Agent skill

Network Packet Lab

by mingchen666 in mingchen666/Reviva

A skill your agent uses whenever the user asks about Wireshark, tcpdump, packet capture, pcap analysis, HTTP/DNS/TCP/DHCP/TLS capture interpretation, network lab reports, protocol fields observed in…

No licenceAuto-check passedSecurity

Install Network Packet Lab

skills CLI
$ npx skills add mingchen666/Reviva --skill network-packet-lab -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install mingchen666/Reviva network-packet-lab --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/mingchen666/Reviva.git skills-src && mkdir -p .claude/skills && cp -r skills-src/electron/builtin-assets/skills/network-packet-lab .claude/skills/network-packet-lab && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
network-packet-lab
GitHub stars
236
Token cost
~657 tokens
SKILL.md length
254 words
Files
2
Skills in repo
54
Repo updated
First seen
Licence
None found

At a glance

A skill your agent uses whenever the user asks about Wireshark, tcpdump, packet capture, pcap analysis, HTTP/DNS/TCP/DHCP/TLS capture interpretation, network lab reports, protocol fields observed in…

  • Works in 6 steps: Identify the protocol and layer. → Extract key fields: endpoints, ports,… → Reconstruct the timeline. → …
  • The user asks about Wireshark
  • SKILL.md covers When To Use, Safety Boundary, Capture Analysis Workflow and Lab Report Template, plus 2 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Network Packet Lab is an agent skill from mingchen666/Reviva. Use this skill whenever the user asks about Wireshark, tcpdump, packet capture, pcap analysis, HTTP/DNS/TCP/DHCP/TLS capture interpretation, network lab reports, protocol fields observed in packets, or troubleshooting packet flows for learning and coursework.

Its SKILL.md is about 660 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `config.json`).

It sits in Security, covering Network security. It works with Wireshark. The repository describes itself as: Local-first AI learning workspace — ask, note, review and create around your own materials. Wiki KB, Agents, Skills, creation tools.Private NotebookLM Alternative.AI….

When your agent uses it

  • The user asks about Wireshark
  • HTTP/DNS/TCP/DHCP/TLS capture interpretation
  • Network lab reports
  • Protocol fields observed in packets

Example prompts

  • “/network-packet-lab”

Requirements

  • Pre-approved tools (allowed-tools): file_read, file_write, document_read, kb_search

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. Identify the protocol and layer.
  2. Extract key fields: endpoints, ports, sequence/ack numbers, flags, TTL, IDs, query names, status codes, certificates, or options.
  3. Reconstruct the timeline.
  4. Explain what each packet proves.
  5. Tie the observation back to the concept.
  6. Produce a lab report or visual summary if useful.

What it can do on your machine

Read from SKILL.md and the folder at commit 24bde40. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • file_read
    • file_write
    • document_read
    • kb_search

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Network Packet Lab loads about 657 tokens when it runs. Until then it costs about 70 tokens; SKILL.md has 254 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~70
When it runs · the whole SKILL.md, loaded when a task matches
~657

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 254 words (~657 tokens).

“Guide safe, educational packet capture labs and capture interpretation. Focus on what the packet shows, why it appears, and how it proves the protocol mechanism.”

— opening of SKILL.md by mingchen666
name
network-packet-lab
allowed-tools
file_read, file_write, document_read, kb_search

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in electron/builtin-assets/skills/network-packet-lab of mingchen666/Reviva.

  • SKILL.md
  • config.json

Open the folder on GitHubat commit 24bde40

Compare with similar skills

Network Packet Lab next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Network Packet Lab compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Network Packet Lab this skillmingchen666/Reviva236—~657Automated safety check: PassNone
IotnetBrownFineSecurity/iothackbot8581 repos~1kAutomated safety check: NotesMIT
Wireshark Analysiszebbern/claude-code-guide4.6k7 repos~3kAutomated safety check: PassMIT
Netzhinkgit/embeddedskills731—~1.1kAutomated safety check: PassMIT
Performing Network Forensics With Wiresharkmukul975/Anthropic-Cybersecurity-Skills34k—~3kAutomated safety check: NotesApache-2.0
Performing Network Traffic Analysis With Zeekmukul975/Anthropic-Cybersecurity-Skills34k—~3.2kAutomated safety check: NotesApache-2.0

Similar skills

  • Iotnet

    BrownFineSecurity/iothackbot

    IoT network traffic analyzer for detecting IoT protocols and identifying security vulnerabilities in network communications.

    858 GitHub starsUsed in 1 repo~1k tokens
    SecurityAuto-check: notes
  • Wireshark Analysis

    zebbern/claude-code-guide

    This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network…

    4.6k GitHub starsUsed in 7 repos~3k tokens
    SecurityAuto-check passed
  • Net

    zhinkgit/embeddedskills

    嵌入式网络调试工具,用于发现接口、抓包、分析 pcap/pcapng、做连通性测试、端口扫描和流量统计. An agent skill from zhinkgit/embeddedskills.

    731 GitHub stars~1.1k tokensUpdated 1 mo ago
    SecurityAuto-check passed
  • Performing Network Forensics With Wireshark

    mukul975/Anthropic-Cybersecurity-Skills

    Capture and analyze network traffic using Wireshark and tshark to reconstruct network events from PCAP/PCAPNG files, extract transferred files and credentials, and identify command-and-control…

    34k GitHub stars~3k tokensUpdated 1 mo ago
    SecurityAuto-check: notes
  • Performing Network Traffic Analysis With Zeek

    mukul975/Anthropic-Cybersecurity-Skills

    Deploy Zeek (formerly Bro) as a passive network security monitor to generate structured logs of protocol metadata (HTTP, DNS, TLS, SSH, SMTP, FTP, and more), write custom detection scripts, and…

    34k GitHub stars~3.2k tokensUpdated 1 mo ago
    SecurityAuto-check: notes
  • Analyzing Network Traffic With Wireshark

    mukul975/Anthropic-Cybersecurity-Skills

    Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns, diagnose protocol issues, extract artifacts, and support incident response investigations…

    34k GitHub stars~2.6k tokensUpdated 1 mo ago
    SecurityAuto-check passed

More from mingchen666/Reviva

All 54 skills in this repo
  • Geometry Assistant

    mingchen666/Reviva

    A skill your agent uses when rendering high-school solid-geometry problem data into an interactive 3D standalone HTML artifact with known-condition highlights, step-by-step constructions, faces…

    236 GitHub stars~1.2k tokensUpdated 16 days ago
    Auto-check passed
  • Bili Note

    mingchen666/Reviva

    Turn Bilibili videos that are already registered and parsed in MindSpace, or Bilibili opus/article posts, into evidence-linked Markdown learning notes.

    236 GitHub stars~1.1k tokensUpdated 16 days ago
    Auto-check passed
  • Study Companion En

    mingchen666/Reviva

    General study companion for learning, review, exam prep, exam-point analysis, syllabus/exam-outline interpretation, finals speedrun teaching, concept explanation, problem solving, homework coaching…

    236 GitHub stars~5.7k tokensUpdated 16 days ago
    Auto-check passed
  • Design classroom management and differentiated support plans for real teaching constraints.

    236 GitHub stars~1k tokensUpdated 16 days ago
    Auto-check passed
  • Design and generate concept-first learning artifacts: concept cards, visual explanations, diagrams, interactive HTML demos, Manim/math visualizations, matplotlib scientific plots, misconception…

    236 GitHub stars~2.8k tokensUpdated 16 days ago
    Auto-check passed
  • Cs Course Learning

    mingchen666/Reviva

    A skill your agent uses whenever the user is learning computer science core courses, 408, data structures, computer organization, operating systems, computer networks, algorithms, course finals…

    236 GitHub stars~1.2k tokensUpdated 16 days ago
    Auto-check passed

Works with

Questions about Network Packet Lab

What does Network Packet Lab do?

A skill your agent uses whenever the user asks about Wireshark, tcpdump, packet capture, pcap analysis, HTTP/DNS/TCP/DHCP/TLS capture interpretation, network lab reports, protocol fields observed in…. Network Packet Lab is an agent skill from mingchen666/Reviva. Use this skill whenever the user asks about Wireshark, tcpdump, packet capture, pcap analysis, HTTP/DNS/TCP/DHCP/TLS capture interpretation, network lab reports, protocol fields observed in packets, or troubleshooting packet flows for learning and coursework.

When should I use Network Packet Lab?

Network Packet Lab fits situations like: the user asks about Wireshark; HTTP/DNS/TCP/DHCP/TLS capture interpretation; network lab reports; protocol fields observed in packets.

How do I install Network Packet Lab in Claude Code?

Run `npx skills add mingchen666/Reviva --skill network-packet-lab -a claude-code`. Or copy the skill folder (electron/builtin-assets/skills/network-packet-lab in mingchen666/Reviva) into .claude/skills/network-packet-lab in your project. Claude Code loads it when a task matches its description.

How do I install Network Packet Lab in Codex?

Run `npx skills add mingchen666/Reviva --skill network-packet-lab -a codex`. Or copy the skill folder (electron/builtin-assets/skills/network-packet-lab in mingchen666/Reviva) into .agents/skills/network-packet-lab in your project. Codex loads it when a task matches its description.

Can I use Network Packet Lab in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mingchen666/Reviva --skill network-packet-lab -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/network-packet-lab, .gemini/skills/network-packet-lab, .github/skills/network-packet-lab and .opencode/skills/network-packet-lab in your project.

What does Network Packet Lab need to run?

SKILL.md names no scripts, command-line tools or credentials: Network Packet Lab is instructions for the agent only. Its frontmatter pre-approves these tools: file_read, file_write, document_read, kb_search.

Does Network Packet Lab access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Network Packet Lab safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Network Packet Lab use?

No licence was found for Network Packet Lab or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Network Packet Lab use?

About 657 tokens (SKILL.md is roughly 2.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Network Packet Lab?

Skills that share tags, products or a category with Network Packet Lab: Iotnet (BrownFineSecurity/iothackbot, 858 stars), Wireshark Analysis (zebbern/claude-code-guide, 4.6k stars), Net (zhinkgit/embeddedskills, 731 stars) and Performing Network Forensics With Wireshark (mukul975/Anthropic-Cybersecurity-Skills, 34k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Network Packet Lab?

mingchen666 (a GitHub user) maintains it in mingchen666/Reviva, which has 236 GitHub stars. The repository holds 54 skills in this directory. The repository was last updated on September 21, 2026.

Source: mingchen666/Reviva on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.