One search for your own team's files and the public ecosystem. See how real projects write their agent instructions, and bring the good ideas home.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
yaklangSkillyaklang/hack-skills/skills/symbolic-execution-tools/SKILL.md
Symbolic execution and constraint solving playbook. Use when solving CTF reversing challenges, recovering keys, bypassing checks, or automating binary analysis with angr, Z3, or Unicorn Engine.
4 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/symmetric-cipher-attacks/SKILL.md
Symmetric cipher attack playbook. Use when exploiting block cipher mode weaknesses (CBC padding oracle, ECB cut-and-paste, bit flipping), stream cipher key reuse, or meet-in-the-middle attacks.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/traffic-analysis-pcap/SKILL.md
Traffic analysis and PCAP forensics playbook. Use when analyzing network captures including Wireshark filters, protocol analysis (HTTP/DNS/FTP/SMTP/USB/WiFi), data extraction, covert channel detection, PCAP repair, TLS decryption, and tshark command-line analysis.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/type-juggling/SKILL.md
PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, or hash comparisons without strict types — common in legacy PHP and CTF-style code paths.
3 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/unauthorized-access-common-services/SKILL.md
Unauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interfaces are exposed without authentication.
1 project uses a version of this
yaklangSkillyaklang/hack-skills/skills/upload-insecure-files/SKILL.md
Insecure file upload playbook. Use when testing upload validation, storage paths, processing pipelines, preview behavior, overwrite risks, and upload-to-RCE chains.
1 project uses a version of this
yaklangSkillyaklang/hack-skills/skills/vm-and-bytecode-reverse/SKILL.md
Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custom virtual machines with proprietary bytecode, dispatcher loops, or maze-style challenges.
4 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/waf-bypass-techniques/SKILL.md
WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloads (SQLi, XSS, RCE) and you need to craft bypasses using encoding, protocol-level tricks, or WAF-specific weaknesses.
4 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/web-cache-deception/SKILL.md
Web cache deception and poisoning playbook. Use when CDN, reverse proxy, or application caching may serve sensitive authenticated content to other users due to path confusion or cache key manipulation.
7 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/websocket-security/SKILL.md
WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws. Use when apps use real-time channels, chat, notifications, or WS-backed APIs.
6 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/windows-av-evasion/SKILL.md
AV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-based detection on Windows endpoints.
3 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/windows-lateral-movement/SKILL.md
Windows lateral movement playbook. Use when pivoting between Windows hosts via PsExec, WMI, WinRM, DCOM, RDP, pass-the-hash, overpass-the-hash, or pass-the-ticket techniques.
2 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/windows-privilege-escalation/SKILL.md
Windows local privilege escalation playbook. Use when you have low-privilege shell access on Windows and need to escalate via token abuse, Potato exploits, service misconfigurations, DLL hijacking, UAC bypass, or registry autoruns.
4 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/xslt-injection/SKILL.md
XSLT injection testing: processor fingerprinting, XXE and document() SSRF, EXSLT write primitives, PHP/Java/.NET extension RCE surfaces. Use when user-controlled XSLT/stylesheet input or transform endpoints are in scope.
3 projects use a version of this
yaklangSkillyaklang/hack-skills/skills/xss-cross-site-scripting/SKILL.md
XSS playbook. Use when user-controlled content reaches HTML, attributes, JavaScript, DOM sinks, uploads, or multi-context rendering paths.
2 projects use a version of this
yaklangSkillyaklang/irify-sast-skill/skills/irify-sast/SKILL.md
IRify SAST — AI-powered static application security testing. Compile source code into SSA IR, then use SyntaxFlow DSL to trace data flow across function boundaries, detect vulnerabilities (SQLi, RCE, XXE), and answer questions like "where does user input go?". Supports 7 languages (Java, PHP, JS, Go, Python, C, Yak) and incremental compilation via ProgramOverLay. Requires yaklang MCP server: yak mcp -t ssa
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.
