Productivity

purpleailab Skill

Depth-first RE investigation loop for a single binary or function cluster: decompile→rename→retype→comment→re-read, with context-rot guards and on-task checks. Use when triage has already identified the interesting area and the goal is full understanding: what does function X do, identify cryptographic primitives, locate C2 protocol, recover data structures. Triggers on: 'deep analysis', 'understand function', 'recover struct', 'crypto identification', 'C2 protocol', 'reverse this binary fully', 'what does this function do'.

purpleailab Skill

Fast malware triage workflow — static (PE/Mach-O/ELF format, strings, imports, signatures, entropy/packed indicators), dynamic (sandbox with INetSim, Wireshark, Process Monitor, Procmon, time-shift), unpack (Scylla/PE-sieve), then full RE with Ghidra/IDA. Designed for ≤15 min initial verdict.

netvar1337 Skill

BYOVD (Bring Your Own Vulnerable Driver) attack workflow: identify vulnerable signed drivers, map IOCTLs, arbitrary physical/virtual memory, MSR R/W, kernel code exec. Use for BYOVD, vulnerable .sys abuse, signed-driver primitives. Do NOT use for writing a new WDM/KMDF driver from scratch (kernel-dev) or generic exploit-dev without a driver primitive.

netvar1337 Skill

Use when asked to resolve one tractable TODO or XXX comment from a codebase; selects, implements, and verifies a real fix.

netvar1337 Skill

Use when designing, writing, reviewing, debugging, or hardening Windows WDM/KMDF drivers, IRP and IOCTL paths, PnP/power lifecycles, queues, cancellation, kernel memory, callbacks, or version-pinned ring-0 research. Covers WDK, HVCI, Driver Verifier, KD triage, manual mapping, APC/VAD/DKOM research, and safe teardown; route BYOVD to byovd and user-mode exploitation to exploit-dev.

netvar1337 Bundle

Thin PRIMARY for CTF / AWD / range multi-type orchestration. Hands off to the sidecar CTF-Sandbox-Orchestrator. Use when the user says CTF, AWD, range, or competition task and no more specific pwn/APK/IDA route already won.

netvar1337 Bundle

Solve CTF binary exploitation challenges by discovering and exploiting memory corruption vulnerabilities to read flags. Use for buffer overflows, format strings, heap exploits, ROP challenges, or any pwn/exploitation task.

netvar1337 Bundle

Hypervisor development workflow for Intel VT-x/AMD-V hypervisors with EPT hooks, VMCS manipulation, VMEXIT filtering, and stealth. Invoke with /hypervisor-dev or when the task involves hypervisor or EPT development.

netvar1337 Bundle

Use when the operator asks to execute, implement, investigate, automate, or fully handle a task. Convert the request into a tight execution contract, load the narrowest matching skill, act rather than narrate, and return verified results.

netvar1337 Bundle

Reverse engineering workflow for binaries, malware, firmware, protocols, and anti-cheat systems. Covers static analysis, dynamic analysis, decompilation, binary instrumentation, and protocol RE. Invoke with /reverse-engineering or when the task involves RE work.

netvar1337 Skill

Reverse engineering workflow for binaries, malware, firmware, protocols, and anti-cheat systems. Covers static analysis, dynamic analysis, decompilation, binary instrumentation, and protocol RE. Invoke with /reverse-engineering or when the task involves RE work.

netvar1337 Bundle

Use for authorized multi-stage attack-path planning and orchestration when a task spans reconnaissance, initial access, privilege escalation, lateral movement, or impact assessment. Route single-stage tasks directly to their specialist skill.

ur-grue Skill

Generate a beat setup guide for a journalist starting a new coverage area: source map, document inventory, recurring calendar, key contacts, institutional landscape, and a 30-day ramp-up plan.

ur-grue Bundle

Writes a tight 60-second verbal pitch for a media project — film, series, podcast, or channel — optimised for delivery in a first meeting, corridor conversation, or festival networking moment.

ur-grue Bundle

Drafts a professional, personalised pitch email to a potential interviewee or expert source, clearly explaining why you are reaching out, what the story is about, and what you are asking them to do.

ur-grue Bundle

Builds a realistic 4-week content calendar for a YouTube channel, with specific video topics, formats, publishing dates, and strategic notes for each upload.

ur-grue Bundle

Writes a cold outreach email to a broadcaster, distributor, or platform executive introducing a project for the first time and requesting a meeting or a read of supporting materials.

ur-grue Bundle

Writes a professional, strategically crafted follow-up email to a source or interview subject who has not responded to an initial outreach, calibrated to the relationship, the urgency, and how many times you have already followed up.

tangledgroup Bundle

Fast Python package and project manager written in Rust. Replaces pip, pip-tools, pipx, poetry, pyenv, virtualenv, twine, and more. Use when managing Python dependencies, creating virtual environments, running tools with uvx (pipx alternative), installing Python versions, building/publishing packages, or any Python project setup task.

tangledgroup Bundle

Phase/task based workflow system with PLAN.md as single source of truth. Use when tackling projects that require structured iteration through Planning, Analysis, Design, Implementation, Testing, Deployment, Maintenance, etc phases with clear dependency graphs.

netvar1337 Bundle

Provides reverse engineering techniques. Use when the main job is to understand how a compiled, obfuscated, packed, or virtualized target works before exploiting or solving it, including binaries, APKs, WASM, firmware, custom VMs, bytecode, malware-like loaders, and anti-debug or anti-analysis logic. Do not use it when the vulnerability is already understood and the remaining task is exploitation; use pwn instead. Do not use it for pure web workflows, log or disk forensics, or standalone crypto problems unless reversing the implementation is the real blocker.

wufufu770 Skill

"Hunt Missing/Weak Rate Limiting — login brute force, OTP/2FA brute force (10^6 keyspace), password-reset-token brute, credential stuffing, username/email enumeration via error-string / status-code / timing differences, weak password policy, missing CAPTCHA (CAPTCHA token replay / single-use / concurrency-window bypass specifics → hunt-captcha-bypass), IP-based rate-limit bypass via X-Forwarded-Fo

ur-grue Bundle

Drafts a brief, professionally warm thank-you email to send to an interview subject after a recorded or on-the-record conversation, keeping the relationship open for future contact.

ur-grue Bundle

Writes a sales outreach email to a film or content distributor introducing a completed project for acquisition consideration, including key commercial information an acquisitions team needs to evaluate the opportunity.

ur-grue Bundle

Writes a professional follow-up email to a journalist, editor, or media contact who has not responded to a previous pitch or request, calibrated to the relationship stage, urgency, and number of prior attempts.

ur-grue Bundle

Writes a targeted pitch email to a specific journalist offering an exclusive, interview, or story angle, matched to their known beat and written in the brief, direct register that working journalists respond to.

ur-grue Bundle

Writes a brief, genuine thank-you email to a journalist or media contact after coverage, an interview, or a professional favour, reinforcing the relationship without being transactional.

ur-grue Bundle

Writes a short, high-click newsletter teaser for a published article — including subject line options, preview text, and the teaser body — ready to paste into an email newsletter platform.

ntizar Bundle

Flujo obligatorio de spec antes de código. Cuando el usuario pide un proyecto nuevo o feature grande, el agente hace preguntas estructuradas, propone arquitectura modular, y genera SPEC.md antes de escribir una sola línea de código.

ntizar Skill

Procedimiento seguro para auditar y refactorizar proyectos existentes sin romperlos. Capturado del incidente MasterFit v3 donde la extracción de JS a archivo separado eliminó los CDN de Chart.js y Three.js, rompiendo todo el dashboard.

marielynneblock Skill

[TODO] Define the specific workflow this skill standardises, including default libraries, quality checks, and expected deliverables.

marielynneblock Skill

[TODO] Define the specific workflow this skill standardises, including default libraries, quality checks, and expected deliverables.

marielynneblock Skill

Produces a structured process map with swim lanes, task nodes, decision diamonds, and handoff arrows. Output is in **Mermaid** flowchart notation (renderable in GitHub, VS Code, Confluence, and Miro) or **BPMN-lite** text when a formal notation is required.

marielynneblock Skill

Covers the full git workflow for a software project: branch naming conventions, commit message authoring (Conventional Commits standard), PR description templates, and merge strategy advice. It produces ready-to-use git artefacts, not generic advice.

marielynneblock Bundle

Comprehensive toolkit for survival analysis and time-to-event modelling in Python using scikit-survival. Use this skill when working with censored survival data, performing time-to-event analysis, fitting Cox models, Random Survival Forests, Gradient Boosting models, or Survival SVMs, evaluating survival predictions with concordance index or Brier score, handling competing risks, or implementing any survival analysis workflow with the scikit-survival library.

marielynneblock Skill

Set up a GitHub Copilot customisation starter pack for a new project based on its technology stack, including instructions, skills, agents, and optional setup workflow files.