351 tagged forensics, measured the same way as everything else here.
Browse within: bootable-usb 190computer-repair 190hermes-agent 190it-tools 189cybersecurity 63incident-response 49bug-bounty 45agents 34dfir 30evidence-collection 28autonomous-pentesting 27antigravity-skills 25artifact-analysis 19memory-forensics 19
Skill Claude Code
Investigate GitHub security incidents using tamper-proof GitHub Archive data via BigQuery. Use when verifying repository activity claims, recovering deleted PRs/branches/tags/repos, attributing actions to actors, or reconstructing attack timelines. Provides immutable forensic evidence of all public GitHub events since…
Skill Claude Code
Audit whether a paper's EVALUATION DESIGN actually measures what it claims and whether its reporting is complete — the validity layer family D (experiment-forensics) cannot reach. Three patterns: train/test leakage means the reported score may not measure generalization (HP-EVAL-LEAKAGE — adopts the Kapoor & Narayanan…
Skill Claude CodeCodex
Expert in data forensics, anomaly detection, audit trail analysis, fraud detection, and breach investigation.
Skill Claude CodeCodex needs its repo
Research, author, and validate AI agent artifact catalog entries documenting the forensic artifacts AI agents leave on endpoints - install paths, config and credential files, MCP server configs, listening ports, process trees, registry keys, and the Windows event log records that prove a tool ran. Use this skill…
Skill Claude CodeCodex
Set up an agent on web0 in one call. Tell it your payout wallet, the services you want to sell, and (optionally) a .null name — it returns a complete, validated setup your agent can act on immediately.
Skill Claude CodeCodex needs its repo
⚠️ TRIGGER: when auditing an unfamiliar full-stack codebase for bugs — security, performance, reliability, dev tooling. Multi-session workflow: discover → duck-verify → plan → handoff → fix → validate. 90-min timebox. Designed for time-pressure coding/debug tasks.
Skill Claude CodeCodex
Which Valhuntir MCP tool or SIFT tool to use for a question, file, IOC or artifact, and the step-by-step workflows that combine them (IOC investigation, threat actor research, detection engineering, malware analysis, disk, memory, timeline and network). Use when choosing tools or planning a multi-step analysis.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: