Skill Claude CodeCodex
A handbook for agentic red teaming, which means using an agent to continuously test an organization’s systems for security weaknesses and verify fixes. It covers assessment stages, evidence rules, permissions, data exposure, and cleanup.
Skill Claude CodeCodex
A tool for packaging binary shellcode—machine code commonly used in security testing—into Windows executable files designed to avoid antivirus detection.
Agent Claude Code needs its repo
C2 framework evasion specialist. Analyzes C2 source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES C2 source code to evade detection.
Agent Claude Code
Integrate evasion techniques into existing shellcode loaders.
Agent Claude Code
Generate shellcode loaders by combining components from the loader knowledge base.
Agent Claude Code
Search GitHub for shellcode loader and evasion techniques, analyze code patterns, and update the knowledge base.
Agent Claude Code
Penetration testing tools evasion specialist. Analyzes tool source code, searches for detection rules (YARA, Sigma, etc.), and DIRECTLY MODIFIES source code to evade detection. Use for tools bypass, detection evasion, source modification.
Command Claude Code needs its repo
Analyze C2 framework source code, find detection rules (YARA, Sigma, etc.), and modify source to evade detection. Triggers on "C2 evasion", "analyze C2", "YARA", "modify C2", "bypass detection", "C2免杀".
Command Claude Code
A command that adds code-obfuscation and anti-analysis techniques to an existing shellcode loader. A shellcode loader is a program that loads and runs shellcode, and these techniques are commonly associated with avoiding detection or analysis.
Command Claude Code needs its repo
Generate shellcode loaders by combining components from knowledge base. Creates working C/C++/Rust loaders using documented techniques. Triggers on "generate loader", "create loader", "shellcode loader", "生成loader".
Command Claude Code
A command for searching GitHub repositories and source code for security techniques, then organizing the findings in a knowledge base.
Command Claude Code
Analyze penetration testing tools and modify source code to evade detection. Usage: /toolsevasion.
Skill Claude CodeCodex
A playbook for testing how security tools and malicious software are detected, including antivirus, endpoint monitoring, and script-scanning checks.
Skill Claude CodeCodex
A skill for authorized security testing that studies how Windows endpoint defenses such as EDR, Defender, and antivirus software detect programs, then focuses on ways a red team can avoid those detections.
Skill Claude CodeCodex needs its repo
A full workflow for analyzing embedded-device firmware, which is the software stored inside devices such as routers, cameras, and smart-home products.
Skill Claude CodeCodex
Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
Skill Claude CodeCodex
Use for authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
Skill Claude CodeCodex
Use for authorized RF/SDR security research including signal identification, replay feasibility study in shielded labs, and wireless protocol analysis outside classic Wi-Fi.
Skill Claude CodeCodex
Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.
Skill Claude CodeCodex
A guide to how macOS security checks work, including Gatekeeper, System Integrity Protection, code-signing checks, and notarization. It approaches these mechanisms from a reverse-engineering perspective.
Skill Claude CodeCodex
A guide for comparing two versions of compiled program code and moving function names or other reverse-engineering results from an older version to a newer one. Reverse engineering means examining compiled software to understand how it works.
Skill Claude CodeCodex
Use when analyzing suspected malware through static, dynamic, and behavioral techniques, including IOC extraction, YARA or Sigma rules, sandboxing, and anti-analysis behavior.
Skill Claude CodeCodex needs its repo
A security-research workflow for comparing patched and unpatched software to find the bug that a vendor fixed. It can guide writing a proof-of-concept, which is a small test that demonstrates the flaw.
Skill Claude Code needs its repo
Provides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: