tr4m0ryp

tr4m0ryp/shor

Skill Claude CodeCodex

Skill "kxss" from tr4m0ryp/shor, covering kxss — reflected-xss character triage, when to reach for it, usage, safe invocation and typical chain.

tr4m0ryp/shor

Skill Claude CodeCodex

ProjectDiscovery's naabu (Go; needs libpcap for SYN scan). Built for breadth: sweep many hosts for open ports fast, then feed the survivors to nmap for the slow, accurate service/version pass.

tr4m0ryp/shor

Skill Claude CodeCodex

The reference port scanner. In this pipeline nmap is the accurate pass: run it against the open ports naabu already found, not as a wide sweep.

tr4m0ryp/shor

Skill Claude CodeCodex

ProjectDiscovery's nuclei (pure-Go). Runs a large community + custom template library against live targets to flag known CVEs, misconfigurations, exposures, and default credentials. Breadth-first signal that focuses the deeper, tool- and agent-specific exploitation.

tr4m0ryp/shor

Skill Claude CodeCodex

Skill "wafw00f" from tr4m0ryp/shor, covering wafw00f — waf/cdn fingerprinting, when to reach for it, key flags, safe invocation and evidence to capture.

tr4m0ryp/shor

Skill Claude CodeCodex

Skill "semgrep" from tr4m0ryp/shor, covering semgrep — static analysis (sast), when to reach for it, target the backend language, not just auto (important), key flags and safe invocation.

tr4m0ryp/shor

Skill Claude CodeCodex

Google's osv-scanner (pure-Go). Reads lockfiles/SBOMs in the repo and matches dependency versions against the OSV.dev vulnerability database. Read-only, no target traffic → vuln-analysis phase. This is the software-composition (SCA) view: vulnerable libraries the app ships.

tr4m0ryp/shor

Skill Claude CodeCodex

A small recipe over the already-cloned repo. It runs git log --grep for security/CVE/fix patterns, maps the touched files into ranked hot files, and emits historicalsignal.json. It optionally folds in two signals you may have ALREADY produced this phase — osv-scanner JSON (dependency CVEs) and gitleaks JSON (history…

tr4m0ryp/shor

Skill Claude CodeCodex

Aqua's trivy (pure-Go). One pass over the checked-out source produces three read-only views: vulnerabilities (SCA against its CVE DB), misconfigurations (Dockerfile, docker-compose, Kubernetes, Terraform, Helm — built-in policies), and secrets (regex/entropy). Read-only, no traffic to the target → pre-recon /…

tr4m0ryp/shor

Skill Claude CodeCodex

Skill "gitleaks" from tr4m0ryp/shor, covering gitleaks — secret scanning (repo + history), when to reach for it, pick the mode by what's on disk (important), key flags and safe invocation.

tr4m0ryp/shor

Skill Claude CodeCodex

Skill "trufflehog" from tr4m0ryp/shor, covering trufflehog — secret detection with live verification, when to reach for it, pick the mode by what's on disk (important), key flags and safe invocation.

tr4m0ryp/fable-5-jailbreak

MCP server Claude CodeCodexCursor +2

MCP server "evalkit" as configured in tr4m0ryp/fable-5-jailbreak. Runs locally from the . Python package. Needs 2 environment variables to run.

tr4m0ryp/fable-5-jailbreak

Instructions file

Claude Code instructions for tr4m0ryp/fable-5-jailbreak: This project provides MCP tools for Claude Code, installed globally.

tr4m0ryp/linkedin-mcp-server

Skill Claude CodeCodex

Scan all open issues and PRs in stickerdaniel/linkedin-mcp-server and rank them by urgency (severity, user impact, age, references), implementation quality (for PRs — mergeability, CI, diff scope, locale-independence, test coverage), and contributor track record (prior merged PRs, review quality, response cadence).…

tr4m0ryp/linkedin-mcp-server

Skill Claude CodeCodex

Reproduce a single LinkedIn-MCP issue locally on the current branch against the real authenticated LinkedIn session at /.linkedin-mcp/profile/, using the MCP streamable-http server. Captures the exact failure mode (tool output, error, missing data) and maps it back to the scraper code path. Use when the user says…

tr4m0ryp/linkedin-mcp-server

Skill Claude CodeCodex

Check out a candidate PR locally, restart the MCP server on the PR branch, re-run the exact same MCP tool call that failed in /2-repro-issue, diff the outputs, and audit the fix for locale-independence, DOM-stability, and scope per CLAUDE.md scraping rules. Use when the user says "verify PR.

tr4m0ryp/linkedin-mcp-server

Skill Claude CodeCodex

Invoke this skill when the user says "use btca".

tr4m0ryp/linkedin-mcp-server

Skill Claude CodeCodex

Fetch PR review comments, verify each against real code/docs, fix valid issues, commit and push.

tr4m0ryp/linkedin-mcp-server

Settings file Claude Code

Agent settings configuring attribution.

tr4m0ryp/linkedin-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "greptile", hosted remotely at api.greptile.com, as configured in tr4m0ryp/linkedin-mcp-server.

tr4m0ryp/linkedin-mcp-server

Instructions file CodexOpenCode

Instructions for tr4m0ryp/linkedin-mcp-server, covering claude.md, development commands, scraping rules, tool return format and verifying bug reports.

tr4m0ryp/linkedin-mcp-server

Instructions file

Instructions for tr4m0ryp/linkedin-mcp-server, a project described as: Open-source MCP server for LinkedIn. Give Claude and any MCP-compatible AI agent access to profiles, companies, jobs, and messages.

tr4m0ryp/enrichment-mcp

Instructions file

Claude Code instructions for tr4m0ryp/enrichment-mcp, covering enrichmentmcp -- project instructions, invariant (do not break), architecture, layout and stack.

tr4m0ryp/enrichment-mcp

Skill Claude CodeCodex

Depth-first lead finder for a penetration-testing / bug-bounty offering (founder Moussa). Use when the operator wants to surface a few high-fit custom-built B2B / high-blast-radius commerce operators -- distributors, wholesalers, B2B webshops, marketplaces, and trade platforms holding valuable/sensitive customer data…