skills/code-documentation-code-explain",
@@ -14362,6 +14603,32 @@
14362
14603
  "reasons": []
14363
14604
  }
14364
14605
  },
14606
+ {
14607
+ "id": "database-security",
14608
+ "path": "skills/database-security",
14609
+ "category": "database",
14610
+ "name": "database-security",
14611
+ "description": "Authorized database security assessment across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis: exposure, authorization gaps, UDF/command execution paths, and misconfiguration review.",
14612
+ "risk": "offensive",
14613
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
14614
+ "date_added": "2026-08-25",
14615
+ "plugin": {
14616
+ "targets": {
14617
+ "codex": "supported",
14618
+ "claude": "supported"
14619
+ },
14620
+ "setup": {
14621
+ "type": "none",
14622
+ "summary": "",
14623
+ "docs": null
14624
+ },
14625
+ "reasons": []
14626
+ },
14627
+ "source_type": "community",
14628
+ "source_repo": "zhaoxuya520/reverse-skill",
14629
+ "license": "MIT",
14630
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
14631
+ },
14365
14632
  {
14366
14633
  "id": "datadog-automation",
14367
14634
  "path": "skills/datadog-automation",
@@ -15810,6 +16077,32 @@
15810
16077
  "coding-agents"
15811
16078
  ]
15812
16079
  },
16080
+ {
16081
+ "id": "diagram-generator",
16082
+ "path": "skills/diagram-generator",
16083
+ "category": "uncategorized",
16084
+ "name": "diagram-generator",
16085
+ "description": "Generate, refine, validate, and render diagrams from natural language, notes, code, schemas, or existing diagram sources: flowcharts, swimlanes, attack-path graphs, data-flow diagrams, architecture, and state machines.",
16086
+ "risk": "safe",
16087
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
16088
+ "date_added": "2026-08-25",
16089
+ "plugin": {
16090
+ "targets": {
16091
+ "codex": "supported",
16092
+ "claude": "supported"
16093
+ },
16094
+ "setup": {
16095
+ "type": "none",
16096
+ "summary": "",
16097
+ "docs": null
16098
+ },
16099
+ "reasons": []
16100
+ },
16101
+ "source_type": "community",
16102
+ "source_repo": "zhaoxuya520/reverse-skill",
16103
+ "license": "MIT",
16104
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
16105
+ },
15813
16106
  {
15814
16107
  "id": "diary",
15815
16108
  "path": "skills/diary",
@@ -15856,6 +16149,32 @@
15856
16149
  "reasons": []
15857
16150
  }
15858
16151
  },
16152
+ {
16153
+ "id": "digital-forensics",
16154
+ "path": "skills/digital-forensics",
16155
+ "category": "uncategorized",
16156
+ "name": "digital-forensics",
16157
+ "description": "Authorized digital forensics: memory dumps, disk timelines, PCAP investigation, artifact triage, and incident-response evidence preservation.",
16158
+ "risk": "safe",
16159
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
16160
+ "date_added": "2026-08-25",
16161
+ "plugin": {
16162
+ "targets": {
16163
+ "codex": "supported",
16164
+ "claude": "supported"
16165
+ },
16166
+ "setup": {
16167
+ "type": "none",
16168
+ "summary": "",
16169
+ "docs": null
16170
+ },
16171
+ "reasons": []
16172
+ },
16173
+ "source_type": "community",
16174
+ "source_repo": "zhaoxuya520/reverse-skill",
16175
+ "license": "MIT",
16176
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
16177
+ },
15859
16178
  {
15860
16179
  "id": "discord-automation",
15861
16180
  "path": "skills/discord-automation",
@@ -16249,6 +16568,32 @@
16249
16568
  "license": "MIT",
16250
16569
  "license_source": "https://github.com/jonathimer/devmarketing-skills/blob/main/LICENSE"
16251
16570
  },
16571
+ {
16572
+ "id": "docs-generator",
16573
+ "path": "skills/docs-generator",
16574
+ "category": "uncategorized",
16575
+ "name": "docs-generator",
16576
+ "description": "Generate technical deliverables from completed analysis: reverse-engineering reports, penetration-test reports, CTF write-ups, and signature-analysis documentation with evidence-backed structure.",
16577
+ "risk": "safe",
16578
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
16579
+ "date_added": "2026-08-25",
16580
+ "plugin": {
16581
+ "targets": {
16582
+ "codex": "supported",
16583
+ "claude": "supported"
16584
+ },
16585
+ "setup": {
16586
+ "type": "none",
16587
+ "summary": "",
16588
+ "docs": null
16589
+ },
16590
+ "reasons": []
16591
+ },
16592
+ "source_type": "community",
16593
+ "source_repo": "zhaoxuya520/reverse-skill",
16594
+ "license": "MIT",
16595
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
16596
+ },
16252
16597
  {
16253
16598
  "id": "docs-guard",
16254
16599
  "path": "skills/docs-guard",
@@ -16569,6 +16914,32 @@
16569
16914
  "reasons": []
16570
16915
  }
16571
16916
  },
16917
+ {
16918
+ "id": "dotnet-reverse",
16919
+ "path": "skills/dotnet-reverse",
16920
+ "category": "uncategorized",
16921
+ "name": "dotnet-reverse",
16922
+ "description": ".NET/C# binary reverse engineering: managed PE analysis, dnSpyEx debugging, de4dot deobfuscation (ConfuserEx/SmartAssembly/Babel), IL patching, NativeAOT targets, and analysis of red-team Sharp* tooling.",
16923
+ "risk": "safe",
16924
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
16925
+ "date_added": "2026-08-25",
16926
+ "plugin": {
16927
+ "targets": {
16928
+ "codex": "supported",
16929
+ "claude": "supported"
16930
+ },
16931
+ "setup": {
16932
+ "type": "none",
16933
+ "summary": "",
16934
+ "docs": null
16935
+ },
16936
+ "reasons": []
16937
+ },
16938
+ "source_type": "community",
16939
+ "source_repo": "zhaoxuya520/reverse-skill",
16940
+ "license": "MIT",
16941
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
16942
+ },
16572
16943
  {
16573
16944
  "id": "doubt-driven-development",
16574
16945
  "path": "skills/doubt-driven-development",
@@ -16729,6 +17100,32 @@
16729
17100
  "document-analysis"
16730
17101
  ]
16731
17102
  },
17103
+ {
17104
+ "id": "dsl-vm-reverse",
17105
+ "path": "skills/reverse-engineering/dsl-vm-reverse",
17106
+ "category": "reverse-engineering",
17107
+ "name": "dsl-vm-reverse",
17108
+ "description": "Reverse JavaScript-based custom DSL/VM interpreters and risk-control engines: identify IIFE/switch-based opcode dispatch, extract opcode tables, and capture runtime semantics.",
17109
+ "risk": "safe",
17110
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
17111
+ "date_added": "2026-08-25",
17112
+ "plugin": {
17113
+ "targets": {
17114
+ "codex": "supported",
17115
+ "claude": "supported"
17116
+ },
17117
+ "setup": {
17118
+ "type": "none",
17119
+ "summary": "",
17120
+ "docs": null
17121
+ },
17122
+ "reasons": []
17123
+ },
17124
+ "source_type": "community",
17125
+ "source_repo": "zhaoxuya520/reverse-skill",
17126
+ "license": "MIT",
17127
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
17128
+ },
16732
17129
  {
16733
17130
  "id": "duotone-design",
16734
17131
  "path": "skills/design-it/duotone-design",
@@ -16951,6 +17348,32 @@
16951
17348
  },
16952
17349
  "source_type": "self"
16953
17350
  },
17351
+ {
17352
+ "id": "edr-bypass-re",
17353
+ "path": "skills/edr-bypass-re",
17354
+ "category": "uncategorized",
17355
+ "name": "edr-bypass-re",
17356
+ "description": "Reverse engineer EDR internals (user-mode hook tables, ETW, AMSI) and study bypass techniques such as direct syscalls, Hell's Gate, and call-stack spoofing. Lab-only red-team research.",
17357
+ "risk": "offensive",
17358
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
17359
+ "date_added": "2026-08-25",
17360
+ "plugin": {
17361
+ "targets": {
17362
+ "codex": "supported",
17363
+ "claude": "supported"
17364
+ },
17365
+ "setup": {
17366
+ "type": "none",
17367
+ "summary": "",
17368
+ "docs": null
17369
+ },
17370
+ "reasons": []
17371
+ },
17372
+ "source_type": "community",
17373
+ "source_repo": "zhaoxuya520/reverse-skill",
17374
+ "license": "MIT",
17375
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
17376
+ },
16954
17377
  {
16955
17378
  "id": "effective-agent-skills",
16956
17379
  "path": "skills/effective-agent-skills",
@@ -17126,6 +17549,32 @@
17126
17549
  "strategy"
17127
17550
  ]
17128
17551
  },
17552
+ {
17553
+ "id": "email-security",
17554
+ "path": "skills/email-security",
17555
+ "category": "security",
17556
+ "name": "email-security",
17557
+ "description": "Authorized email security review: phishing analysis, SPF/DKIM/DMARC header authentication, BEC pattern investigation, and mailbox token abuse research.",
17558
+ "risk": "offensive",
17559
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
17560
+ "date_added": "2026-08-25",
17561
+ "plugin": {
17562
+ "targets": {
17563
+ "codex": "supported",
17564
+ "claude": "supported"
17565
+ },
17566
+ "setup": {
17567
+ "type": "none",
17568
+ "summary": "",
17569
+ "docs": null
17570
+ },
17571
+ "reasons": []
17572
+ },
17573
+ "source_type": "community",
17574
+ "source_repo": "zhaoxuya520/reverse-skill",
17575
+ "license": "MIT",
17576
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
17577
+ },
17129
17578
  {
17130
17579
  "id": "email-sequence",
17131
17580
  "path": "skills/email-sequence",
@@ -18990,6 +19439,32 @@
18990
19439
  "reasons": []
18991
19440
  }
18992
19441
  },
19442
+ {
19443
+ "id": "firmware-pentest",
19444
+ "path": "skills/firmware-pentest",
19445
+ "category": "uncategorized",
19446
+ "name": "firmware-pentest",
19447
+ "description": "Firmware penetration testing following the OWASP FSTM nine-stage flow: extraction, EMBA automation, Firmadyne/QEMU emulation, AFL++ fuzzing, and hands-on exploitation in authorized labs.",
19448
+ "risk": "offensive",
19449
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
19450
+ "date_added": "2026-08-25",
19451
+ "plugin": {
19452
+ "targets": {
19453
+ "codex": "supported",
19454
+ "claude": "supported"
19455
+ },
19456
+ "setup": {
19457
+ "type": "none",
19458
+ "summary": "",
19459
+ "docs": null
19460
+ },
19461
+ "reasons": []
19462
+ },
19463
+ "source_type": "community",
19464
+ "source_repo": "zhaoxuya520/reverse-skill",
19465
+ "license": "MIT",
19466
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
19467
+ },
18993
19468
  {
18994
19469
  "id": "fitness-analyzer",
18995
19470
  "path": "skills/fitness-analyzer",
@@ -21001,6 +21476,32 @@
21001
21476
  "reasons": []
21002
21477
  }
21003
21478
  },
21479
+ {
21480
+ "id": "ghidra-reverse",
21481
+ "path": "skills/ghidra-reverse",
21482
+ "category": "uncategorized",
21483
+ "name": "ghidra-reverse",
21484
+ "description": "Free/open reverse engineering with Ghidra (headless or GUI): decompilation, cross-references, scripting, and optional Ghidra MCP workflows when IDA is unavailable.",
21485
+ "risk": "safe",
21486
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
21487
+ "date_added": "2026-08-25",
21488
+ "plugin": {
21489
+ "targets": {
21490
+ "codex": "supported",
21491
+ "claude": "supported"
21492
+ },
21493
+ "setup": {
21494
+ "type": "none",
21495
+ "summary": "",
21496
+ "docs": null
21497
+ },
21498
+ "reasons": []
21499
+ },
21500
+ "source_type": "community",
21501
+ "source_repo": "zhaoxuya520/reverse-skill",
21502
+ "license": "MIT",
21503
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
21504
+ },
21004
21505
  {
21005
21506
  "id": "git-advanced-workflows",
21006
21507
  "path": "skills/git-advanced-workflows",
@@ -21625,6 +22126,32 @@
21625
22126
  "reasons": []
21626
22127
  }
21627
22128
  },
22129
+ {
22130
+ "id": "go-rust-reverse",
22131
+ "path": "skills/go-rust-reverse",
22132
+ "category": "development",
22133
+ "name": "go-rust-reverse",
22134
+ "description": "Reverse engineer stripped Go and Rust binaries: runtime recognition, pclntab/module metadata recovery, panic-string analysis, and idiomatic decompilation strategies.",
22135
+ "risk": "safe",
22136
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
22137
+ "date_added": "2026-08-25",
22138
+ "plugin": {
22139
+ "targets": {
22140
+ "codex": "supported",
22141
+ "claude": "supported"
22142
+ },
22143
+ "setup": {
22144
+ "type": "none",
22145
+ "summary": "",
22146
+ "docs": null
22147
+ },
22148
+ "reasons": []
22149
+ },
22150
+ "source_type": "community",
22151
+ "source_repo": "zhaoxuya520/reverse-skill",
22152
+ "license": "MIT",
22153
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
22154
+ },
21628
22155
  {
21629
22156
  "id": "goal-analyzer",
21630
22157
  "path": "skills/goal-analyzer",
@@ -22255,6 +22782,32 @@
22255
22782
  "coding-agents"
22256
22783
  ]
22257
22784
  },
22785
+ {
22786
+ "id": "hardware-security",
22787
+ "path": "skills/hardware-security",
22788
+ "category": "uncategorized",
22789
+ "name": "hardware-security",
22790
+ "description": "Authorized hardware and embedded interface security research: UART/JTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis.",
22791
+ "risk": "offensive",
22792
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
22793
+ "date_added": "2026-08-25",
22794
+ "plugin": {
22795
+ "targets": {
22796
+ "codex": "supported",
22797
+ "claude": "supported"
22798
+ },
22799
+ "setup": {
22800
+ "type": "none",
22801
+ "summary": "",
22802
+ "docs": null
22803
+ },
22804
+ "reasons": []
22805
+ },
22806
+ "source_type": "community",
22807
+ "source_repo": "zhaoxuya520/reverse-skill",
22808
+ "license": "MIT",
22809
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
22810
+ },
22258
22811
  {
22259
22812
  "id": "hasdata",
22260
22813
  "path": "skills/hasdata",
@@ -23780,6 +24333,32 @@
23780
24333
  "reasons": []
23781
24334
  }
23782
24335
  },
24336
+ {
24337
+ "id": "ida-reverse",
24338
+ "path": "skills/ida-reverse",
24339
+ "category": "uncategorized",
24340
+ "name": "ida-reverse",
24341
+ "description": "Reverse engineer binaries with IDA Pro: decompilation, disassembly, data-flow tracking, cross-references, and IDA MCP automation for deep static analysis of PE/ELF/Mach-O targets.",
24342
+ "risk": "safe",
24343
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
24344
+ "date_added": "2026-08-25",
24345
+ "plugin": {
24346
+ "targets": {
24347
+ "codex": "supported",
24348
+ "claude": "supported"
24349
+ },
24350
+ "setup": {
24351
+ "type": "none",
24352
+ "summary": "",
24353
+ "docs": null
24354
+ },
24355
+ "reasons": []
24356
+ },
24357
+ "source_type": "community",
24358
+ "source_repo": "zhaoxuya520/reverse-skill",
24359
+ "license": "MIT",
24360
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
24361
+ },
23783
24362
  {
23784
24363
  "id": "idea-autopsy",
23785
24364
  "path": "skills/idea-autopsy",
@@ -23899,6 +24478,32 @@
23899
24478
  "license": "MIT",
23900
24479
  "license_source": "https://github.com/addyosmani/agent-skills/blob/main/LICENSE"
23901
24480
  },
24481
+ {
24482
+ "id": "identity-federation",
24483
+ "path": "skills/identity-federation",
24484
+ "category": "uncategorized",
24485
+ "name": "identity-federation",
24486
+ "description": "Authorized assessment of federated identity systems: SAML, OIDC, OAuth2 flows, SSO misconfiguration, and token-confusion issues.",
24487
+ "risk": "offensive",
24488
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
24489
+ "date_added": "2026-08-25",
24490
+ "plugin": {
24491
+ "targets": {
24492
+ "codex": "supported",
24493
+ "claude": "supported"
24494
+ },
24495
+ "setup": {
24496
+ "type": "none",
24497
+ "summary": "",
24498
+ "docs": null
24499
+ },
24500
+ "reasons": []
24501
+ },
24502
+ "source_type": "community",
24503
+ "source_repo": "zhaoxuya520/reverse-skill",
24504
+ "license": "MIT",
24505
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
24506
+ },
23902
24507
  {
23903
24508
  "id": "identity-mirror",
23904
24509
  "path": "skills/identity-mirror",
@@ -24484,6 +25089,38 @@
24484
25089
  "reasons": []
24485
25090
  }
24486
25091
  },
25092
+ {
25093
+ "id": "instructree",
25094
+ "path": "skills/instructree",
25095
+ "category": "development",
25096
+ "name": "instructree",
25097
+ "description": "Map, explain, and lint repository-scoped coding-agent instructions before changing code.",
25098
+ "risk": "safe",
25099
+ "source": "community",
25100
+ "date_added": "2026-08-26",
25101
+ "plugin": {
25102
+ "targets": {
25103
+ "codex": "supported",
25104
+ "claude": "supported"
25105
+ },
25106
+ "setup": {
25107
+ "type": "none",
25108
+ "summary": "",
25109
+ "docs": null
25110
+ },
25111
+ "reasons": []
25112
+ },
25113
+ "source_type": "community",
25114
+ "source_repo": "kotobuki09/instructree",
25115
+ "license": "MIT",
25116
+ "license_source": "https://github.com/kotobuki09/instructree/blob/v0.7.0/LICENSE",
25117
+ "tags": [
25118
+ "agent-instructions",
25119
+ "agents-md",
25120
+ "codex",
25121
+ "static-analysis"
25122
+ ]
25123
+ },
24487
25124
  {
24488
25125
  "id": "interactive-portfolio",
24489
25126
  "path": "skills/interactive-portfolio",
@@ -25165,6 +25802,32 @@
25165
25802
  "bash"
25166
25803
  ]
25167
25804
  },
25805
+ {
25806
+ "id": "js-reverse",
25807
+ "path": "skills/js-reverse",
25808
+ "category": "uncategorized",
25809
+ "name": "js-reverse",
25810
+ "description": "Front-end JavaScript reverse engineering: locate signature chains, analyze encrypted request parameters, sample runtime behavior, and reproduce logic locally in Node for evidence-based output.",
25811
+ "risk": "offensive",
25812
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
25813
+ "date_added": "2026-08-25",
25814
+ "plugin": {
25815
+ "targets": {
25816
+ "codex": "supported",
25817
+ "claude": "supported"
25818
+ },
25819
+ "setup": {
25820
+ "type": "none",
25821
+ "summary": "",
25822
+ "docs": null
25823
+ },
25824
+ "reasons": []
25825
+ },
25826
+ "source_type": "community",
25827
+ "source_repo": "zhaoxuya520/reverse-skill",
25828
+ "license": "MIT",
25829
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
25830
+ },
25168
25831
  {
25169
25832
  "id": "json-canvas",
25170
25833
  "path": "skills/json-canvas",
@@ -26832,6 +27495,32 @@
26832
27495
  "reasons": []
26833
27496
  }
26834
27497
  },
27498
+ {
27499
+ "id": "llm-security",
27500
+ "path": "skills/llm-security",
27501
+ "category": "ai-ml",
27502
+ "name": "llm-security",
27503
+ "description": "Authorized security assessment of LLM applications and AI agents: prompt injection, tool abuse, RAG exposure, memory poisoning, system-prompt extraction, and agent-compliance engineering per OWASP LLM/ASI Top 10.",
27504
+ "risk": "offensive",
27505
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
27506
+ "date_added": "2026-08-25",
27507
+ "plugin": {
27508
+ "targets": {
27509
+ "codex": "supported",
27510
+ "claude": "supported"
27511
+ },
27512
+ "setup": {
27513
+ "type": "none",
27514
+ "summary": "",
27515
+ "docs": null
27516
+ },
27517
+ "reasons": []
27518
+ },
27519
+ "source_type": "community",
27520
+ "source_repo": "zhaoxuya520/reverse-skill",
27521
+ "license": "MIT",
27522
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
27523
+ },
26835
27524
  {
26836
27525
  "id": "llm-structured-output",
26837
27526
  "path": "skills/llm-structured-output",
@@ -27567,6 +28256,32 @@
27567
28256
  "reasons": []
27568
28257
  }
27569
28258
  },
28259
+ {
28260
+ "id": "macos-reverse",
28261
+ "path": "skills/macos-reverse",
28262
+ "category": "uncategorized",
28263
+ "name": "macos-reverse",
28264
+ "description": "Authorized macOS and Mach-O reverse engineering: codesign inspection, Objective-C/Swift recovery, endpoint-security surfaces, and Apple-platform malware analysis.",
28265
+ "risk": "safe",
28266
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
28267
+ "date_added": "2026-08-25",
28268
+ "plugin": {
28269
+ "targets": {
28270
+ "codex": "supported",
28271
+ "claude": "supported"
28272
+ },
28273
+ "setup": {
28274
+ "type": "none",
28275
+ "summary": "",
28276
+ "docs": null
28277
+ },
28278
+ "reasons": []
28279
+ },
28280
+ "source_type": "community",
28281
+ "source_repo": "zhaoxuya520/reverse-skill",
28282
+ "license": "MIT",
28283
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
28284
+ },
27570
28285
  {
27571
28286
  "id": "macos-screen-recorder",
27572
28287
  "path": "skills/macos-screen-recorder",
@@ -28119,6 +28834,32 @@
28119
28834
  "reasons": []
28120
28835
  }
28121
28836
  },
28837
+ {
28838
+ "id": "malware-analysis",
28839
+ "path": "skills/malware-analysis",
28840
+ "category": "uncategorized",
28841
+ "name": "malware-analysis",
28842
+ "description": "Analyze suspected malware through static, dynamic, and behavioral techniques: IOC extraction, YARA/Sigma rule authoring, sandbox orchestration, and anti-analysis detection.",
28843
+ "risk": "safe",
28844
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
28845
+ "date_added": "2026-08-25",
28846
+ "plugin": {
28847
+ "targets": {
28848
+ "codex": "supported",
28849
+ "claude": "supported"
28850
+ },
28851
+ "setup": {
28852
+ "type": "none",
28853
+ "summary": "",
28854
+ "docs": null
28855
+ },
28856
+ "reasons": []
28857
+ },
28858
+ "source_type": "community",
28859
+ "source_repo": "zhaoxuya520/reverse-skill",
28860
+ "license": "MIT",
28861
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
28862
+ },
28122
28863
  {
28123
28864
  "id": "malware-analyst",
28124
28865
  "path": "skills/malware-analyst",
@@ -29593,6 +30334,32 @@
29593
30334
  "reasons": []
29594
30335
  }
29595
30336
  },
30337
+ {
30338
+ "id": "mobile-reverse",
30339
+ "path": "skills/mobile-reverse",
30340
+ "category": "mobile",
30341
+ "name": "mobile-reverse",
30342
+ "description": "Authorized Android/iOS application reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection bypass, per OWASP MASTG.",
30343
+ "risk": "offensive",
30344
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
30345
+ "date_added": "2026-08-25",
30346
+ "plugin": {
30347
+ "targets": {
30348
+ "codex": "supported",
30349
+ "claude": "supported"
30350
+ },
30351
+ "setup": {
30352
+ "type": "none",
30353
+ "summary": "",
30354
+ "docs": null
30355
+ },
30356
+ "reasons": []
30357
+ },
30358
+ "source_type": "community",
30359
+ "source_repo": "zhaoxuya520/reverse-skill",
30360
+ "license": "MIT",
30361
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
30362
+ },
29596
30363
  {
29597
30364
  "id": "mobile-security-coder",
29598
30365
  "path": "skills/mobile-security-coder",
@@ -30160,6 +30927,35 @@
30160
30927
  "reasons": []
30161
30928
  }
30162
30929
  },
30930
+ {
30931
+ "id": "muapi-media",
30932
+ "path": "skills/muapi-media",
30933
+ "category": "media",
30934
+ "name": "muapi-media",
30935
+ "description": "Generate images and videos with MuAPI's schema-driven asynchronous media API while protecting keys, polling, and output downloads.",
30936
+ "risk": "critical",
30937
+ "source": "self",
30938
+ "date_added": "2026-08-26",
30939
+ "plugin": {
30940
+ "targets": {
30941
+ "codex": "supported",
30942
+ "claude": "supported"
30943
+ },
30944
+ "setup": {
30945
+ "type": "none",
30946
+ "summary": "",
30947
+ "docs": null
30948
+ },
30949
+ "reasons": []
30950
+ },
30951
+ "source_type": "self",
30952
+ "tags": [
30953
+ "muapi",
30954
+ "image-generation",
30955
+ "video-generation",
30956
+ "media-api"
30957
+ ]
30958
+ },
30163
30959
  {
30164
30960
  "id": "multi-advisor",
30165
30961
  "path": "skills/multi-advisor",
@@ -32873,6 +33669,32 @@
32873
33669
  "bmc"
32874
33670
  ]
32875
33671
  },
33672
+ {
33673
+ "id": "ot-ics",
33674
+ "path": "skills/ot-ics",
33675
+ "category": "uncategorized",
33676
+ "name": "ot-ics",
33677
+ "description": "Authorized OT/ICS security assessment: Purdue-model zoning review, PLC/SCADA exposure, industrial protocol discovery, and passive-first evaluation discipline.",
33678
+ "risk": "offensive",
33679
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
33680
+ "date_added": "2026-08-25",
33681
+ "plugin": {
33682
+ "targets": {
33683
+ "codex": "supported",
33684
+ "claude": "supported"
33685
+ },
33686
+ "setup": {
33687
+ "type": "none",
33688
+ "summary": "",
33689
+ "docs": null
33690
+ },
33691
+ "reasons": []
33692
+ },
33693
+ "source_type": "community",
33694
+ "source_repo": "zhaoxuya520/reverse-skill",
33695
+ "license": "MIT",
33696
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
33697
+ },
32876
33698
  {
32877
33699
  "id": "outlook-automation",
32878
33700
  "path": "skills/outlook-automation",
@@ -33126,6 +33948,32 @@
33126
33948
  "reasons": []
33127
33949
  }
33128
33950
  },
33951
+ {
33952
+ "id": "patch-diff-exploit",
33953
+ "path": "skills/patch-diff-exploit",
33954
+ "category": "uncategorized",
33955
+ "name": "patch-diff-exploit",
33956
+ "description": "Locate vulnerability fixes in vendor patches, diff binaries across versions, and build N-day PoCs. Attack-side complement to binary-diff for authorized research.",
33957
+ "risk": "offensive",
33958
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
33959
+ "date_added": "2026-08-25",
33960
+ "plugin": {
33961
+ "targets": {
33962
+ "codex": "supported",
33963
+ "claude": "supported"
33964
+ },
33965
+ "setup": {
33966
+ "type": "none",
33967
+ "summary": "",
33968
+ "docs": null
33969
+ },
33970
+ "reasons": []
33971
+ },
33972
+ "source_type": "community",
33973
+ "source_repo": "zhaoxuya520/reverse-skill",
33974
+ "license": "MIT",
33975
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
33976
+ },
33129
33977
  {
33130
33978
  "id": "patterns",
33131
33979
  "path": "skills/monopoly/patterns",
@@ -33346,6 +34194,32 @@
33346
34194
  "reasons": []
33347
34195
  }
33348
34196
  },
34197
+ {
34198
+ "id": "pentest-tools",
34199
+ "path": "skills/pentest-tools",
34200
+ "category": "uncategorized",
34201
+ "name": "pentest-tools",
34202
+ "description": "Operate 20+ penetration-testing tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, and more) through structured workflows with consistent output handling.",
34203
+ "risk": "offensive",
34204
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
34205
+ "date_added": "2026-08-25",
34206
+ "plugin": {
34207
+ "targets": {
34208
+ "codex": "supported",
34209
+ "claude": "supported"
34210
+ },
34211
+ "setup": {
34212
+ "type": "none",
34213
+ "summary": "",
34214
+ "docs": null
34215
+ },
34216
+ "reasons": []
34217
+ },
34218
+ "source_type": "community",
34219
+ "source_repo": "zhaoxuya520/reverse-skill",
34220
+ "license": "MIT",
34221
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
34222
+ },
33349
34223
  {
33350
34224
  "id": "people-data",
33351
34225
  "path": "skills/people-data",
@@ -35474,6 +36348,32 @@
35474
36348
  "source_type": "official",
35475
36349
  "source_repo": "scopeblind/scopeblind-gateway"
35476
36350
  },
36351
+ {
36352
+ "id": "protocol-reverse",
36353
+ "path": "skills/protocol-reverse",
36354
+ "category": "uncategorized",
36355
+ "name": "protocol-reverse",
36356
+ "description": "Authorized reverse engineering of custom binary protocols, Protobuf/gRPC schemas, WebSocket frames, and PCAP-driven protocol recovery.",
36357
+ "risk": "safe",
36358
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
36359
+ "date_added": "2026-08-25",
36360
+ "plugin": {
36361
+ "targets": {
36362
+ "codex": "supported",
36363
+ "claude": "supported"
36364
+ },
36365
+ "setup": {
36366
+ "type": "none",
36367
+ "summary": "",
36368
+ "docs": null
36369
+ },
36370
+ "reasons": []
36371
+ },
36372
+ "source_type": "community",
36373
+ "source_repo": "zhaoxuya520/reverse-skill",
36374
+ "license": "MIT",
36375
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
36376
+ },
35477
36377
  {
35478
36378
  "id": "protocol-reverse-engineering",
35479
36379
  "path": "skills/protocol-reverse-engineering",
@@ -35664,6 +36564,32 @@
35664
36564
  "event"
35665
36565
  ]
35666
36566
  },
36567
+ {
36568
+ "id": "pwn-chain",
36569
+ "path": "skills/pwn-chain",
36570
+ "category": "uncategorized",
36571
+ "name": "pwn-chain",
36572
+ "description": "Go from reverse engineering to a working exploit: stack/heap/kernel pwn workflows with pwntools, libc-database, ROP, and stabilization from CTF to authorized remote targets.",
36573
+ "risk": "offensive",
36574
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
36575
+ "date_added": "2026-08-25",
36576
+ "plugin": {
36577
+ "targets": {
36578
+ "codex": "supported",
36579
+ "claude": "supported"
36580
+ },
36581
+ "setup": {
36582
+ "type": "none",
36583
+ "summary": "",
36584
+ "docs": null
36585
+ },
36586
+ "reasons": []
36587
+ },
36588
+ "source_type": "community",
36589
+ "source_repo": "zhaoxuya520/reverse-skill",
36590
+ "license": "MIT",
36591
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
36592
+ },
35667
36593
  {
35668
36594
  "id": "pydantic-ai",
35669
36595
  "path": "skills/pydantic-ai",
@@ -36119,6 +37045,58 @@
36119
37045
  "coaching"
36120
37046
  ]
36121
37047
  },
37048
+ {
37049
+ "id": "radare2",
37050
+ "path": "skills/radare2",
37051
+ "category": "uncategorized",
37052
+ "name": "radare2",
37053
+ "description": "Drive the radare2 CLI for binary reconnaissance, disassembly, analysis, function locating, export, and lightweight patching (r2/rabin2/rasm2/radiff2) without a GUI.",
37054
+ "risk": "safe",
37055
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
37056
+ "date_added": "2026-08-25",
37057
+ "plugin": {
37058
+ "targets": {
37059
+ "codex": "supported",
37060
+ "claude": "supported"
37061
+ },
37062
+ "setup": {
37063
+ "type": "none",
37064
+ "summary": "",
37065
+ "docs": null
37066
+ },
37067
+ "reasons": []
37068
+ },
37069
+ "source_type": "community",
37070
+ "source_repo": "zhaoxuya520/reverse-skill",
37071
+ "license": "MIT",
37072
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
37073
+ },
37074
+ {
37075
+ "id": "radio-sdr",
37076
+ "path": "skills/radio-sdr",
37077
+ "category": "uncategorized",
37078
+ "name": "radio-sdr",
37079
+ "description": "Authorized RF/SDR security research: signal identification, replay-feasibility study in shielded labs, and wireless protocol analysis outside regulated bands.",
37080
+ "risk": "offensive",
37081
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
37082
+ "date_added": "2026-08-25",
37083
+ "plugin": {
37084
+ "targets": {
37085
+ "codex": "supported",
37086
+ "claude": "supported"
37087
+ },
37088
+ "setup": {
37089
+ "type": "none",
37090
+ "summary": "",
37091
+ "docs": null
37092
+ },
37093
+ "reasons": []
37094
+ },
37095
+ "source_type": "community",
37096
+ "source_repo": "zhaoxuya520/reverse-skill",
37097
+ "license": "MIT",
37098
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
37099
+ },
36122
37100
  {
36123
37101
  "id": "radix-ui-design-system",
36124
37102
  "path": "skills/radix-ui-design-system",
@@ -37173,6 +38151,32 @@
37173
38151
  "reasons": []
37174
38152
  }
37175
38153
  },
38154
+ {
38155
+ "id": "reverse-browser-automation",
38156
+ "path": "skills/reverse-browser-automation",
38157
+ "category": "uncategorized",
38158
+ "name": "reverse-browser-automation",
38159
+ "description": "Automate browsers (Playwright) and Windows desktop applications (UI automation) for reverse-engineering evidence collection, UI-driven workflows, and network observation during analysis.",
38160
+ "risk": "safe",
38161
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
38162
+ "date_added": "2026-08-25",
38163
+ "plugin": {
38164
+ "targets": {
38165
+ "codex": "supported",
38166
+ "claude": "supported"
38167
+ },
38168
+ "setup": {
38169
+ "type": "none",
38170
+ "summary": "",
38171
+ "docs": null
38172
+ },
38173
+ "reasons": []
38174
+ },
38175
+ "source_type": "community",
38176
+ "source_repo": "zhaoxuya520/reverse-skill",
38177
+ "license": "MIT",
38178
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
38179
+ },
37176
38180
  {
37177
38181
  "id": "reverse-engineer",
37178
38182
  "path": "skills/reverse-engineer",
@@ -37195,6 +38199,32 @@
37195
38199
  "reasons": []
37196
38200
  }
37197
38201
  },
38202
+ {
38203
+ "id": "reverse-engineering",
38204
+ "path": "skills/reverse-engineering",
38205
+ "category": "uncategorized",
38206
+ "name": "reverse-engineering",
38207
+ "description": "General reverse-engineering methodology for compiled, obfuscated, packed, or virtualized targets: GDB, Frida, angr, Unicorn, and Qiling workflows across languages and platforms, with anti-analysis countermeasures.",
38208
+ "risk": "safe",
38209
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
38210
+ "date_added": "2026-08-25",
38211
+ "plugin": {
38212
+ "targets": {
38213
+ "codex": "supported",
38214
+ "claude": "supported"
38215
+ },
38216
+ "setup": {
38217
+ "type": "none",
38218
+ "summary": "",
38219
+ "docs": null
38220
+ },
38221
+ "reasons": []
38222
+ },
38223
+ "source_type": "community",
38224
+ "source_repo": "zhaoxuya520/reverse-skill",
38225
+ "license": "MIT",
38226
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
38227
+ },
37198
38228
  {
37199
38229
  "id": "review-and-simplify-changes",
37200
38230
  "path": "skills/review-and-simplify-changes",
@@ -41847,6 +42877,32 @@
41847
42877
  "ci-cd"
41848
42878
  ]
41849
42879
  },
42880
+ {
42881
+ "id": "src-hunter",
42882
+ "path": "skills/pentest-tools/src-hunter",
42883
+ "category": "pentest-tools",
42884
+ "name": "src-hunter",
42885
+ "description": "Bug-bounty/SRC vulnerability-hunting workflow: five-phase methodology (intake, recon, enumeration, hunt, report) with attack playbooks for SQLi, XSS, RCE, SSRF, IDOR, CSRF, path traversal, and file upload.",
42886
+ "risk": "offensive",
42887
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
42888
+ "date_added": "2026-08-25",
42889
+ "plugin": {
42890
+ "targets": {
42891
+ "codex": "supported",
42892
+ "claude": "supported"
42893
+ },
42894
+ "setup": {
42895
+ "type": "none",
42896
+ "summary": "",
42897
+ "docs": null
42898
+ },
42899
+ "reasons": []
42900
+ },
42901
+ "source_type": "community",
42902
+ "source_repo": "zhaoxuya520/reverse-skill",
42903
+ "license": "MIT",
42904
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
42905
+ },
41850
42906
  {
41851
42907
  "id": "sred-project-organizer",
41852
42908
  "path": "skills/sred-project-organizer",
@@ -42540,6 +43596,32 @@
42540
43596
  "reasons": []
42541
43597
  }
42542
43598
  },
43599
+ {
43600
+ "id": "supply-chain-security",
43601
+ "path": "skills/supply-chain-security",
43602
+ "category": "security",
43603
+ "name": "supply-chain-security",
43604
+ "description": "Software supply-chain security assessment: SBOM generation, SCA scanning, CI/CD pipeline review, container image audit, build integrity, dependency provenance, and vulnerability reachability verification.",
43605
+ "risk": "safe",
43606
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
43607
+ "date_added": "2026-08-25",
43608
+ "plugin": {
43609
+ "targets": {
43610
+ "codex": "supported",
43611
+ "claude": "supported"
43612
+ },
43613
+ "setup": {
43614
+ "type": "none",
43615
+ "summary": "",
43616
+ "docs": null
43617
+ },
43618
+ "reasons": []
43619
+ },
43620
+ "source_type": "community",
43621
+ "source_repo": "zhaoxuya520/reverse-skill",
43622
+ "license": "MIT",
43623
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
43624
+ },
42543
43625
  {
42544
43626
  "id": "survey-generator",
42545
43627
  "path": "skills/survey-generator",
@@ -44016,6 +45098,84 @@
44016
45098
  "reasons": []
44017
45099
  }
44018
45100
  },
45101
+ {
45102
+ "id": "thick-client",
45103
+ "path": "skills/thick-client",
45104
+ "category": "uncategorized",
45105
+ "name": "thick-client",
45106
+ "description": "Authorized security testing of desktop thick clients: local storage, update channels, IPC, traffic interception, and client-side trust-boundary review.",
45107
+ "risk": "offensive",
45108
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
45109
+ "date_added": "2026-08-25",
45110
+ "plugin": {
45111
+ "targets": {
45112
+ "codex": "supported",
45113
+ "claude": "supported"
45114
+ },
45115
+ "setup": {
45116
+ "type": "none",
45117
+ "summary": "",
45118
+ "docs": null
45119
+ },
45120
+ "reasons": []
45121
+ },
45122
+ "source_type": "community",
45123
+ "source_repo": "zhaoxuya520/reverse-skill",
45124
+ "license": "MIT",
45125
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
45126
+ },
45127
+ {
45128
+ "id": "threat-hunting",
45129
+ "path": "skills/threat-hunting",
45130
+ "category": "uncategorized",
45131
+ "name": "threat-hunting",
45132
+ "description": "Blue-team threat hunting: detection engineering with Sigma/YARA, SIEM query design, and validation of incident detections against known technique patterns.",
45133
+ "risk": "safe",
45134
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
45135
+ "date_added": "2026-08-25",
45136
+ "plugin": {
45137
+ "targets": {
45138
+ "codex": "supported",
45139
+ "claude": "supported"
45140
+ },
45141
+ "setup": {
45142
+ "type": "none",
45143
+ "summary": "",
45144
+ "docs": null
45145
+ },
45146
+ "reasons": []
45147
+ },
45148
+ "source_type": "community",
45149
+ "source_repo": "zhaoxuya520/reverse-skill",
45150
+ "license": "MIT",
45151
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
45152
+ },
45153
+ {
45154
+ "id": "threat-intelligence",
45155
+ "path": "skills/threat-intelligence",
45156
+ "category": "uncategorized",
45157
+ "name": "threat-intelligence",
45158
+ "description": "Authorized OSINT and cyber threat intelligence: enriching IOCs, campaigns, impersonation, scams, and threat-actor profiles from public sources with defined boundaries.",
45159
+ "risk": "safe",
45160
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
45161
+ "date_added": "2026-08-25",
45162
+ "plugin": {
45163
+ "targets": {
45164
+ "codex": "supported",
45165
+ "claude": "supported"
45166
+ },
45167
+ "setup": {
45168
+ "type": "none",
45169
+ "summary": "",
45170
+ "docs": null
45171
+ },
45172
+ "reasons": []
45173
+ },
45174
+ "source_type": "community",
45175
+ "source_repo": "zhaoxuya520/reverse-skill",
45176
+ "license": "MIT",
45177
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
45178
+ },
44019
45179
  {
44020
45180
  "id": "threat-mitigation-mapping",
44021
45181
  "path": "skills/threat-mitigation-mapping",
@@ -44814,7 +45974,7 @@
44814
45974
  "category": "development",
44815
45975
  "name": "tree-ring-memory",
44816
45976
  "description": "Use Tree Ring Memory for local-first AI-agent memory lifecycle work: recall, evidence, audit, forgetting, and consolidation without transcript dumping.",
44817
- "risk": "safe",
45977
+ "risk": "critical",
44818
45978
  "source": "community",
44819
45979
  "date_added": "2026-07-08",
44820
45980
  "plugin": {
@@ -44831,7 +45991,7 @@
44831
45991
  },
44832
45992
  "source_type": "community",
44833
45993
  "source_repo": "TerminallyLazy/Tree-Ring-Memory",
44834
- "license": "Apache-2.0",
45994
+ "license": "MIT",
44835
45995
  "license_source": "https://github.com/TerminallyLazy/Tree-Ring-Memory/blob/main/LICENSE",
44836
45996
  "tags": [
44837
45997
  "agent-memory",
@@ -48020,6 +49180,32 @@
48020
49180
  },
48021
49181
  "source_type": "self"
48022
49182
  },
49183
+ {
49184
+ "id": "wifi-wireless",
49185
+ "path": "skills/wifi-wireless",
49186
+ "category": "uncategorized",
49187
+ "name": "wifi-wireless",
49188
+ "description": "Authorized wireless security assessment: Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauthentication testing.",
49189
+ "risk": "offensive",
49190
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
49191
+ "date_added": "2026-08-25",
49192
+ "plugin": {
49193
+ "targets": {
49194
+ "codex": "supported",
49195
+ "claude": "supported"
49196
+ },
49197
+ "setup": {
49198
+ "type": "none",
49199
+ "summary": "",
49200
+ "docs": null
49201
+ },
49202
+ "reasons": []
49203
+ },
49204
+ "source_type": "community",
49205
+ "source_repo": "zhaoxuya520/reverse-skill",
49206
+ "license": "MIT",
49207
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
49208
+ },
48023
49209
  {
48024
49210
  "id": "wiki-architect",
48025
49211
  "path": "skills/wiki-architect",
@@ -48205,6 +49391,32 @@
48205
49391
  "reasons": []
48206
49392
  }
48207
49393
  },
49394
+ {
49395
+ "id": "windows-ad",
49396
+ "path": "skills/windows-ad",
49397
+ "category": "uncategorized",
49398
+ "name": "windows-ad",
49399
+ "description": "Authorized Active Directory and Windows identity attacks: Kerberos abuse, AD CS escalation, BloodHound path analysis, NTLM relay, and domain privilege-escalation research.",
49400
+ "risk": "offensive",
49401
+ "source": "https://github.com/zhaoxuya520/reverse-skill",
49402
+ "date_added": "2026-08-25",
49403
+ "plugin": {
49404
+ "targets": {
49405
+ "codex": "supported",
49406
+ "claude": "supported"
49407
+ },
49408
+ "setup": {
49409
+ "type": "none",
49410
+ "summary": "",
49411
+ "docs": null
49412
+ },
49413
+ "reasons": []
49414
+ },
49415
+ "source_type": "community",
49416
+ "source_repo": "zhaoxuya520/reverse-skill",
49417
+ "license": "MIT",
49418
+ "license_source": "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
49419
+ },
48208
49420
  {
48209
49421
  "id": "windows-shell-reliability",
48210
49422
  "path": "skills/windows-shell-reliability",