5 tagged digital forensics, measured the same way as everything else here.
Instructions file CodexOpenCode
AGENTS.md instructions for 7onez/cti-expert, covering agents.md — cti expert (cross-agent operating contract), 1. skill directory (resolve once, then reuse as $skilldir), 2. step 0 — detect the os (once per session), 3. runtime: uv-first (the portable path) and 4. generate report outputs (works on any os / any agent).
Instructions file
Claude Code instructions for 7onez/cti-expert, covering cti-expert — contributor rules, rule 2 — there is exactly one case store, rule 3 — register every new tool with the mcp surface, rule 4 — wrapper/collector drift must stay self-healing and rule 5 — indicator classification changes need a test.
Instructions file
Instructions for kismatkunwar89/SAVVYDFIR-MCP, covering savvydfir-mcp - dfir investigation framework, what this is, critical rules, forensic knowledge in tool responses and investigation workflow (7 phases).
Instructions file
Claude Code instructions for badchars/steganography-mcp, covering steganography-mcp — steganography analysis mcp server, architecture, key rules, categories (17) and commands.
Instructions file
Claude Code instructions for omeryemba/mcp-hayabusa, covering claude.md, what this is, commands, install (editable, with test deps) and tests.