Coordinate specialist agents to investigate suspicious activity in public GitHub repositories. Collect evidence from multiple sources, develop and test hypotheses, verify original records, and produce a report covering timelines, actors, and impact.
中文简介正在准备中。当前显示英语简介。
Validate vulnerability findings by checking code, reachable attack paths, observable test results, and realistic prerequisites. The workflow produces evidence-backed reports and assesses binary constraints for memory corruption issues before exploit development proceeds.
中文简介正在准备中。当前显示英语简介。
Observe running apps and binaries with Frida, a tool for inspecting programs during execution. Capture API calls, function activity, and script events in organized run folders across local, USB-connected, or remote targets.
中文简介正在准备中。当前显示英语简介。
Record function entry and exit in C/C++ programs, with separate logs for each thread. Convert those logs into a Perfetto timeline to inspect call depth, execution order, and activity across threads.
中文简介正在准备中。当前显示英语简介。
Add gcov coverage measurement to C/C++ projects and see which lines, branches, and functions tests execute. The skill covers Makefile and CMake settings, test execution, and text or HTML reports that help identify untested code.
中文简介正在准备中。当前显示英语简介。
Check whether specific source lines ran during tests using gcov coverage data, which records code execution. Inspect one or several lines and report execution counts, with exit codes distinguishing uncovered lines from errors.
中文简介正在准备中。当前显示英语简介。
Record and replay a program with rr to investigate crashes and AddressSanitizer memory errors. Step backward through execution, inspect variables and memory, and extract the sequence of operations leading to a failure.
中文简介正在准备中。当前显示英语简介。
Investigate GitHub security incidents by querying archived public activity with BigQuery. Recover recorded details of deleted issues and pull requests, identify the accounts involved, and reconstruct timelines to check claims about repository activity.
中文简介正在准备中。当前显示英语简介。
Retrieve code, diffs, patches, and author details from GitHub commits using their SHA identifiers. Useful for investigating changes removed by force pushes when the commit content remains accessible on GitHub.
中文简介正在准备中。当前显示英语简介。
Collect GitHub activity and local git history as evidence for investigations, then save, filter, and share it as JSON. The skill also supports recovering deleted content from archives and checking stored evidence against its original sources.
中文简介正在准备中。当前显示英语简介。
Search Wayback Machine archives for deleted GitHub files, issues, pull requests, and wiki pages. Recover available text and repository details from saved web pages to investigate a project's past state.
中文简介正在准备中。当前显示英语简介。
Understand how unfamiliar code works from a security perspective. The skill maps architecture, follows untrusted input through the code, and searches for similar vulnerability patterns, with file and line references to support static analysis and finding validation.
中文简介正在准备中。当前显示英语简介。
Review code that has not yet been checked by forming security hypotheses and testing them with analysis tools. The skill records evidence, checks whether affected code is reachable, searches for related patterns, and preserves review progress across sessions.
中文简介正在准备中。当前显示英语简介。