malware-analysis-claude-skills

In the author's own words, from each skill's SKILL.md.

• malware-analysis

  Orchestrate the complete malware analysis lifecycle across triage, dynamic analysis, detection engineering, and report writing. Use as the single entry point for any malware analysis task — routes to specialized sub-skills by file type and phase, carries findings between phases, and supports multi-sample batch workflows.

  SKILL.md on GitHub (opens in a new tab)

• detection-engineer

  Create detection rules and hunting queries from malware analysis findings. Use when you need to write Sigma rules for SIEM, Suricata rules for network IDS, defang IOCs for safe sharing, or convert analysis findings into actionable detection content for SOC teams and threat hunters.

  detection-engineer/SKILL.md on GitHub (opens in a new tab)

• malware-dynamic-analysis

  Behavioral analysis of a sample executed in an isolated VM. Use after triage when runtime behavior, C2 traffic, dropped files, persistence, or injection must be observed. Claude produces a tailored VM runbook from triage predictions, then parses the exported text evidence (Procmon CSV, Sysmon JSON/CSV, tshark output, autoruns, strings) on the host to reconstruct behavior and extract IOCs. The ana…

  malware-dynamic-analysis/SKILL.md on GitHub (opens in a new tab)

• malware-report-writer

  Create professional malware analysis reports for enterprise security teams and incident response. Use when you need to write, structure, or improve a malware analysis report, produce executive summaries, author YARA rules, or format IOCs and detection rules for professional delivery.

  malware-report-writer/SKILL.md on GitHub (opens in a new tab)

• malware-triage

  Rapid static assessment, classification, and prioritization of malware samples. Use for the first look at any unknown file — hashes, file type, packing, imports, strings, initial IOCs, threat level, and the decision on which deep-analysis phase comes next. Claude runs the static tooling on the host itself; the sample is never executed.

  malware-triage/SKILL.md on GitHub (opens in a new tab)

• specialized-file-analyzer

  Analyze specialized file types beyond standard PE executables - .NET assemblies, Office macros, PDFs, PowerShell scripts, JavaScript, archives, HTA files, disk images (ISO/IMG/VHD/VHDX), and Linux ELF binaries. Use when you encounter documents, scripts, disk images, or non-Windows executables that require format-specific analysis tools and techniques. Claude runs the extraction and deobfuscation…

  specialized-file-analyzer/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• Skill_Seekersby yusufkaraaslan Convert documentation websites, GitHub repositories, and PDFs into Claude AI skills with automatic conflict detection 15.2k stars · 25 skills
• prompt-masterby nidhinjs A Claude skill that writes the accurate prompts for any AI tool. Zero tokens or credits wasted. Full context and memory retention 14.5k stars · 1 skill
• Claude-Redby SnailSploit claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md fil… 7.5k stars · 30 skills
• Understand-Anythingby Egonex-AI Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about… 86.5k stars · 9 skills
• archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more. 84.1k stars · 2 skills
• oh-my-openagentby code-yeongyu OmO: Just type "mass ulw" keyword with your prompt. Now you are the master of graph engineering. 70.1k stars · 25 skills