Self-evolving reverse/security skill routing pack with GOAL contracts, capability graph, TraceCards, and promotion gates
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for OAuth, OIDC, redirect flows, state or nonce handling, PKCE, token exchange, refresh logic, claim mapping, and accepted login paths. Use when the user asks to trace redirects, callback parameters, scopes, state, nonce, PKCE, refresh…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for packet capture analysis, session reconstruction, application-protocol decoding, stream reassembly, beacon timing, and packet-to-process correlation. Use when the user asks to analyze a PCAP, rebuild TCP or UDP sessions, decode HTTP…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for prompt-injection, retrieval poisoning, memory contamination, planner drift, MCP or tool-boundary abuse, and agent exfiltration challenges. Use when the user asks to analyze prompt injection, retrieval poisoning, memory contamination…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for queues, async workers, cron jobs, delayed tasks, retry behavior, worker-only config drift, and payload-to-side-effect chains. Use when the user asks to trace a queue payload, inspect async job execution, explain worker-only behavior…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for race windows, ordering bugs, idempotency failures, lock gaps, concurrent worker drift, and state inconsistencies that produce decisive effects. Use when the user asks to reproduce timing-sensitive bugs, concurrent state corruption…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for forced-auth coercion, relay chains, target selection, NTLM or related acceptance paths, and coercion-to-privilege transitions. Use when the user asks to trace a coercion primitive, follow a relay path, analyze forced authentication…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for parser differentials, HTTP normalization gaps, ambiguous headers, path decoding drift, transfer-framing mismatches, and request smuggling routes. Use when the user asks to trace proxy and backend parse differences, conflicting path…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for reverse engineering, malware, DFIR, firmware, pwnable, and native exploit challenges. Use when the user asks to reverse a binary, unpack a sample, inspect a memory dump or PCAP, recover malware behavior, debug a crash, or build or verify…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for reverse proxies, Host headers, forwarded headers, vhost routing, websocket upgrades, path-prefix rewriting, base-URL derivation, and multi-node route resolution. Use when the user asks which host or container serves a route, why a…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for SSRF reachability, internal route probing, metadata-service access, credential pivoting, and token-to-accepted-privilege chains. Use when the user asks to trace SSRF sources, internal hosts, metadata endpoints, link-local tokens…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for image, audio, video, document, and container steganography. Use when the user asks to inspect metadata, alpha or palette channels, LSBs, thumbnails, appended trailers, QR fragments, transcoding artifacts, or recover a hidden payload from…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for CI/CD, registry, dependency drift, artifact provenance, image build, release pipeline, and runtime consumer challenges. Use when the user asks to trace dependency drift, registry pulls, malicious packages, build or release tampering, CI…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for SSR, template rendering, route loaders, hydration payloads, server-client render boundaries, and template-to-handler enforcement gaps. Use when the user asks to inspect SSR or template routes, trace render context or hydration data…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for CTF web, API, SSR, frontend, queue-backed app, and routing challenges. Use when the user asks to inspect a site or API, follow real browser requests, debug auth or session flow, trace uploads or workers, find hidden routes, or explain why…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for WebSocket and SSE handshakes, auth material, subscription state, realtime message schemas, reconnect behavior, and frame-driven runtime effects. Use when the user asks to inspect a WebSocket or SSE handshake, decode frames, trace…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kerberos, WinRM, SMB, RDP, Windows credential material, replayable tickets, delegation edges, and host-to-host pivot chains. Use when the user asks to replay Kerberos material, trace a WinRM, SMB, or RDP pivot, understand host-to-host…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Default entrypoint and master ctf-sandbox-orchestrator workflow for CTF, exploit, reverse engineering, DFIR, pwnable, crypto, stego, mobile, AI-agent, cloud, container, Active Directory, Windows-host, and identity challenges. Use first when the user presents challenge infrastructure, binaries, prompts, hosts, or…
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
A collection of skill modules for reverse engineering, which means examining software to understand how it works. Each module includes instructions, tools, and a workflow for a particular task.
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
A method for testing the security of web APIs, which are interfaces that let software exchange data. It covers REST, GraphQL, WebSocket, SOAP, and common authentication systems.
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
A command-line workflow for examining and modifying Android application packages (APKs), the installable files used to distribute Android apps.
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
A security-testing skill that plans multi-stage attack paths and coordinates specialized security tasks. It covers scenarios such as moving from an external foothold toward internal systems, but is not needed for single tasks like port scanning.
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
A binary-diffing workflow for matching functions between two versions of a compiled program. A binary is a program in machine-readable form, and function matching helps transfer earlier reverse-engineering results to a newer version.
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
A skill for automating web browsers and Windows desktop applications. It covers actions such as opening pages, clicking controls, filling forms, taking screenshots, and operating tools with graphical interfaces.
2233admin/reverse-skill-evolver
Skill Claude CodeCodex
Create clear, editable diagrams from messy or structured inputs. Prefer text-based diagram source first so the result can be reviewed, versioned, and refined. Render to files only when the user asks for an image/PDF or when a downloadable artifact would materially help.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: