Analyze disk images with Autopsy and The Sleuth Kit to recover deleted files, search content, and examine recorded activity. Build investigation timelines and visual reports that help stakeholders understand evidence from one or multiple disk images.
- Recovering deleted files from a disk image
- Searching evidence for confidential files and keywords
- Reconstructing activity around a malware infection
mukul975/Anthropic-Cybersecurity-Skills☆ 34.8KUpdated Aug 31, 2026
Perform comprehensive forensic analysis of disk images using Autopsy to recover files, examine artifacts, and build investigation timelines.
The English summary is being prepared. Showing the original description.
andycungkrinx91/konoha☆ 9Updated Oct 19, 2026
Perform comprehensive forensic analysis of disk images using Autopsy to recover files, examine artifacts, and build investigation timelines.
The English summary is being prepared. Showing the original description.
micsapp/micstec-skills☆ 4Updated Mar 20, 2026
Perform comprehensive forensic analysis of disk images using Autopsy to recover files, examine artifacts, and build investigation timelines.
The English summary is being prepared. Showing the original description.
aniket2348823/Vul-Agent☆ 2Updated Jun 9, 2026
Post-mortem analysis when a client churns. Takes client history, engagement data, support tickets, usage logs, and exit feedback to produce a comprehensive churn autopsy with root cause classification, timeline of decline, and preventive measures.
The English summary is being prepared. Showing the original description.
OneWave-AI/claude-skills☆ 358Updated Oct 20, 2026
Produces a deep, honest peer-review of how someone uses Claude Code by statistically analyzing their local session data (~/.claude/usage-data/ and ~/.claude/projects/). Trigger whenever the user asks to review, analyze, audit, or critique their own Claude Code usage, workflow, habits, or skill level — including phrases like "analyze my cc usage", "review my cc sessions", "peer review my cc workflow", "deeper than /insights", or any ask for an honest audit of their AI workflow. Also covers portfolio/hiring-manager framings (e.g. "portfolio for Anthropic/OpenAI/xAI"), but ALWAYS ask the user in Step 0 which version to build (self / hr / both) before running — never silently produce an HR report, because that version goes to outsiders and needs explicit privacy setup. The HTML report is laid out ledger-first for SELF (opening band, output/team/leak/trend ledgers, then peer review, 9-dim scoring, try-this-week, case study, claim-indexed evidence). The HR variant is a recruiter version v1: identity card, earned badges (threshold-based, earned-only), allowlist-filtered output ledger, one case study, and a methodology & scope disclosure — no scores, no peer-review memo, no charts.
The English summary is being prepared. Showing the original description.
Imbad0202/cc-user-autopsy☆ 11Updated Oct 10, 2026
Disk imaj forensics — The Sleuth Kit (TSK), Autopsy, deleted file recovery, MFT/inode analizi, slack space, EWF/RAW imajlar
The English summary is being prepared. Showing the original description.
MustafaKemal0146/fetih☆ 5Updated Oct 11, 2026
Inspect Python and JavaScript dependency files for missing version constraints, duplicate entries, conflicting exact versions, and outdated Python compatibility packages. Get plain-language explanations and focused repair suggestions, with offline checks by default.
- Check dependency files before investigating installation failures
- Find outdated Python compatibility packages
- Review duplicate entries and conflicting exact versions
Shubhamsaboo/awesome-llm-apps☆ 142.4KUpdated Oct 19, 2026
Investigate memory dumps, disk records, and captured network traffic while preserving evidence. The skill guides timeline reconstruction and examination of system traces to identify suspicious activity and produce findings that others can review.
- Preserve evidence before starting an incident investigation
- Inspect processes and connections in memory dumps
- Build timelines from event logs and execution traces
zhaoxuya520/reverse-skill☆ 42.8KUpdated Sep 22, 2026
Use for VidSeeds MCP analytics and research - YouTube analytics, channel intelligence, video autopsy, outliers, competitors, trending/breakout discovery, keyword research, comment sentiment, and best-practices tools. Outcomes only; not internal scoring details.
The English summary is being prepared. Showing the original description.
hashgraph-online/awesome-codex-plugins☆ 1.4KUpdated Oct 20, 2026
When a solution seems impossible and the path forward is blocked. Refuses to take no for an answer: classifies what kind of "no" you hit, then runs lateral-thinking techniques (assumption autopsy, inversion, first principles, constraint toggling, analogical transfer, and more) until the wall cracks or is proven load-bearing. Generates at least 10 angles before evaluating any. AGENTS: use this on yourself when an API doesn't support what you need, an approach has failed twice, or a "that's not possible" sentence is forming — run the fast path BEFORE reporting a dead end. Archives walls to ~/.config/makerskills/unstuck/archive/. Sits upstream of decide. Triggers on "/unstuck," "I'm stuck," "this seems impossible," "we hit a wall," "there's no way to," "they said no," "dead end," "out of options," "I've tried everything," "work around this."
The English summary is being prepared. Showing the original description.
coreyhaines31/makerskills☆ 866Updated Oct 9, 2026
Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and CTF challenges. Use when the user mentions 'disk forensics,' 'forensic analysis,' 'disk image,' 'file carving,' 'deleted files,' 'evidence recovery,' 'timeline analysis,' 'memory forensics,' 'volatility,' 'autopsy,' 'sleuthkit,' 'plaso,' 'log2timeline,' 'artifact analysis,' 'chain of custody,' or needs to examine a forensic image.
The English summary is being prepared. Showing the original description.
briiirussell/cybersecurity-skills☆ 426Updated May 27, 2026
Full codebase health assessment. Use when diagnosing project health or starting a rescue workflow on legacy code — OR when evaluating an external GitHub repo for dependency / fork / contribution decisions (--external mode). Analyzes complexity, dependencies, dead code, tech debt, and git hotspots. Produces a health score and rescue plan.
The English summary is being prepared. Showing the original description.
Rune-kit/rune☆ 86Updated Aug 16, 2026
Legacy refactoring orchestrator. Use when user says 'refactor', 'modernize', 'clean up this mess', 'rescue', or when dealing with old/messy/legacy code. Multi-session workflow — autopsy, safety net, incremental surgery, progress tracking.
The English summary is being prepared. Showing the original description.
Rune-kit/rune☆ 86Updated Aug 16, 2026
Comprehensive project audit — security, dependencies, code quality, architecture, performance, infra, docs, and mesh analytics. Use when needing a full 8-dimension health-score snapshot before a major release, M&A diligence, or quarterly review. Delegates to specialist skills (sentinel, dependency-doctor, perf, autopsy, etc.).
The English summary is being prepared. Showing the original description.
Rune-kit/rune☆ 86Updated Aug 16, 2026
Decide what a papercut reel should be. Picks the topic, one familiar format, the audience level, the comment-keyword funnel and caption, studies competitor reels, and runs the post-publish autopsy. Use before any hook or script, or when reviewing how a posted reel did.
The English summary is being prepared. Showing the original description.
0xS4N4TG/papercut-explainer☆ 83Updated Oct 17, 2026
Digital forensics and incident response triage skill for disk, memory, network, cloud, and endpoint artifacts. Covers Volatility 3, Velociraptor, KAPE, Plaso, Autopsy, Chainsaw, Hayabusa, Zeek, Arkime, EVTX, AWS/Azure/GCP audit logs, and timeline reconstruction. Use to extract IOCs, build incident timelines, and produce defensible analyst reports.
The English summary is being prepared. Showing the original description.
Garyson26/Trident-SecOps-Skills☆ 28Updated Sep 30, 2026
Use when a task needs the judgment of a Coroner or medicolegal death investigator — determining whether a death is reportable/jurisdictional, distinguishing cause of death from manner of death, estimating a postmortem interval from scene findings, deciding whether an autopsy or toxicology screen is warranted, or completing a death certificate under scrutiny.
The English summary is being prepared. Showing the original description.
wonsukchoi/domain-experts☆ 22Updated Oct 19, 2026