Agent skill

Techstack Correlation

by transilienceai in transilienceai/communitytools

Correlation, confidence scoring, and conflict resolution across all tech-stack signals.

MITAuto-check passedSecurity

Install Techstack Correlation

skills CLI
$ npx skills add transilienceai/communitytools --skill techstack-correlation -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install transilienceai/communitytools techstack-correlation --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/techstack-identification/correlation .claude/skills/techstack-correlation && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
techstack-correlation
GitHub stars
562
Token cost
~459 tokens
SKILL.md length
164 words
Files
2
Skills in repo
35
Repo updated
First seen
Licence
MIT

At a glance

Correlation, confidence scoring, and conflict resolution across all tech-stack signals.

  • Security work in your project
  • SKILL.md covers Scope, Signals (input), Inferences (output) and Techniques, plus 1 more section
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Techstack Correlation is an agent skill from transilienceai/communitytools. Correlation, confidence scoring, and conflict resolution across all tech-stack signals. Cross-validates and assigns High/Medium/Low confidence per technology.

Its SKILL.md is about 460 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `reference/patterns.md`).

It sits in Security. The repository describes itself as: Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research. The licence is MIT.

When your agent uses it

  • Security work in your project

Example prompts

  • “/techstack-correlation”

What it can do on your machine

Read from SKILL.md and the folder at commit 95fdc12. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Techstack Correlation loads about 459 tokens when it runs. Until then it costs about 45 tokens; SKILL.md has 164 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~45
When it runs · the whole SKILL.md, loaded when a task matches
~459

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from transilienceai/communitytools at commit 95fdc12, republished under its MIT licence (© transilienceai). 164 words, ~459 tokens.

Download SKILL.mdSave it as .claude/skills/techstack-correlation/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
techstack-correlation
description
Correlation, confidence scoring, and conflict resolution across all tech-stack signals. Cross-validates and assigns High/Medium/Low confidence per technology.

Tech-Stack Correlation

Scope

The Phase 4 layer that consumes all detection outputs (frontend, backend, infra, security, OSINT) and produces the final vetted technology list:

  • Cross-validate signals from independent sources for corroboration
  • Score confidence per technology (multi-factor weighted scoring)
  • Resolve conflicts between signals (version mismatch, mutually exclusive frameworks, temporal inconsistencies, categorical ambiguity)
  • Flag unresolvable conflicts for manual review

Signals (input)

  • Raw signals grouped by category: http, dns, tls, javascript, html, repository, job, archive
  • Inferred technologies from each detection domain (frontend / backend / infra / security)
  • Asset inventory (domains, subdomains, IP map) for URL-context resolution

Inferences (output)

  • correlated_technologies[] — each with sources, source_count, agreement_score, corroborating_signals
  • conflicts[] — typed (version_mismatch / mutually_exclusive / temporal_inconsistency / categorical_ambiguity), with severity
  • technologies_with_confidence[] — confidence level (High / Medium / Low), score (0-1), reasoning breakdown
  • confidence_summary — counts, overall score, per-category breakdown, recommendations
  • confidence_gaps[] — technologies needing additional evidence with suggested actions

Techniques

See reference/patterns.md.

When to use

  • Always — last analysis stage before report generation
  • Required to decide what makes the final tech-stack list and at what confidence
  • Pure computation; no external requests

© transilienceai, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in skills/techstack-identification/correlation of transilienceai/communitytools.

  • SKILL.md
  • reference/patterns.md

Open the folder on GitHubat commit 95fdc12

Compare with similar skills

Techstack Correlation next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Techstack Correlation compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Techstack Correlation this skilltransilienceai/communitytools562—~459Automated safety check: PassMIT
Fla Ascend Performancefla-org/flash-linear-attention5.8k—~6.3kAutomated safety check: PassMIT
Deepsec Documentation Guidevercel-labs/deepsec8.1k—~956Automated safety check: PassApache-2.0
Skill Scannergetsentry/skills1k4 repos~2.5kAutomated safety check: WarnApache-2.0
Serenity Aleabitoreddityan-labs/serenity-aleabitoreddit4801 repos~3.3kAutomated safety check: PassNone
Security Alert Triageelastic/agent-skills5921 repos~3.5kAutomated safety check: NotesApache-2.0

Similar skills

  • Fla Ascend Performance

    fla-org/flash-linear-attention

    Guidelines for Ascend NPU kernel / Triton-Ascend backend performance work in the FLA repo.

    5.8k GitHub stars~6.3k tokensUpdated today
    SecurityAuto-check passed
  • Deepsec Documentation Guide

    vercel-labs/deepsec

    Official

    Points the agent at deepsec's own docs to answer questions about initializing, configuring, resuming, scanning with and extending the vulnerability scanner.

    8.1k GitHub stars~956 tokensUpdated 9 days ago
    SecurityAuto-check passed
  • Skill Scanner

    getsentry/skills

    Official

    Scan agent skills for security issues. An agent skill from getsentry/skills.

    1k GitHub starsUsed in 4 repos~2.5k tokens
    SecurityAuto-check: warnings
  • Serenity Aleabitoreddit

    yan-labs/serenity-aleabitoreddit

    Apply trader Serenity's (@aleabitoreddit) AI/semiconductor supply-chain analytical lens to US-stock ideas and market judgment.

    480 GitHub starsUsed in 1 repo~3.3k tokens
    SecurityAuto-check passed
  • Security Alert Triage

    elastic/agent-skills

    Official

    Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.

    592 GitHub starsUsed in 1 repo~3.5k tokens
    SecurityAuto-check: notes
  • Shiro Attack CLI

    SummerSec/ShiroAttack2

    当用户要求利用、检测或测试 Apache Shiro rememberMe 反序列化漏洞 (Shiro-550, CVE-2016-4437) 时使用。触发词包括 "Shiro"、"rememberMe"、"shiro attack"、"CVE-2016-4437"、"Shiro-550"、"爆破 Shiro key"、"利用 Shiro"、"Shiro…

    2.6k GitHub stars~945 tokensUpdated 4 mo ago
    SecurityAuto-check passed

More from transilienceai/communitytools

All 35 skills in this repo
  • Dfir

    transilienceai/communitytools

    Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation.

    562 GitHub stars~1.5k tokensUpdated 2 mo ago
    Auto-check passed
  • GitHub Workflow

    transilienceai/communitytools

    GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.

    562 GitHub stars~812 tokensUpdated 2 mo ago
    Auto-check: notes
  • Pci Secure Software

    transilienceai/communitytools

    Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation.

    562 GitHub stars~1.8k tokensUpdated 2 mo ago
    Auto-check passed
  • Protect With Password

    transilienceai/communitytools

    Generate ONE strong password and apply it to each referenced file (PDF, Word, Excel, PowerPoint, or any type).

    562 GitHub stars~583 tokensUpdated 2 mo ago
    Auto-check passed
  • Skill Update

    transilienceai/communitytools

    Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits.

    562 GitHub stars~1.2k tokensUpdated 2 mo ago
    Auto-check passed
  • Source Code Scanning

    transilienceai/communitytools

    Security-focused source code review and SAST. An agent skill from transilienceai/communitytools.

    562 GitHub stars~1.2k tokensUpdated 2 mo ago
    Auto-check: notes

Categories

Questions about Techstack Correlation

What does Techstack Correlation do?

Correlation, confidence scoring, and conflict resolution across all tech-stack signals. Techstack Correlation is an agent skill from transilienceai/communitytools. Correlation, confidence scoring, and conflict resolution across all tech-stack signals.

When should I use Techstack Correlation?

Techstack Correlation fits situations like: security work in your project.

How do I install Techstack Correlation in Claude Code?

Run `npx skills add transilienceai/communitytools --skill techstack-correlation -a claude-code`. Or copy the skill folder (skills/techstack-identification/correlation in transilienceai/communitytools) into .claude/skills/techstack-correlation in your project. Claude Code loads it when a task matches its description.

How do I install Techstack Correlation in Codex?

Run `npx skills add transilienceai/communitytools --skill techstack-correlation -a codex`. Or copy the skill folder (skills/techstack-identification/correlation in transilienceai/communitytools) into .agents/skills/techstack-correlation in your project. Codex loads it when a task matches its description.

Can I use Techstack Correlation in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add transilienceai/communitytools --skill techstack-correlation -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/techstack-correlation, .gemini/skills/techstack-correlation, .github/skills/techstack-correlation and .opencode/skills/techstack-correlation in your project.

What does Techstack Correlation need to run?

SKILL.md names no scripts, command-line tools or credentials: Techstack Correlation is instructions for the agent only.

Does Techstack Correlation access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Techstack Correlation safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Techstack Correlation use?

Techstack Correlation is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Techstack Correlation use?

About 459 tokens (SKILL.md is roughly 1.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Techstack Correlation?

Skills that share tags, products or a category with Techstack Correlation: Fla Ascend Performance (fla-org/flash-linear-attention, 5.8k stars), Deepsec Documentation Guide (vercel-labs/deepsec, 8.1k stars), Skill Scanner (getsentry/skills, 1k stars) and Serenity Aleabitoreddit (yan-labs/serenity-aleabitoreddit, 480 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Techstack Correlation?

transilienceai (a GitHub organization) maintains it in transilienceai/communitytools, which has 562 GitHub stars. The repository holds 35 skills in this directory. The repository was last updated on July 29, 2026.

Source: transilienceai/communitytools on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.