How do I install the Cyberchef skill?

Run npx skillmds@latest add aeondave/cyberchef in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Cyberchef safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cyberchef?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cyberchef free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under Apache-2.

Who published Cyberchef?

AeonDave (@aeondave) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cyberchef by aeondave — Agent Skill

Name: Cyberchef
Author: AeonDave

Cyberchef

Auth/lab ref: Web-based data transformation and crypto analysis workbench. For rapidly decoding layered encodings, transforming binary/text formats, prototyping crypto/decode pipelines, or sharing reproducible recipes.

AeonDave 756c4ee 3 files · 5.1 KB Updated Sep 17, 2026

File contents

CyberChef

CyberChef is ideal for rapid transformation pipelines: decode, inspect, branch, and iterate without writing throwaway scripts first.

Core use in crypto/reversing

Unwrap nested encodings (Base64/Hex/URL/gzip/rot/XOR).
Test candidate keys/IVs quickly for block/stream ciphers.
Analyze unknown blobs via Magic before custom code.
Export reproducible recipes through URL hash or saved JSON.

High-value workflow

Load input (text, hex dump, file).
Start with Magic and inspect suggestions.
Build explicit recipe chain (avoid blind overfitting).
Add breakpoints and step through each operation.
Export URL/recipe JSON for reproducibility and script handoff.

Deep-link format

CyberChef supports URL recipes:

https://gchq.github.io/CyberChef/#recipe=<Ops>&input=<Base64Input>

This is useful for teammate handoff and agent reproducibility.

Local/offline options

Browser app is client-side by design.
For isolated environments, run local Docker image and use local browser access.

Automation bridge

When recipe stabilizes and must be automated at scale:

Move from web recipe to CyberChef Node API (chef.bake) or to Python equivalents.
Keep operation order and arguments identical.

Browser interaction note

CyberChef is a web-first tool. If interactive browser steps are required and cannot be executed automatically in the current environment, request user-assisted interaction (e.g., upload input blob, verify candidate recipe output).

Resources

references/web-workflows.md — practical browser workflow, Magic usage, breakpoints, recipe sharing, and validation strategy.
references/node-api-handoff.md — converting web recipes into programmatic Node API (chef, Dish, bake) for agentic automation.

---name: cyberchefdescription: Auth/lab ref: Web-based data transformation and crypto analysis workbench. For rapidly decoding layered encodings, transforming binary/text formats, prototyping crypto/decode pipelines, or sharing reproducible recipes.license: Apache-2.0---# CyberChefCyberChef is ideal for **rapid transformation pipelines**: decode, inspect, branch, and iterate without writing throwaway scripts first.## Core use in crypto/reversing- Unwrap nested encodings (Base64/Hex/URL/gzip/rot/XOR).- Test candidate keys/IVs quickly for block/stream ciphers.- Analyze unknown blobs via `Magic` before custom code.- Export reproducible recipes through URL hash or saved JSON.## High-value workflow1. Load input (text, hex dump, file).2. Start with `Magic` and inspect suggestions.3. Build explicit recipe chain (avoid blind overfitting).4. Add breakpoints and step through each operation.5. Export URL/recipe JSON for reproducibility and script handoff.## Deep-link formatCyberChef supports URL recipes:```texthttps://gchq.github.io/CyberChef/#recipe=<Ops>&input=<Base64Input>```This is useful for teammate handoff and agent reproducibility.## Local/offline options- Browser app is client-side by design.- For isolated environments, run local Docker image and use local browser access.## Automation bridgeWhen recipe stabilizes and must be automated at scale:- Move from web recipe to CyberChef Node API (`chef.bake`) or to Python equivalents.- Keep operation order and arguments identical.## Browser interaction noteCyberChef is a web-first tool. If interactive browser steps are required and cannot be executed automatically in the current environment, request user-assisted interaction (e.g., upload input blob, verify candidate recipe output).## Resources- `references/web-workflows.md` — practical browser workflow, Magic usage, breakpoints, recipe sharing, and validation strategy.- `references/node-api-handoff.md` — converting web recipes into programmatic Node API (`chef`, `Dish`, `bake`) for agentic automation.

Frequently asked questions