Agent skills for HTTP / API

Investigate compromised Docker containers by analyzing images, layers,

Analyze session replay patterns across experiment variants to understand user behavior differences.

Analyzes git commits and changes within a timeframe or commit range, providing structured summaries for code review, retrospectives, work…

Reverse engineer Go-compiled malware in Ghidra by parsing Go buildinfo

Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and…

Perform static analysis of malicious PDF documents using peepdf, pdfid,

Analyze cryptocurrency market sentiment using Fear & Greed Index, news

Performs Linux memory acquisition using LiME (Linux Memory Extractor)

Monitor blockchain mempools for pending transactions, front-running, and MEV opportunities.

Analyze the NTFS Master File Table ($MFT) with MFTECmd, analyzeMFT,

Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port

This skill enables Claude to analyze network latency and optimize request patterns within an application.

Analyzes network traffic generated by malware during sandbox execution

Parse Microsoft Outlook PST and OST files using libpff and pst-utils to extract message content, headers, attachments, deleted items, and…

Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to

Detect PowerShell Empire post-exploitation framework artifacts in Windows Script Block Logging (Event ID 4104) and Module Logging (Event…

Analyzes codebases to understand structure, tech stack, patterns, and conventions.

This skill enables Claude to analyze and optimize database query performance.

Analyzes encryption algorithms, key management, and file encryption

Identify ransomware-related network indicators, including C2 beaconing patterns, TOR exit node connections, data exfiltration flows, and…

Traces ransomware cryptocurrency payment flows using blockchain analysis tools such as Chainalysis Reactor, WalletExplorer, and…