Skill collection
SpecterOps/skills agent skills
- skills
- 38
- GitHub stars
- 702
GitHub description: “A marketplace for LLM skills”
- Stars
- 702 (79 forks)
- Licence
- Apache-2.0
- Last push
- Sep 2026
- Created
- Feb 2026
Install all skills
npx skills add SpecterOps/skillsAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in SpecterOps/skills, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Generate a normalized UTC timeline and evidence-based narrative from Codex activity artifacts. | SpecterOps/ | 702 | — | ~805 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 2 | A skill your agent uses when the user wants to triage Windows COM proxy/hijack candidates by capturing HKCU\Software\Classes\CLSID\{...}\InProcServer32 NAME NOT FOUND lookups for a process, mapping… | SpecterOps/ | 702 | — | ~1.5k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 3 | Perform CWE-grounded security code reviews and precise weakness mapping using a locally derived MITRE CWE corpus, relationship graphs, mapping notes, detection methods, mitigations, and schema… | SpecterOps/ | 702 | — | ~2.4k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 4 | A skill your agent uses for Ghostwriter operation log entries from Codex, including config guidance, quick notes, evidence-backed entries, and guided oplog capture through the Ghostwriter MCP tools. | SpecterOps/ | 702 | — | ~665 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 5 | Parse nmap scan output and generate actionable recon notes. An agent skill from SpecterOps/skills. | SpecterOps/ | 702 | — | ~738 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 6 | Perform OSINT and external reconnaissance for approved targets. | SpecterOps/ | 702 | — | ~813 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 7 | Run in-scope network commands through a SOCKS5 tunnel with proxychains4, including tunnel readiness checks and evidence capture. | SpecterOps/ | 702 | — | ~826 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 8 | Generate a professional README.md for a project. An agent skill from SpecterOps/skills. | SpecterOps/ | 702 | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 9 | Scan repositories and codebases for exposed secrets, credentials, and sensitive data. | SpecterOps/ | 702 | — | ~948 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 10 | Fast topic research with source discovery, source quality evaluation, and concise synthesis. | SpecterOps/ | 702 | — | ~590 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 11 | Web application security testing workflow and checklist generation. | SpecterOps/ | 702 | — | ~1k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 12 | Use as the default router for generic BloodHound asks: check the BloodHound connection, verify MCP health, analyze BloodHound data, find or explain a path, inspect shortest paths, find a path to… | SpecterOps/ | 702 | — | ~1.4k | Automated safety check: Pass | MIT | 14 days ago |
| 13 | Apply a condensed version of the ISO C++ Core Guidelines to C++ design, implementation, refactoring, modernization, and code review. | SpecterOps/ | 702 | — | ~500 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 14 | A skill your agent uses when the user asks about Linux process injection, using ptrace for injection, LDPRELOAD injection, writing to procfs, remote access via processvmwritev, seccomp notify… | SpecterOps/ | 702 | — | ~706 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 15 | Provide macOS guidance for initial access using app bundles, installer packages, and disk images, including current Gatekeeper behavior and pkgbuild and hdiutil examples. | SpecterOps/ | 702 | — | ~588 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 16 | Repackage a newer Electron app into an older Squirrel-style delivery chain while injecting a main-process payload. | SpecterOps/ | 702 | — | ~450 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 17 | Perform adversarial Python security code reviews grounded in the OpenSSF Secure Coding Guide for Python. | SpecterOps/ | 702 | — | ~2.3k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 18 | Perform evidence-driven security code reviews across application repositories, services, libraries, and pull requests. | SpecterOps/ | 702 | — | ~2.3k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 19 | 19.Code Review Security-focused code review of current git changes. An agent skill from SpecterOps/skills. | SpecterOps/ | 702 | — | ~609 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 20 | A skill your agent uses for Ghostwriter MCP setup, connection verification, project discovery, oplog discovery, and environment guidance in Codex. | SpecterOps/ | 702 | — | ~487 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 21 | 21.Git Cleanup Repository hygiene — prune merged/stale branches, detect orphans, repo health checks. | SpecterOps/ | 702 | — | ~1.1k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 22 | 22.Git Merge Complex git operations — merge conflict resolution, cherry-picks, rebases. | SpecterOps/ | 702 | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 23 | Pre-commit and pre-edit git checklist — staged diff code-review, macOS case renames, remote branch sync verification. | SpecterOps/ | 702 | — | ~578 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 24 | Add a source IP or CIDR to nftables using the working method from this repo session: live top-of-input insertion with nft -a verification first, then persistent config update and reload. | SpecterOps/ | 702 | — | ~1.5k | Automated safety check: Notes | Apache-2.0 | 14 days ago |
| 25 | Scaffold a new Python project with a src layout, linting, and tests. | SpecterOps/ | 702 | — | ~664 | Automated safety check: Notes | Apache-2.0 | 14 days ago |
| 26 | Scaffold a security tool project with CLI, logging, and target handling. | SpecterOps/ | 702 | — | ~788 | Automated safety check: Notes | Apache-2.0 | 14 days ago |
| 27 | 27.Sccm Recon Perform SCCM reconnaissance and takeover prerequisite validation, including site-role mapping, provider and AdminService checks, site database separation checks, and relay-path prechecks. | SpecterOps/ | 702 | — | ~1.8k | Automated safety check: Notes | Apache-2.0 | 14 days ago |
| 28 | Clone SCCMHunter into operating-tools and install it in a local Python virtual environment using the repository's documented setup flow. | SpecterOps/ | 702 | — | ~732 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 29 | Perform a security-focused review of current git changes. An agent skill from SpecterOps/skills. | SpecterOps/ | 702 | — | ~556 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 30 | 30.Shodan Query Shodan for reconnaissance, target enrichment, and exposed service discovery. | SpecterOps/ | 702 | — | ~2k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 31 | 31.Webapp QA Quick-invoke QA testing for a web app URL. An agent skill from SpecterOps/skills. | SpecterOps/ | 702 | — | ~506 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 32 | 32.Go Review Performs security review of arbitrary Go packages, including libraries, frameworks, CLIs, HTTP and gRPC services, and backend applications. | SpecterOps/ | 702 | — | ~2.1k | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 33 | Provides information on how to develop Ludus configuration files | SpecterOps/ | 702 | — | ~1.1k | Automated safety check: Pass | MIT | 14 days ago |
| 34 | Merge parsed timeline entries, apply MITRE tagging, and produce the final timeline outputs. | SpecterOps/ | 702 | — | ~456 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 35 | Draft believable copy for a credential-harvest landing page. | SpecterOps/ | 702 | — | ~368 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 36 | Audit a local downloaded Electron package/path or a named Electron app and produce a deep worksheet for patchability, entrypoints, and install-chain behavior. | SpecterOps/ | 702 | — | ~338 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 37 | Find practical Electron apps that are likely patchable with the same Electron-plus-Squirrel method. | SpecterOps/ | 702 | — | ~287 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
| 38 | Preserve post-install execution and background residency for Electron apps in Squirrel-style delivery chains. | SpecterOps/ | 702 | — | ~358 | Automated safety check: Pass | Apache-2.0 | 14 days ago |
Questions, answered from the data.
What is the best skill in SpecterOps/skills?
Codex Activity Report from SpecterOps/skills ranks first of the 38 skills in SpecterOps/skills listed here, with the highest score: its repository has 702 GitHub stars, its SKILL.md loads about 805 tokens and it passes the automated safety check with no findings. Next come Com Proxy Triage and Cwe Code Review.
Are the skills in SpecterOps/skills official?
None yet. All 38 skills in SpecterOps/skills listed here come from community repositories; a skill counts as official when the product's own GitHub organization publishes it.
How do I install all skills from SpecterOps/skills?
Run npx skills add SpecterOps/skills in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.