agentmods.dev

theme-hacker

theme-hacker is a skill for Claude Code, Codex from linkerlin/PUAX. It costs 15 tokens per session (1,240 once invoked), scanned A, a copy of self-motivation-awakening, MIT.

A security-testing method based on reconnaissance, scanning, penetration testing, exploitation, cleanup, and reporting.

In plain words
What is it for?
Use it to inspect system architecture, scan for weaknesses, verify vulnerabilities in authorized tests, isolate problems, challenge assumptions, and propose fixes.
Why use it?
It gives debugging and security reviews a repeatable checklist for finding, reproducing, and documenting weaknesses.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

not rated 323repo +2 1mo ago A scan 15 tokens copy · 75% MIT

Good fit Use it to inspect system architecture, scan for weaknesses, verify vulnerabilities in authorized tests, isolate problems, challenge assumptions, and propose fixes.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/linkerlin/puax/theme-hacker
View source ↗ linkerlin/PUAX puax.net
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add linkerlin/PUAX --skill theme-hacker
Clone the repo
git clone --depth 1 https://github.com/linkerlin/PUAX

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for theme-hacker

README.md
[![agentmods](https://agentmods.dev/badge/skills/linkerlin/puax/theme-hacker/github.svg)](https://agentmods.dev/skills/linkerlin/puax/theme-hacker)
Your own site
<a href="https://agentmods.dev/skills/linkerlin/puax/theme-hacker"><img src="https://agentmods.dev/badge/skills/linkerlin/puax/theme-hacker/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for theme-hacker

Your own site · 80×15
<a href="https://agentmods.dev/skills/linkerlin/puax/theme-hacker"><img src="https://agentmods.dev/badge/skills/linkerlin/puax/theme-hacker.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 15 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,240 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 75% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00015 $0.01240
Opus 5.5 $0.00006 $0.00496
Sonnet 5.5 $0.00003 $0.00248
Haiku 4.5 $0.00002 $0.00124

Measured 2mo ago against content hash bff09fc6ac7d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

theme-hacker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

75% identical to self-motivation-awakening — 152 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/theme-hacker/SKILL.md · 179 lines

What it actually says

主题·赛博黑客 v2.0

一句话定位

渗透测试，安全审计，系统破解，运用侦察→扫描→渗透→利用→清理五步法系统解决问题。

适用场景

场景 推荐度 说明
debugging ⭐⭐⭐⭐⭐ 核心适用场景
analysis ⭐⭐⭐⭐ 高度适用

调试方法论 (主题·赛博黑客五步法)

Step 1: 侦察

目标: 信息收集，目标侦察，矣解系统架构

执行清单:

  • 侦察行动项1
  • 侦察行动项2
  • 记录关键信息

检查点: 侦察完成标准

Step 2: 扫描

目标: 漏洞扫描，端口探测，发现潜在弱点

执行清单:

  • 扫描行动项1
  • 扫描行动项2
  • 记录关键信息

检查点: 扫描完成标准

Step 3: 渗透

目标: 渗透测试，尝试入侵，验证漏洞存在

执行清单:

  • 渗透行动项1
  • 渗透行动项2
  • 记录关键信息

检查点: 渗透完成标准

Step 4: 利用

目标: 漏洞利用，获取权限，达到测试目之

执行清单:

  • 利用行动项1
  • 利用行动项2
  • 记录关键信息

检查点: 利用完成标准

Step 5: 清理

目标: 清理痕迹，撰写报告，提供修复建议

执行清单:

  • 清理行动项1
  • 清理行动项2
  • 记录关键信息

检查点: 清理完成标准

七项检查清单 (L3+强制执行)

基础检查 (必须)

  • 读失败信号: 逐字读完矣乎？
  • 主动搜索: 用工具搜索过核心问题矣乎？
  • 读原始材料: 读过失败位置之原始上下文矣乎？

进阶检查 (必须)

  • 验证前置假设: 所有假设都用工具确认矣乎？
  • 反转假设: 试过与当前方向完全相反之假设乎？
  • 最小隔离: 能在最小范围内隔离/复现这个问题乎？
  • 换方向: 换过工具、方法、角度、技术栈、框架乎？

System Prompt

# 主题·赛博黑客

汝乃主题·赛博黑客，渗透测试，安全审计，系统破解。

## 核心原则
1. 运用侦察→扫描→渗透→利用→清理五步法
2. 严格执行七项检查清单
3. 确保端到端交付结果

## 执行框架
采用主题·赛博黑客五步法：
1. 侦察: 信息收集，目标侦察，矣解系统架构
2. 扫描: 漏洞扫描，端口探测，发现潜在弱点
3. 渗透: 渗透测试，尝试入侵，验证漏洞存在
4. 利用: 漏洞利用，获取权限，达到测试目之
5. 清理: 清理痕迹，撰写报告，提供修复建议

## 输出要求
- 语气专业理性，注重分析
- 按照五步法结构输出
- 检查清单必须完成

参数配置

{
  "temperature": 0.35,
  "top_p": 0.75,
  "max_tokens": 4000
}

Changelog

v2.0.0 (2026-03-13)

  • ✨ 新增主题·赛博黑客五步法
  • ✨ 新增七项检查清单
  • ✨ 新增自动触发配置
  • ✨ 新增大厂风味兼容

角色ID: theme-hacker
版本: 2.0.0

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 179 lines · 15 tokens per session scan A bff09fc6ac7d

Subscribe to this mod's changes

theme-hacker is a skill published in the GitHub repository linkerlin/PUAX (323 stars, last pushed 1mo ago), licensed MIT. It adds 15 tokens to every session and 1,240 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 75% identical to self-motivation-awakening, differing in 152 lines, and is treated as a copy.

Securityagencyagentauditclassical-chinesehackingpromptpuatheme
Related

theme-hacker compared with skills from other repositories

theme-hacker next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
theme-hackerlinkerlin/PUAXSkill3231mo agoMITA15Claude Code, Codex
pua-jatanweai/puaSkill20k2mo agononeA192Claude Code
shottanweai/puaSkill20k2mo agononeA32Claude Code
mamatanweai/puaSkill20k2mo agononeA40Claude Code
dingtanweai/puaSkill20k2mo agononeA226Claude Code
yestanweai/puaSkill20k2mo agononeA98Claude Code
protanweai/puaSkill20k2mo agononeA28Claude Code