gadievron/raptor

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

3.7kStars on the repository
75Mods indexed here, across every type
3d agoLast push, which is what freshness is scored on
customA LICENSE file GitHub cannot name, so bodies are not copied

audit

01

gadievron/raptor

Skill Claude CodeCodex

Hypothesis-driven, tool-grounded security review of coverage gaps.

not rated 3.7k +22 3d ago B 14 tokens

code-understanding

02

gadievron/raptor

Skill Claude CodeCodex

Provides adversarial code comprehension for security research, mapping architecture, tracing data flows, and hunting vulnerability variants to build ground-truth understanding before or alongside static analysis.

not rated 3.7k +22 3d ago B 36 tokens

gadievron/raptor

Skill Claude CodeCodex

Instrument C/C++ with -finstrument-functions for execution tracing and Perfetto visualisation.

not rated 3.7k +22 3d ago A 22 tokens

rr-debugger

06

gadievron/raptor

Skill Claude CodeCodex

Deterministic debugging with rr record-replay. Use when debugging crashes, ASAN faults, or when reverse execution is needed. Provides reverse-next, reverse-step, reverse-continue commands and crash trace extraction.

not rated 3.7k +22 3d ago A 46 tokens

gadievron/raptor

Skill Claude CodeCodex

Multi-stage pipeline for validating that vulnerability findings are real, reachable, and exploitable, preventing wasted effort on hallucinated findings, dead code paths, or findings with unrealistic preconditions.

not rated 3.7k +22 3d ago B 41 tokens

frida

08

gadievron/raptor

Skill Claude CodeCodex

Dynamic instrumentation via Frida - attach to or spawn a process, load a JS hook script, capture send() events into a lifecycle-managed run directory. Supports local, USB-attached, and remote frida-server targets.

not rated 3.7k +22 3d ago B 47 tokens

github-archive

09

gadievron/raptor

Skill Claude CodeCodex

Investigate GitHub security incidents using tamper-proof GitHub Archive data via BigQuery. Use when verifying repository activity claims, recovering deleted PRs/branches/tags/repos, attributing actions to actors, or reconstructing attack timelines. Provides immutable forensic evidence of all public GitHub events since…

not rated 3.7k +22 3d ago A 66 tokens

gadievron/raptor

Skill Claude CodeCodex

Recover deleted commits from GitHub using REST API, web interface, and git fetch. Use when you have commit SHAs and need to retrieve actual commit content, diffs, or patches. Includes techniques for accessing "deleted" commits that remain on GitHub servers.

not rated 3.7k +22 3d ago A 59 tokens

github-evidence-kit

11

gadievron/raptor

Skill Claude CodeCodex

Generate, export, load, and verify forensic evidence from GitHub sources. Use when creating verifiable evidence objects from GitHub API, GH Archive, Wayback Machine, local git repositories, or security vendor reports. Handles evidence storage, querying, and re-verification against original sources.

not rated 3.7k +22 3d ago A 62 tokens

gadievron/raptor

Skill Claude CodeCodex

Recover deleted GitHub content using the Wayback Machine and Archive.org APIs. Use when repositories, files, issues, PRs, or wiki pages have been deleted from GitHub but may persist in web archives. Covers CDX API queries, URL patterns, and systematic recovery workflows.

not rated 3.7k +22 3d ago A 62 tokens

gadievron/raptor

Skill Claude CodeCodex

Orchestrates multi-agent forensic investigations on public GitHub repositories, coordinating parallel evidence collection, hypothesis formation, verification, and report generation.

not rated 3.7k +22 3d ago A 34 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: