malware-sandbox-analysis

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

Agent runtimes — local WASM-sandboxed agents (rvagent) + Anthropic Claude Managed Agents (cloud); one interface, local-vs-cloud backends

5 skills · 2 commands · 9 agents

Agent Skills for Together AI platform — inference, training, embeddings, audio, video, images, function calling, and infrastructure. Covers serverless chat completions, image/video generation, fine-tuning, batch inference, evaluations, sandboxes, dedicated endpoints, and GPU clusters.

Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security

4 skills · 3 agents

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

Context window saver for 10 coding agents. Local and free: sandboxed code execution, FTS5 search, session continuity.

3 skills · 1 MCP server

PreToolUse hooks that keep several Claude Code sessions running on one machine from colliding. Blocks kills by program name (pkill node, taskkill /IM node.exe) and kills that reach another session's processes, dev servers on a port another session uses, heavy commands when RAM is low, git checkout, stash, add -A and commit -a in a tree another session works in, and whole-disk scans such as du -sh ~. Stops servers left by finished sessions. bulkhead scan replays the shell commands in your past transcripts against the guards, read-only, with nothing sent anywhere. Blocks return the reason and an alternative command to the agent; only the user can allow a blocked command, and a repository's own config can only make the guards stricter. It parses command strings and is not a sandbox. Node only, no dependencies.