Agent skill

Memory Dumper

by ptn1411 in ptn1411/skill

Dump process memory and scan for secrets, license keys, decryption keys, tokens, and crypto artifacts.

No licenceAuto-check: notesSecurity

Install Memory Dumper

skills CLI
$ npx skills add ptn1411/skill --skill memory-dumper -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ptn1411/skill memory-dumper --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/memory-dumper .claude/skills/memory-dumper && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
memory-dumper
GitHub stars
220
Token cost
~945 tokens
SKILL.md length
264 words
Files
4 (incl. scripts, references)
Skills in repo
22
Repo updated
First seen
Licence
None found

At a glance

Dump process memory and scan for secrets, license keys, decryption keys, tokens, and crypto artifacts.

  • Works in 4 steps: Authorization & Routing → Dump Process Memory → Scan Memory Dump → …
  • Security work in your project
  • SKILL.md covers 0. Authorization & Routing, Step 1 — Dump Process Memory, Step 2 — Scan Memory Dump and Step 3 — Cross-Reference with…, plus 2 more sections
  • Runs Python scripts from its folder; calls python

What it does

Memory Dumper is an agent skill from ptn1411/skill. Dump process memory and scan for secrets, license keys, decryption keys, tokens, and crypto artifacts. Cross-platform: comsvcs.dll / MiniDumpWriteDump on Windows, /proc/mem on Linux.

Its SKILL.md is about 950 tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including scripts and reference files (for example `references/memory_forensics.md`, `scripts/dump_process.py` and `scripts/scan_memory.py`).

It sits in Security. It works with Linux. The repository describes itself as: Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ…

When your agent uses it

  • Security work in your project

Example prompts

  • “/memory-dumper”

Requirements

  • Python 3
  • Pre-approved tools (allowed-tools): Read, Write, Edit, Glob, Grep, Bash

Workflow steps

4 steps, taken from the step headings in SKILL.md.

  1. Authorization & Routing
  2. Dump Process Memory
  3. Scan Memory Dump
  4. Cross-Reference with Static Analysis

What it can do on your machine

Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Write
    • Edit
    • Glob
    • Grep
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 2 files in scripts/ (Python), which the agent can run.

    Shell commands in SKILL.md call:

    • python

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Memory Dumper loads about 945 tokens when it runs, and up to ~1.7k if it reads all its reference files. Until then it costs about 49 tokens; SKILL.md has 264 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~49
When it runs · the whole SKILL.md, loaded when a task matches
~945
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Write, Edit, Glob, Grep, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 264 words (~945 tokens).

name
memory-dumper
allowed-tools
Read, Write, Edit, Glob, Grep, Bash

Read the full SKILL.md on GitHub

Files

SKILL.md and 3 other files (scripts, references) in memory-dumper of ptn1411/skill.

  • SKILL.md
  • references/memory_forensics.md
  • scripts/dump_process.py
  • scripts/scan_memory.py

Open the folder on GitHubat commit ce2b65e

Compare with similar skills

Memory Dumper next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Memory Dumper compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Memory Dumper this skillptn1411/skill220—~945Automated safety check: NotesNone
Write Cve Ruleevdenis/cvehound138—~2.5kAutomated safety check: PassGPL-3.0
Securitystatic-web-server/static-web-server2.4k—~1.5kAutomated safety check: NotesApache-2.0
User Managementsickn33/agentic-awesome-skills47k2 repos~2.8kAutomated safety check: NotesMIT
Configuring Host Based Intrusion Detectionmukul975/Anthropic-Cybersecurity-Skills34k—~2.1kAutomated safety check: PassApache-2.0
Configuring Zscaler Private Access For Ztnamukul975/Anthropic-Cybersecurity-Skills34k—~2.9kAutomated safety check: NotesApache-2.0

Similar skills

  • Write Cve Rule

    evdenis/cvehound

    Write, debug, or validate a CVEhound detection rule (.cocci or .grep) for a Linux kernel CVE.

    138 GitHub stars~2.5k tokensUpdated today
    SecurityAuto-check passed
  • Security

    static-web-server/static-web-server

    Review or implement security measures for the Static Web Server (SWS) project — path traversal prevention, TLS, security headers, CORS, and input validation

    2.4k GitHub stars~1.5k tokensUpdated yesterday
    SecurityAuto-check: notes
  • User Management

    sickn33/agentic-awesome-skills

    Manage users, groups, and permissions on Linux systems. An agent skill from sickn33/agentic-awesome-skills.

    47k GitHub starsUsed in 2 repos~2.8k tokens
    SecurityAuto-check: notes
  • Configuring Host Based Intrusion Detection

    mukul975/Anthropic-Cybersecurity-Skills

    Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, and configuration changes for security violations.

    34k GitHub stars~2.1k tokensUpdated 1 mo ago
    SecurityAuto-check passed
  • Configuring Zscaler Private Access For Ztna

    mukul975/Anthropic-Cybersecurity-Skills

    Configures Zscaler Private Access (ZPA) to replace traditional VPN with zero trust network access by deploying App Connectors, defining application segments, configuring identity- and…

    34k GitHub stars~2.9k tokensUpdated 1 mo ago
    SecurityAuto-check: notes
  • Detecting Secure Boot Bypass

    mukul975/Anthropic-Cybersecurity-Skills

    Detect UEFI Secure Boot bypasses and bootkits such as BlackLotus and Bootkitty by verifying Secure Boot state, checking dbx revocation currency, and hashing EFI boot binaries against known-bad sets…

    34k GitHub stars~2.6k tokensUpdated 1 mo ago
    SecurityAuto-check: notes

More from ptn1411/skill

All 22 skills in this repo
  • Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.

    220 GitHub stars~917 tokensUpdated 17 days ago
    Auto-check passed
  • Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.

    220 GitHub stars~830 tokensUpdated 17 days ago
    Auto-check: notes
  • Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.

    220 GitHub stars~683 tokensUpdated 17 days ago
    Auto-check: notes
  • Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.

    220 GitHub stars~752 tokensUpdated 17 days ago
    Auto-check: notes
  • Web App Scanner

    ptn1411/skill

    Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…

    220 GitHub stars~3.2k tokensUpdated 17 days ago
    Auto-check: notes
  • Dotnet Decompiler

    ptn1411/skill

    Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.

    220 GitHub stars~929 tokensUpdated 17 days ago
    Auto-check: notes

Works with

Categories

Questions about Memory Dumper

What does Memory Dumper do?

Dump process memory and scan for secrets, license keys, decryption keys, tokens, and crypto artifacts. Memory Dumper is an agent skill from ptn1411/skill. Dump process memory and scan for secrets, license keys, decryption keys, tokens, and crypto artifacts.

When should I use Memory Dumper?

Memory Dumper fits situations like: security work in your project.

How do I install Memory Dumper in Claude Code?

Run `npx skills add ptn1411/skill --skill memory-dumper -a claude-code`. Or copy the skill folder (memory-dumper in ptn1411/skill) into .claude/skills/memory-dumper in your project. Claude Code loads it when a task matches its description.

How do I install Memory Dumper in Codex?

Run `npx skills add ptn1411/skill --skill memory-dumper -a codex`. Or copy the skill folder (memory-dumper in ptn1411/skill) into .agents/skills/memory-dumper in your project. Codex loads it when a task matches its description.

Can I use Memory Dumper in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill memory-dumper -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/memory-dumper, .gemini/skills/memory-dumper, .github/skills/memory-dumper and .opencode/skills/memory-dumper in your project.

What does Memory Dumper need to run?

Going by SKILL.md and its folder, Memory Dumper needs Python for the scripts in its folder and the command-line tools its instructions call (python). Our summary lists: Python 3. Its frontmatter pre-approves these tools: Read, Write, Edit, Glob, Grep, Bash.

Does Memory Dumper access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Memory Dumper safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Memory Dumper use?

No licence was found for Memory Dumper or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Memory Dumper use?

About 945 tokens (SKILL.md is roughly 3.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 775 tokens, read only when the agent opens those files.

What are the alternatives to Memory Dumper?

Skills that share tags, products or a category with Memory Dumper: Write Cve Rule (evdenis/cvehound, 138 stars), Security (static-web-server/static-web-server, 2.4k stars), User Management (sickn33/agentic-awesome-skills, 47k stars) and Configuring Host Based Intrusion Detection (mukul975/Anthropic-Cybersecurity-Skills, 34k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Memory Dumper?

ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 220 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.

Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.