Skill Claude Code
Provides digital forensics and signal analysis techniques for CTF challenges. Use when analyzing disk images, memory dumps, event logs, network captures, cryptocurrency transactions, steganography, PDF analysis, Windows registry, Volatility, PCAP, Docker images, coredumps, side-channel power traces, DTMF audio…
Skill Claude Code
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process…
Skill Claude Code
Provides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles, pyjails, bash jails, RF/SDR, DNS oddities, unicode tricks, esoteric languages, QR or audio puzzles, constraint solving, game theory, unusual sandbox escapes, and hybrid logic puzzles.…
Skill Claude Code
Provides open source intelligence techniques for CTF challenges. Use when gathering information from public sources, social media, geolocation, DNS records, username enumeration, reverse image search, Google dorking, Wayback Machine, Tor relays, FEC filings, or identifying unknown data like hashes and coordinates.
Skill Claude Code needs its repo
Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel…
Skill Claude Code
Provides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, game clients, malware-like loaders, and anti-debug or…
Skill Claude Code needs its repo
Provides web exploitation techniques for CTF challenges. Use when the target is primarily an HTTP application, API, browser client, template engine, identity flow, or smart-contract frontend/backend surface, including XSS, SQLi, SSTI, SSRF, XXE, JWT, auth bypass, file upload, request smuggling, OAuth/OIDC, SAML…
Skill Claude Code
Generates a single standardized submission-style CTF writeup for competition handoff and organizer review. Use after solving a CTF challenge to document the solution steps, tools used, and lessons learned in a structured format.
Skill Claude Code needs its repo
Solves CTF challenges by performing first-pass triage, identifying the dominant category, and routing execution to the right specialized ctf- skill. Use when the user gives you a challenge bundle, a remote service, a suspicious file, or only a vague challenge description and you must determine where to start. Do not…
Skill Claude CodeCodex
A playbook for solving capture-the-flag challenges, where competitors find a hidden proof string called a flag.
Skill Claude CodeCodex needs its repo
An incident-response playbook for investigating compromised Windows and Linux systems and reconstructing how an attack happened.
Skill Claude CodeCodex
A penetration-testing playbook for examining authorized websites, applications, and services for real, verified security weaknesses.
Skill Claude CodeCodex
A routing and coordination playbook for deciding how a security task should be handled and when it needs specialist work.
Skill Claude CodeCodex
Rules for coordinating several security-focused work modes and passing evidence and results between them.
Skill Claude CodeCodex
A review template for assigning an independent checking agent to verify another agent’s findings from the original evidence.
Skill Claude CodeCodex
Governance skill for red-team mode phase selection, router selection, detailed pack selection, OPSEC-aware progression, and choosing the next concrete skill. Use when red-team mode needs command-level decision support before technical testing.
Skill Claude CodeCodex
Compact operational boundary policy for durable red-team workflows. It does not route domains or decide workflow completion.
Skill Claude CodeCodex
An authorized public-asset mapping playbook for finding a company group's internet-facing domains, subdomains, DNS records, and service fingerprints. It organizes the work into a resumable pipeline and delivers an auditable Excel workbook.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: