Agent skills by SpecterOps

A skill your agent uses for all OpenHound collector work, including planning, graph schema, source collection, assets, lookup/preproc, registration, and validation.

SpecterOps/ConfigManBearPig

Generate a normalized UTC timeline and evidence-based narrative from Codex activity artifacts.

SpecterOps/skills

A skill your agent uses when the user wants to triage Windows COM proxy/hijack candidates by capturing HKCU\Software\Classes\CLSID\{...}\InProcServer32 NAME NOT FOUND lookups for a process, mapping…

SpecterOps/skills

Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree.

SpecterOps/ConfigManBearPig

Perform CWE-grounded security code reviews and precise weakness mapping using a locally derived MITRE CWE corpus, relationship graphs, mapping notes, detection methods, mitigations, and schema…

SpecterOps/skills

A skill your agent uses for Ghostwriter operation log entries from Codex, including config guidance, quick notes, evidence-backed entries, and guided oplog capture through the Ghostwriter MCP tools.

SpecterOps/skills

Parse nmap scan output and generate actionable recon notes. An agent skill from SpecterOps/skills.

SpecterOps/skills

Perform OSINT and external reconnaissance for approved targets.

SpecterOps/skills

Run in-scope network commands through a SOCKS5 tunnel with proxychains4, including tunnel readiness checks and evidence capture.

SpecterOps/skills

Generate a professional README.md for a project. An agent skill from SpecterOps/skills.

SpecterOps/skills

Scan repositories and codebases for exposed secrets, credentials, and sensitive data.

SpecterOps/skills

Fast topic research with source discovery, source quality evaluation, and concise synthesis.

SpecterOps/skills

Web application security testing workflow and checklist generation.

SpecterOps/skills

Use as the default router for generic BloodHound asks: check the BloodHound connection, verify MCP health, analyze BloodHound data, find or explain a path, inspect shortest paths, find a path to…

SpecterOps/skills

Apply a condensed version of the ISO C++ Core Guidelines to C++ design, implementation, refactoring, modernization, and code review.

SpecterOps/skills

A skill your agent uses when the user asks about Linux process injection, using ptrace for injection, LDPRELOAD injection, writing to procfs, remote access via processvmwritev, seccomp notify…

SpecterOps/skills

Provide macOS guidance for initial access using app bundles, installer packages, and disk images, including current Gatekeeper behavior and pkgbuild and hdiutil examples.

SpecterOps/skills

Repackage a newer Electron app into an older Squirrel-style delivery chain while injecting a main-process payload.

SpecterOps/skills

Perform adversarial Python security code reviews grounded in the OpenSSF Secure Coding Guide for Python.

SpecterOps/skills

Perform evidence-driven security code reviews across application repositories, services, libraries, and pull requests.

SpecterOps/skills

Security-focused code review of current git changes. An agent skill from SpecterOps/skills.

SpecterOps/skills

A skill your agent uses for Ghostwriter MCP setup, connection verification, project discovery, oplog discovery, and environment guidance in Codex.

SpecterOps/skills

Repository hygiene — prune merged/stale branches, detect orphans, repo health checks.

SpecterOps/skills

Complex git operations — merge conflict resolution, cherry-picks, rebases.

SpecterOps/skills

Pre-commit and pre-edit git checklist — staged diff code-review, macOS case renames, remote branch sync verification.

SpecterOps/skills

Add a source IP or CIDR to nftables using the working method from this repo session: live top-of-input insertion with nft -a verification first, then persistent config update and reload.

SpecterOps/skills

Scaffold a new Python project with a src layout, linting, and tests.

SpecterOps/skills

Scaffold a security tool project with CLI, logging, and target handling.

SpecterOps/skills

Perform SCCM reconnaissance and takeover prerequisite validation, including site-role mapping, provider and AdminService checks, site database separation checks, and relay-path prechecks.

SpecterOps/skills

Clone SCCMHunter into operating-tools and install it in a local Python virtual environment using the repository's documented setup flow.

SpecterOps/skills

Perform a security-focused review of current git changes. An agent skill from SpecterOps/skills.

SpecterOps/skills

Query Shodan for reconnaissance, target enrichment, and exposed service discovery.

SpecterOps/skills

Quick-invoke QA testing for a web app URL. An agent skill from SpecterOps/skills.

SpecterOps/skills

Performs security review of arbitrary Go packages, including libraries, frameworks, CLIs, HTTP and gRPC services, and backend applications.

SpecterOps/skills

Provides information on how to develop Ludus configuration files

SpecterOps/skills

Merge parsed timeline entries, apply MITRE tagging, and produce the final timeline outputs.

SpecterOps/skills

Draft believable copy for a credential-harvest landing page.

SpecterOps/skills

Audit a local downloaded Electron package/path or a named Electron app and produce a deep worksheet for patchability, entrypoints, and install-chain behavior.

SpecterOps/skills

Find practical Electron apps that are likely patchable with the same Electron-plus-Squirrel method.

SpecterOps/skills

Preserve post-install execution and background residency for Electron apps in Squirrel-style delivery chains.

SpecterOps/skills