Browse Skills

Woz Review is a deprecated alias for `/woz review`. Use it to invoke the woz skill’s review subcommand with the given arguments.

Decompile turns a function in a debugged binary into C-like pseudocode using angr. Use it to inspect code when you have an address, symbol, or the current instruction pointer.

Find OEP traces packed or protected PE executables to locate the original entry point and capture a debugger state snapshot. Use it when a binary needs unpacking, anti-debug evasion, or handoff for reconstruction and analysis.

Shellcode Analyzer loads a raw shellcode blob into x64dbg for unpacking, static review, and dynamic tracing. Use it when analyzing encoded or encrypted shellcode and identifying imports, anti-debugging, or payload behavior.

State Diff compares two debuggee snapshots and reports register and memory changes between them. Use it to see what executed, what memory was modified, and what the changes suggest.

Tracealyzer records x64dbg execution step-by-step into or over calls for a set count or stop condition, then analyzes the instruction log. Use it to inspect control flow, loops, and key instructions during debugging.

Vuln Hunter analyzes a paused program in x64dbg, maps imports and exports, and triages attack surface by input source. It then probes for memory, integer, and logic bugs and helps build proof-of-concept exploits.

YARA Signatures scans a state snapshot's memory dumps with YARA rules to find packers, crypto constants, anti-debug techniques, and malware-family markers. Use it when you need to classify code or inspect modules in a debuggee snapshot.

Analyze Default defines a read-only workflow for multi-round code analysis, evidence gathering, and convergence checks. Use it when you need a factual conclusion, root-cause assessment, or review of whether something is correct without changing files.

Api Verification generates archive-grade .http examples and .cjs automation scripts for API changes. Use it when validating endpoint behavior, contract fields, or regression checks in dev and fix workflows.

Audit Common enforces the shared gates used by all audit workflows, including G0 scale routing, profile freshness checks, and G1~G5 review dimensions. It is used before subtype-specific checks like TD, RQ, PE, RA, DA, and RL.

Audit Dimensions reviews AI instruction files and specs against 25 dimensions such as structure, content, routing, and markdown correctness. Use it when checking skills, instructions, agents, or rules documents for execution-ready issues.