Find the best CLAUDE.md, AGENTS.md and Claude skills

zhaoxuya520Skill

reverse-engineering

zhaoxuya520/reverse-skill-private/skills/reverse-engineering/SKILL.md

Provides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone crypto problems unless reversing the implementation is the real blocker.

Often used withida-reverse·attack-chain·binary-diff

zhaoxuya520Skill

reverse-skill-router

zhaoxuya520/reverse-skill-private/skills/SKILL.md

Routes reverse engineering, exploitation, penetration testing, malware, mobile, firmware, browser automation, documentation, and security tasks to the appropriate specialist skill. Use when a task spans modules or the correct reverse-skill entrypoint is unclear.

zhaoxuya520Skill

supply-chain-security

zhaoxuya520/reverse-skill-private/skills/supply-chain-security/SKILL.md

Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.

Often used withbinary-diff·pentest-tools·js-reverse

zhaoxuya520Skill

thick-client

zhaoxuya520/reverse-skill-private/skills/thick-client/SKILL.md

Use for authorized security testing of desktop thick clients including local storage, update channels, IPC, traffic, and client-side trust boundaries.

zhaoxuya520Skill

threat-hunting

zhaoxuya520/reverse-skill-private/skills/threat-hunting/SKILL.md

Use for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and incident detection validation.

zhaoxuya520Reads credentialsSkill

threat-intelligence

zhaoxuya520/reverse-skill-private/skills/threat-intelligence/SKILL.md

Use for authorized OSINT and cyber threat intelligence that enriches IOCs, campaigns, impersonation, scams, or threat actors from public sources. Includes bounded X/Twitter search through Xquik, source preservation, corroboration, and evidence handoff.

zhaoxuya520Skill

wifi-wireless

zhaoxuya520/reverse-skill-private/skills/wifi-wireless/SKILL.md

Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection research, and lab-only deauth testing.

zhaoxuya520Skill

windows-ad

zhaoxuya520/reverse-skill-private/skills/windows-ad/SKILL.md

Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.