Provides malware analysis and network traffic techniques for CTF challenges. Use when analyzing obfuscated scripts, malicious packages, custom crypto protocols, C2 traffic, PE/.NET binaries, RC4/AES encrypted communications, YARA rules, shellcode analysis, memory forensics for malware (Volatility malfind, process injection detection), anti-analysis techniques (VM/sandbox detection, timing evasion, API hashing, process injection, environment checks), or extracting malware configurations and indicators of compromise.
- Stars
- 3,615
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 2 findings to review, highest severity high.
- Highest severity
- high
- Findings
- 2
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 2 findings to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (2)
high · 2
- high
Tells Claude to install unpinned packages (yara-python, pefile, capstone, oletools, unicorn, pycryptodome)
SKILL.md:20 · skill_risk:S2
- high
Tells Claude to install unpinned packages (dissect.cobaltstrike)
c2-and-protocols.md:222 · skill_risk:S2
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More security skills and plugins
- ctf-miscljagielloProvides miscellaneous CTF challenge techniques for problems that do not cleanly fit the main categories. Use for encoding puzzles,… Review findingsSecurityImages, video & audio3.6k
- ctf-pwnljagielloProvides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to… Review findingsSecurityDocuments3.6k
- ctf-reverseljagielloProvides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or… Review findingsSecurityData & analytics3.6k
ai-ml-securityyaklangAI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model… High riskSecurityAI & agents2.6k