{
  "markdown": "# Hacktron Skills\n\nCommunity-maintained skills for offensive and defensive security capabilities. Built for security researchers, engineers, and bug hunters.\n\n## What are Skills?\n\nSkills extend AI agents with specialized security capabilities. When enabled, skills provide domain-specific instructions, scripts, and references that help agents perform complex security tasks.\n\nThis repository follows the [Agent Skills specification](https://agentskills.io/specification).\n\n## Usage\n\n### With Claude Code\n\nThis repo is also a [Claude Code plugin marketplace](https://docs.claude.com/en/docs/claude-code/plugins-reference). Each skill is installable as a plugin.\n\n```\n# Register the marketplace\n/plugin marketplace add HacktronAI/skills\n\n# Browse and install from the menu\n/plugin menu\n\n# Or install a specific skill directly\n/plugin install finding-triage@hacktron\n```\n\nInstall from a local clone instead:\n\n```bash\ngit clone https://github.com/HacktronAI/skills.git\n```\n\n```\n# From the parent directory of the clone\n/plugin marketplace add ./skills\n/plugin install finding-triage@hacktron\n```\n\n### With Hacktron CLI\n\n```bash\n# Pull the skills registry\nhacktron skills pull\n\n# List available skills\nhacktron skills list\n\n# Enable a skill\nhacktron skills enable patch-diff-analyzer\n\n# Disable a skill\nhacktron skills disable patch-diff-analyzer\n```\n\n### With Hacktron VSCode Extension\n\nSkills are automatically discovered and can be enabled/disabled from the extension settings.\n\n## Available Skills\n\n| Skill | Description | Sources |\n|-------|-------------|---------|\n| [finding-triage](./finding-triage/) | Interactively triage Hacktron findings against source (and optionally a live deployment), then fix + commit confirmed issues or set their state in Hacktron | - |\n| [patch-diff-analyzer](./patch-diff-analyzer/) | Reverse-engineer compiled binaries (JARs, DLLs) to analyze security patches | - |\n\n## Compatible Skill Repositories\n\nSkills from other repositories that follow the [Agent Skills specification](https://agentskills.io/specification) can be used with Hacktron:\n\n- **[SecOpsAgentKit](https://github.com/AgentSecOps/SecOpsAgentKit)** - 25+ security operations skills including SAST, DAST, container scanning, and secret detection\n- **[Raptor Skills](https://github.com/gadievron/raptor/tree/main/.claude/skills)** - Additional security research skills\n\nTo use skills from other repositories, manually copy them into `~/.hacktron/skills/`:\n\n```bash\n# Copy individual skills from other repos\ncp -r /path/to/other-repo/skill-name ~/.hacktron/skills/\n```\n\n>  **Security Warning**: Skills can execute arbitrary commands on your machine. Always review the `SKILL.md` and any scripts before adding skills from third-party sources. Only the official [HacktronAI/skills](https://github.com/HacktronAI/skills) repository is reviewed and validated for security.\n\n> **Note**: The `hacktron skills pull` command only pulls from the official HacktronAI/skills repository. Third-party skills must be manually copied to ensure users consciously review what they're installing.\n\n## Creating Skills\n\nSkills follow the [Agent Skills specification](https://agentskills.io/specification). Each skill is a directory containing:\n\n```\nskill-name/\n├── SKILL.md          # Required - YAML frontmatter + instructions\n├── scripts/          # Optional - executable scripts\n├── references/       # Optional - additional documentation\n└── assets/           # Optional - templates, data files\n```\n\n### SKILL.md Format\n\n```markdown\n---\nname: skill-name\ndescription: What the skill does and when to use it.\nlicense: MIT\ncompatibility: Required tools or environment\nmetadata:\n  author: your-name\n  version: \"1.0.0\"\n---\n\n# Skill Name\n\nInstructions for the agent...\n```\n\n### Contributing\n\n1. Fork this repository\n2. Create your skill following the spec\n3. Test with `hacktron skills enable your-skill`\n4. Open a PR\n\nAll skills are reviewed for security before being merged.\n\n## License\n\nMIT\n\n",
  "bytes": 3969,
  "sha": "4657fbf9c7d1f152b9abba0615992541bd5da97c57cf324ac9b44566a675805c",
  "repo_slug": "hacktronai/skills",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/skl_hacktronai_skills_development_waf_bypass_42d93ef5/readme"
}