Skills for Real Engineers. Straight from my .agents directory.
39 skills
ctf-malware
Agent skill from
Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and indicators of compromise.
How to install ctf-malware
install ctf-malware
# install the ctf-skills pack with the skills CLI
npx skills add ljagiello/ctf-skills# or add only this skill to Claude Code: copy the folder
ctf-malware/
# into
~/.claude/skills/ctf-malware/ (all projects)
.claude/skills/ctf-malware/ (one project)
1# CTF Malware & Network Analysis23Quick reference for malware analysis CTF challenges. Each technique has a one-liner here; see supporting files for full details with code.45## Prerequisites67**Python packages (all platforms):**8```bash9pip install yara-python pefile capstone oletools unicorn pycryptodome \10 volatility3 dissect.cobaltstrike11```1213**Linux (apt):**14```bash15apt install strace ltrace tshark binwalk binutils16```1718**macOS (Homebrew):**19```bash20brew install wireshark binwalk binutils ghidra21```2223**Manual install:**24- dnSpy — [GitHub](https://github.com/dnSpy/dnSpy), .NET decompiler (Windows)2526**MCP servers (optional):** IDA Pro MCP / Ghidra MCP (unpacking, config extraction), WinDbg MCP ([svnscha/mcp-windbg](https://github.com/svnscha/mcp-windbg)) for dynamic analysis, JADX MCP for Android — see [tools-mcp.md](tools-mcp.md). Run malware only in an isolated, disposable VM.2728## Additional Resources29…
Excerpt shown under the repository's MIT license.
More skills in ctf-skills
Keep exploring
Similar skill repositories
Public repository for Agent Skills
20 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills
Production-grade engineering skills for AI coding agents.
CCCXCU25 skills
The open-source app everyone uses to manage agents at work
CCCX33 skills
The design vocabulary for your coding agent. Steer with polish and bolder, review with critique and audit, catch AI slop before it ships.
2 skills