Turn minified, bundled, or transpiled JavaScript back into readable modules. Use when you encounter unreadable production JS — a webpack/esbuild/Metro/Rollup bundle, a minified vendor script, Babel/TypeScript/SWC-transpiled output, or a single mangled .js file — and need to read, audit, debug it, or recover a…
Generate and interpret security-research diffs between Windows versions or patch levels using this repo's WinDiff CLI and databases. Use when comparing Windows builds or binaries such as ntoskrnl.exe, ntdll.dll, win32k.sys, ci.dll, or cng.sys to find changed syscalls, symbols, types, mitigation flags, callbacks…
Route Mira detection findings into a reusable knowledge pipeline. Use when Codex needs to turn a new detection clue, risk-environment observation, or research note into topic confirmation, case capture, topic maintenance, and article update suggestions inside the Mira repository.
Comprehensive CLI reference and search strategies for osgrep semantic code search. Use for detailed CLI options, index management commands, search strategy guidance (architectural vs targeted queries), and troubleshooting. Complements the osgrep plugin which handles daemon lifecycle.
Debug and trace C/C++/Rust programs with the GNU Debugger (GDB) without blocking the agent. Use when you need to set tracepoints, inspect variables, or monitor a running process while staying responsive to the user.
Use when studying, reverse-engineering, comparing, reviewing, or learning from AI skill packages, SKILL.md files, Claude/Codex skills, prompt workflows, or agent playbooks; use when the user wants reusable skill design patterns, a keep/cut review, Markdown report, structured pattern notes, or multi-page web handbook.…
Uses Ghidra to disassemble and decompile a binary, navigate to key routines via imports and strings, annotate decompiled code, and run headless scripts to automate extraction of C2, crypto, and config. Activates for requests to reverse engineer with Ghidra, decompile a binary, or script Ghidra headless analysis.
Defensive malware analysis and reverse-engineering workflow. Use for authorized lab analysis of suspicious Windows executables, DLLs, shellcode, packed samples, malicious documents, indicators of compromise, static and dynamic triage, IDA/Ghidra/debugger reasoning, anti-analysis handling, unpacking, host/network…
A toolkit for taking software apart to inspect how it works, across formats such as Android packages, Windows programs, Linux binaries, JavaScript, and firmware.
Reverse-engineer an AI product from authenticated UI evidence, including autonomous screenshot collection when safe browser or desktop controls are available, producing traceable user journeys, Agent I/O contracts, functional-equivalent prompts, or layered product architecture. Use for read-only product teardowns…
Reconstruct a referenced website, page, interaction, or WebGL/WebGPU/Canvas effect from a URL or supplied evidence. Use for faithful site cloning, offline mirrors, responsive page replication, SPA fixture replay, visual-effect extraction, design transfer, and continued fidelity work on an existing replica. Not for…
Use this skill when the user asks to inspect, research, plan, or operate a Robinhood account through the repository's CLI, MCP server, or importable API. It routes account reads, portfolio analysis, equities, options, orders, watchlists, recurring investments, settings, tax lots, tax documents, tax-rule and…
Reverse-engineer any open-source repo into a clean, queryable understanding and a rebuildable blueprint — then build your own customized version from the blueprint. Use when the user wants to understand how a repo works, learn its architecture, or rebuild a tool with their own changes ("how does X work", "rebuild X…
A general-purpose guide for examining JavaScript code to identify website encryption, request signatures, and anti-bot checks, then documenting the findings in Python.
Meta-skill for reverse loop engineering that transforms an AI agent's approach to any complex task. Combines systematic deconstruction (reverse engineering) and iterative construction (loop engineering) in an EXTRACT→SYNTHESIZE→BUILD→AUDIT cycle. Includes 7 named tactical loops (FORGE, SIEGE, PRISM, RAZOR, MIRROR…
Reference Claude Code's prompt engineering patterns for AI/Agent development. Provides best practices for system prompts, tool design, agent orchestration, and safety.
A command-line tool for static reverse engineering, which means examining compiled files without running them, including ELF, PE, Mach-O, object files, and identified shellcode.
Interpret a Broad-Side batch reconnaissance run. Use after codecartobroadside collect has produced .codecarto/broadside/ / results, to triage scouting signals before or during an interactive CodeCartographer pipeline run.
Turn any website into a fast, beautiful command-line client. Use when the user wants a CLI that replicates a site's features by capturing its network traffic (HAR), recovering the private/undocumented API behind it, and generating a typed terminal client that calls those endpoints directly instead of driving a browser…
Rust CLI reference for the headless-ghidra pipeline. Covers command syntax, flags, output contract, artifact paths, and workspace layout for all ghidra-agent-cli subcommands. Load when: constructing a ghidra-agent-cli command, interpreting its output, resolving a flag or artifact path question, or debugging CLI…
Reverse engineer and analyze a specific feature in Claude Code's source. Use when the user wants to understand how a Claude Code feature works internally, or when asked to analyze Claude Code internals.
Static analysis for Unity IL2CPP games via il2cpp-decompiler-agent MCP (listdumps, loadproject, searchsymbols, getclassinfo, decompilemethod). Use when runtime is IL2CPP, GameAssembly.dll is involved, or remakes like Who's Your Daddy Remake. Always MCP-first — do not start with Il2CppStudio CLI.
★not rated 3 1mo agoA80 tokens
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: