binary-reconnaissance
Initial reconnaissance on binaries including checksec, file analysis, strings, and symbols. First step for any new target.
Discover DevOps skills, compare source repositories and read the instructions for each workflow.
Initial reconnaissance on binaries including checksec, file analysis, strings, and symbols. First step for any new target.
How tests should be structured, named, and prioritized in this codebase.
Describes the primary technologies, frameworks, libraries, and language conventions used in this codebase.
Design security controls and threat mitigations. Use for features involving auth, data, or external exposure.
Generate MkDocs documentation sites with Material theme, mkdocstrings for API docs, and versioning. Use when setting up or extending project documentation.
Develop working exploits using pwntools. Includes exploit template and common patterns.
Identify vulnerability class, analyze root cause, and plan exploitation strategy.
Scan and document repository structure, patterns, and key components. Use when starting work on unfamiliar codebases.
Set up pre-commit hooks and GitHub Actions workflows for testing, linting, security scanning, releases, and deployments. Supports Python, Node.js, Go, Rust, and multi-language projects.
Performance guidelines and patterns for this system.
Map module dependencies and relationships. Use for complex codebases with non-trivial coupling.
Commit message style and structure for this repository.
Design test strategy with concrete test cases. Use before writing tests.
Security requirements, threats, and controls that apply across this system.
Document security research, CTF solutions, and malware analysis. Includes REPORT.md and STATUS.md templates.
How user-facing and internal documentation should be written and maintained.
Standards for security documentation and writeups
Design API endpoints, schemas, and contracts. Use when defining public interfaces or data models.
Cross-check design artifacts for consistency and completeness. Use before implementation.
Scan code for security vulnerabilities. Use after implementation changes.
Review code for style, performance, and maintainability. Use before merging changes.
Create isolated git worktrees for ALL coding tasks with issue linking (discovery: implementation-clarity). Evaluate at implementation-clarity when task modifies code files. YOU MUST use for feature development,...
Extract and read Claude conversation JSONL files with composable filters (discovery: rubber-duck). Evaluate at rubber-duck or at any point in the sesssion when task requires reading conversation history, verify...
Create GitHub Issues for client deliverables in DaveX2001/deliverable-tracking repo (discovery: rubber-duck). Evaluate at requirements-clarity when user mentions tracking, deliverables, commitments, or 'create...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.