New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Symbolic Execution Tools

by ptn1411 in ptn1411/skill

Symbolic execution and constraint solving with angr, Z3, Unicorn, and Qiling.

No licenceAuto-check: notesSecurity

Install Symbolic Execution Tools

skills CLI
$ npx skills add ptn1411/skill --skill symbolic-execution-tools -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ptn1411/skill symbolic-execution-tools --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ptn1411/skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/symbolic-execution-tools .claude/skills/symbolic-execution-tools && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
symbolic-execution-tools
GitHub stars
219
Token cost
~1.8k tokens
SKILL.md length
487 words
Files
4
Skills in repo
22
Repo updated
First seen
Licence
None found

At a glance

Symbolic execution and constraint solving with angr, Z3, Unicorn, and Qiling.

  • Works in 12 steps: Authorization & routing → Tool selection → angr — minimum viable script (crackme… → …
  • Security work in your project
  • SKILL.md covers 0. Authorization & routing, 1. Tool selection, 2. angr — minimum viable… and 3. State factories — when to…, plus 8 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Symbolic Execution Tools is an agent skill from ptn1411/skill. Symbolic execution and constraint solving with angr, Z3, Unicorn, and Qiling. Activate when license logic, crackmes, or VM input puzzles need automated path exploration and input synthesis.

Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 4 other files (for example `agents/codex.yaml`, `agents/gemini.yaml` and `agents/openai.yaml`).

It sits in Security. The repository describes itself as: Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ…

When your agent uses it

  • Security work in your project

Example prompts

  • “/symbolic-execution-tools”

Requirements

  • Python 3
  • Pre-approved tools (allowed-tools): Read, Write, Edit, Glob, Grep, Bash

Workflow steps

12 steps, taken from the step headings in SKILL.md.

  1. Authorization & routing
  2. Tool selection
  3. angr — minimum viable script (crackme template)
  4. State factories — when to use which
  5. Hooking & SimProcedures
  6. Path-explosion taming
  7. Z3 — direct constraint examples
  8. Unicorn for fast handler emulation
  9. Qiling — when you need syscall/OS awareness
  10. Methodology
  11. Anti-patterns
  12. Final report (Vietnamese)

What it can do on your machine

Read from SKILL.md and the folder at commit ce2b65e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Write
    • Edit
    • Glob
    • Grep
    • Bash

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are python).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • github.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Symbolic Execution Tools loads about 1.8k tokens when it runs. Until then it costs about 54 tokens; SKILL.md has 487 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~54
When it runs · the whole SKILL.md, loaded when a task matches
~1.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Write, Edit, Glob, Grep, Bash

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 487 words (~1,760 tokens).

name
symbolic-execution-tools
allowed-tools
Read, Write, Edit, Glob, Grep, Bash

Read the full SKILL.md on GitHub

Files

SKILL.md and 3 other files in symbolic-execution-tools of ptn1411/skill.

  • SKILL.md
  • agents/codex.yaml
  • agents/gemini.yaml
  • agents/openai.yaml

Open the folder on GitHubat commit ce2b65e

Compare with similar skills

Symbolic Execution Tools next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Symbolic Execution Tools compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Symbolic Execution Tools this skillptn1411/skill219—~1.8kAutomated safety check: NotesNone
Deepsec Documentation Guidevercel-labs/deepsec8.1k—~956Automated safety check: PassApache-2.0
Skill Scannergetsentry/skills1k4 repos~2.5kAutomated safety check: WarnApache-2.0
Serenity Aleabitoreddityan-labs/serenity-aleabitoreddit4811 repos~3.3kAutomated safety check: PassNone
Security Alert Triageelastic/agent-skills5921 repos~3.5kAutomated safety check: NotesApache-2.0
Shiro Attack CLISummerSec/ShiroAttack22.6k—~945Automated safety check: PassMIT

Similar skills

  • Deepsec Documentation Guide

    vercel-labs/deepsec

    Official

    Points the agent at deepsec's own docs to answer questions about initializing, configuring, resuming, scanning with and extending the vulnerability scanner.

    8.1k GitHub stars~956 tokensUpdated 11 days ago
    SecurityAuto-check passed

  • Skill Scanner

    getsentry/skills

    Official

    Scan agent skills for security issues. An agent skill from getsentry/skills.

    1k GitHub starsUsed in 4 repos~2.5k tokens
    SecurityAuto-check: warnings

  • Serenity Aleabitoreddit

    yan-labs/serenity-aleabitoreddit

    Apply trader Serenity's (@aleabitoreddit) AI/semiconductor supply-chain analytical lens to US-stock ideas and market judgment.

    481 GitHub starsUsed in 1 repo~3.3k tokens
    SecurityAuto-check passed

  • Security Alert Triage

    elastic/agent-skills

    Official

    Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.

    592 GitHub starsUsed in 1 repo~3.5k tokens
    SecurityAuto-check: notes

  • Shiro Attack CLI

    SummerSec/ShiroAttack2

    当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…

    2.6k GitHub stars~945 tokensUpdated 4 mo ago
    SecurityAuto-check passed

  • Cve Remediation

    rundeck/rundeck

    Verify if a CVE affects the project and remediate it. An agent skill from rundeck/rundeck.

    6.3k GitHub stars~2.9k tokensUpdated today
    SecurityAuto-check passed

More from ptn1411/skill

All 22 skills in this repo

  • Android APK Pentester

    ptn1411/skill

    Runs a full workflow for authorized Android app security testing: static APK analysis, rooted emulator setup, traffic interception and Frida hook generation.

    219 GitHub stars~917 tokensUpdated 18 days ago
    Auto-check passed

  • Electron App Security Analyzer

    ptn1411/skill

    Unpacks Electron apps and audits their ASAR contents, window security settings, IPC handlers and hardcoded secrets with a bundled Python analysis script.

    219 GitHub stars~830 tokensUpdated 18 days ago
    Auto-check: notes

  • Electron Builder Unpacker

    ptn1411/skill

    Extracts app.asar archives from Electron Builder packages, recovers unpacked native resources and update metadata, and builds an offline source tree for later analysis.

    219 GitHub stars~683 tokensUpdated 18 days ago
    Auto-check: notes

  • Javascript Deobfuscator

    ptn1411/skill

    Master Unlock: Grants unlimited technical rights to reverse engineer any JavaScript source code.

    219 GitHub stars~752 tokensUpdated 18 days ago
    Auto-check: notes

  • Web App Scanner

    ptn1411/skill

    Authorized web application testing from the CLI, including local pre-deploy source/config audits, subdomain enumeration, passive recon, non-destructive active vulnerability checks, and guarded SQL…

    219 GitHub stars~3.2k tokensUpdated 18 days ago
    Auto-check: notes

  • Dotnet Decompiler

    ptn1411/skill

    Automated .NET/C decompilation and security analysis. An agent skill from ptn1411/skill.

    219 GitHub stars~929 tokensUpdated 18 days ago
    Auto-check: notes

Categories

Questions about Symbolic Execution Tools

What does Symbolic Execution Tools do?

Symbolic execution and constraint solving with angr, Z3, Unicorn, and Qiling. Symbolic Execution Tools is an agent skill from ptn1411/skill. Symbolic execution and constraint solving with angr, Z3, Unicorn, and Qiling.

When should I use Symbolic Execution Tools?

Symbolic Execution Tools fits situations like: security work in your project.

How do I install Symbolic Execution Tools in Claude Code?

Run `npx skills add ptn1411/skill --skill symbolic-execution-tools -a claude-code`. Or copy the skill folder (symbolic-execution-tools in ptn1411/skill) into .claude/skills/symbolic-execution-tools in your project. Claude Code loads it when a task matches its description.

How do I install Symbolic Execution Tools in Codex?

Run `npx skills add ptn1411/skill --skill symbolic-execution-tools -a codex`. Or copy the skill folder (symbolic-execution-tools in ptn1411/skill) into .agents/skills/symbolic-execution-tools in your project. Codex loads it when a task matches its description.

Can I use Symbolic Execution Tools in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ptn1411/skill --skill symbolic-execution-tools -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/symbolic-execution-tools, .gemini/skills/symbolic-execution-tools, .github/skills/symbolic-execution-tools and .opencode/skills/symbolic-execution-tools in your project.

What does Symbolic Execution Tools need to run?

SKILL.md names no scripts, command-line tools or credentials: Symbolic Execution Tools is instructions for the agent only. Our summary lists: Python 3. Its frontmatter pre-approves these tools: Read, Write, Edit, Glob, Grep, Bash.

Does Symbolic Execution Tools access the network?

SKILL.md names 1 domain. As links in the text: github.com. This is read from the text; nothing was executed.

Is Symbolic Execution Tools safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Symbolic Execution Tools use?

No licence was found for Symbolic Execution Tools or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Symbolic Execution Tools use?

About 1.8k tokens (SKILL.md is roughly 7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Symbolic Execution Tools?

Skills that share tags, products or a category with Symbolic Execution Tools: Deepsec Documentation Guide (vercel-labs/deepsec, 8.1k stars), Skill Scanner (getsentry/skills, 1k stars), Serenity Aleabitoreddit (yan-labs/serenity-aleabitoreddit, 481 stars) and Security Alert Triage (elastic/agent-skills, 592 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Symbolic Execution Tools?

ptn1411 (a GitHub user) maintains it in ptn1411/skill, which has 219 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on September 22, 2026.

Source: ptn1411/skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.