Provides binary exploitation techniques for CTF challenges. Use when you already have a vulnerable native target or service and need to turn memory corruption or low-level primitives into code execution or privilege escalation, such as buffer overflows, format strings, heap bugs, ROP, ret2libc, shellcode, kernel exploitation, seccomp bypass, sandbox escape, or Windows/Linux exploit chains. Do not use it when the main blocker is understanding what the binary does; use reverse engineering first. Do not use it for pure web bugs, disk or packet forensics, or standalone crypto/math challenges.
- Stars
- 3,615
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 3 findings to review, highest severity high.
- Highest severity
- high
- Findings
- 3
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 3 findings to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (3)
high · 2
- high
Tells Claude to install unpinned packages (one_gadget, seccomp-tools)
SKILL.md:46 · skill_risk:S2
- high
Tells Claude to install unpinned packages (mcp-server-windbg)
tools-mcp.md:26 · skill_risk:S2
medium · 1
- medium
Tells Claude to install packages (pwntools==4.15.0, ROPgadget==7.7, ropper==1.13.13)
SKILL.md:20 · skill_risk:S3
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More security skills and plugins
ctf-reverseljagielloProvides reverse engineering techniques for CTF challenges. Use when the main job is to understand how a compiled, obfuscated, packed, or… Review findingsSecurityData & analytics3.6k
ai-ml-securityyaklangAI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model… High riskSecurityAI & agents2.6k
linux-privilege-escalationyaklangLinux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via SUID/SGID binaries,… High riskSecurity2.6k
linux-security-bypassyaklangLinux security mechanism bypass playbook. Use when facing restricted bash/rbash, read-only or noexec filesystems, AppArmor, SELinux,… High riskSecurity2.6k