Skill Claude CodeCodex
Find leaked credentials in files: high-signal provider patterns (AWS/GitHub/Slack/Google/Stripe/OpenAI/SendGrid/Twilio/JWT/PEM private keys) plus a generic high-entropy secret-assignment catch with placeholder filtering. Matches are REDACTED in output — never echoes a full secret. Pure stdlib, read-only.
Skill Claude CodeCodex
CONSTRUCT: wrap a raw shellcode blob into a runnable native PoC — a tiny C loader compiled with clang, whose exit code is the shellcode's return value. --os picks the loader: posix (mmap RW → memcpy → mprotect RX → call, default) or windows (VirtualAlloc RWX → memcpy → call → ExitProcess). --emit c dumps just the…
Skill Claude CodeCodex
DYNAMIC: run a target under a syscall tracer (strace on Linux, dtruss on macOS) and summarize its behaviour — files opened, network connects, processes exec'd, and a syscall histogram. EXECUTES the target; consent-gated. dtruss needs root + a permissive SIP.
Skill Claude CodeCodex
Recursively extract archives to a fixpoint: zip / tar(.gz/.bz2/.xz) / gz / bz2 / xz / asar (Electron) / ar / .deb with the pure-stdlib core, 7z and RAR via an external CLI (7z/7za/7zz, unar) when present. Walks the output for nested archives and extracts those too. Guards against zip-slip (path traversal) and…
Skill Claude CodeCodex
Scan a file or directory with YARA rules (classic yara or the newer yara-x). Ships a small high-signal starter rule pack; point --rules at a real corpus (YARA-Rules, signature-base, your own) for serious coverage. Read-only — matches patterns, never runs the target. Prereq-gated on the yara CLI with honest degradation.
MCP server Claude CodeCodexCursor
MCP server "taproom-cli" as configured in batteryshark/taproom. Runs locally from the @batteryshark/taproom-cli npm package.