pojia-lab
Skill39 starsChanged 34 days agoMITView on GitHub
Create reproducible technical research workspaces for reverse engineering, penetration testing, memory analysis, fuzzing, malware analysis, protocol research, and CTF cases. Use when Codex needs to organize artifacts, hash evidence, create case directories, track commands and observations, build local test harnesses, collect logs/PCAP/dumps, preserve originals, generate manifests, or package a reproducible technical report.
We split this skill into the rules it gives an agent
7 rules. About 0 are common, 3 are distinctive, and 4 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈3
Distinctive · estimate
This author's own choices. Worth a look.
4
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 17
Create a clean, repeatable case before complex analysis.
- Very specific: line 21
Run scripts/new_case.py <name> --root <directory> to create a case workspace.
- Very specific: line 22
Put untouched inputs under artifacts/original/.
- Very specific: line 23
Run scripts/hash_artifact.py <path> --manifest <case>/manifest.json for each input.
- Very specific: line 24
Keep derived files under work/, scripts under scripts/, evidence under evidence/, and final outputs under output/.
- Distinctive: line 36
Prefer deterministic scripts and configuration over manual-only steps.
- Distinctive: line 38
Keep service ports/processes and cleanup commands in the case manifest.
≈ “Common” is an estimate: at least 1 in 5 of the 308,232 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Pojia Lab
Create a clean, repeatable case before complex analysis.
Start
- Run
scripts/new_case.py <name> --root <directory>to create a case workspace. - Put untouched inputs under
artifacts/original/. - Run
scripts/hash_artifact.py <path> --manifest <case>/manifest.jsonfor each input. - Keep derived files under
work/, scripts underscripts/, evidence underevidence/, and final outputs underoutput/.
Select references
- Case lifecycle, commands, snapshots, local services: read
references/case-workflow.md. - Evidence, hashes, timestamps, logs, PCAP, dumps, and reporting: read
references/evidence.md. - Full-speed CTF intake, category triage, solve engineering, flag verification, and Writeup packaging: read eferences/ctf-operations.md.
Execute
- Record tool versions, exact commands, environment, timestamps, and output paths.
- Prefer deterministic scripts and configuration over manual-only steps.
- Track assumptions and failed hypotheses in
notes.md. - Keep service ports/processes and cleanup commands in the case manifest.
Deliver
Package the manifest, scripts, evidence index, key artifacts, results, verification commands, and cleanup instructions.
In this repository85 other files it gives its agents.
- api-securitySkill
- apk-reverseSkill
- attack-chainSkill
- binary-diffSkill
- cairnSkill
- code-sentinel-ctfSkill
- code-sentinel-engagementSkill
- code-sentinel-gpt56Skill
- code-sentinel-matrixSkill
- code-sentinel-opsSkill
- code-sentinel-payloadSkill
- code-sentinel-ptesSkill
- code-sentinelSkill
- cyberstrikeSkill
- diagram-generatorSkill
- docs-generatorSkill
- edr-bypass-reSkill
- firmware-pentestSkill
- gpt56-instruct-routerSkill
- gpt56-reverse-pentestSkill
- ida-reverseSkill
- js-reverseSkill
- llm-securitySkill
- malware-analysisSkill
- mobile-competitive-game-securitySkill
- mobile-reverseSkill
- patch-diff-exploitSkill
- pdfSkill
- pentest-toolsSkill
- src-hunterSkill
- playwright-interactiveSkill
- playwrightSkill
- pojia-anticheatSkill
- pojia-auto-opsSkill
- pojia-evasionSkill
- pojia-exploitSkill
- pojia-game-hackSkill
- pojia-game-redteamSkill
- pojia-game-securitySkill
- pojia-license-securitySkill
- pojia-malwareSkill
- pojia-mature-contentSkill
- pojia-memorySkill
- pojia-pentestSkill
- pojia-reverseSkill
- pojia-social-engSkill
- pojia-unlimitedSkill
- pwn-chainSkill
- radare2Skill
- range-research-scopeSkill
- recover-license-native-e2eSkill
- reverse-engineeringSkill
- screenshotSkill
- security-best-practicesSkill
- security-ownership-mapSkill
- security-threat-modelSkill
- shadowtrace-anti-debugSkill
- shadowtrace-artifact-triageSkill
- shadowtrace-binary-analysisSkill
- shadowtrace-binary-protectionSkill
- The first 60 shown.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
Reviews can't be read right now.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

