Zhao publishes agent skills for security-oriented work, including CTF sandbox workflows covering steganography across image, audio, and document formats, Active Directory certificate abuse, forced-authentication relay chains, and JWT claim confusion. The catalog also reaches into N-day patch diffing for turning vendor patches into proof-of-concept exploits, browser and Windows desktop automation, and JavaScript reverse engineering with js-reverse-mcp. Most of the listed skills are scoped to CTF or authorized testing contexts, and the author's own bio is empty, so the portfolio is the main signal of their focus.
Reverse Skill
89 skills · 44,239 stars · MIT
Api Security Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including disco…
Apk Reverse 在 CLI 环境下做 Android APK 逆向时使用。适用于 APK 解包、Java 反编译、smali 修改、重打包、Frida 动态 Hook，以及按需切换到 so/native 分析。…
Attack Chain Use for authorized multi-stage attack-path planning and orchestration when a task spans reconnais…
Binary Diff 跨版本符号迁移与二进制差分。当你有旧版本的符号/逆向结果，需要快速迁移到新版本时使用。
适用场景：内核缺 PDB 用旧版符号推导、程序更新后批量迁移函数名、应用更新后快速定位新偏移。
核心方法：…
Binary Ninja Reverse Use for authorized binary analysis in Binary Ninja, including HLIL/MLIL/LLIL inspection, strings/…
Browser Automation 统一自动化入口。覆盖浏览器自动化（Playwright）和 Windows 桌面应用自动化（OpenReverse）。
浏览器场景：打开网页、点击、填表、爬取、截图、自动化登录、渗透页面交互。…
Browser Extension Reverse Use for authorized reverse engineering of browser extensions (Chrome/Firefox) including manifest…
Case Review Reviews a reverse-skill case package for scope readiness, Evidence to Finding to Path traceabilit…
Cloud K8S Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF,…
Code Audit Use for authorized source-code security review and SAST workflows including Semgrep, CodeQL patte…
Competition Ad Certificate Abuse Internal downstream skill for ctf-sandbox-orchestrator.
Competition Agent Cloud Internal downstream skill for ctf-sandbox-orchestrator.
Competition Android Hooking Internal downstream skill for ctf-sandbox-orchestrator.
Competition Browser Persistence Internal downstream skill for ctf-sandbox-orchestrator.
Competition Bundle Sourcemap Recovery Internal downstream skill for ctf-sandbox-orchestrator.
Competition Cloud Metadata Path Internal downstream skill for ctf-sandbox-orchestrator.
Competition Container Runtime Internal downstream skill for ctf-sandbox-orchestrator.
Competition Crypto Mobile Internal downstream skill for ctf-sandbox-orchestrator.
Competition Custom Protocol Replay Internal downstream skill for ctf-sandbox-orchestrator.
Competition Dpapi Credential Chain Internal downstream skill for ctf-sandbox-orchestrator.
Competition File Parser Chain Internal downstream skill for ctf-sandbox-orchestrator.
Competition Firmware Layout Internal downstream skill for ctf-sandbox-orchestrator.
Competition Forensic Timeline Internal downstream skill for ctf-sandbox-orchestrator.
Competition Graphql Rpc Drift Internal downstream skill for ctf-sandbox-orchestrator.
Competition Identity Windows Internal downstream skill for ctf-sandbox-orchestrator.
Competition Ios Runtime Internal downstream skill for ctf-sandbox-orchestrator.
Competition Jwt Claim Confusion Internal downstream skill for ctf-sandbox-orchestrator.
Competition K8S Control Plane Internal downstream skill for ctf-sandbox-orchestrator.
Competition Kerberos Delegation Internal downstream skill for ctf-sandbox-orchestrator.
Competition Kernel Container Escape Internal downstream skill for ctf-sandbox-orchestrator.
Competition Linux Credential Pivot Internal downstream skill for ctf-sandbox-orchestrator.
Competition Lsass Ticket Material Internal downstream skill for ctf-sandbox-orchestrator.
Competition Mailbox Abuse Internal downstream skill for ctf-sandbox-orchestrator.
Competition Malware Config Internal downstream skill for ctf-sandbox-orchestrator.
Competition Oauth Oidc Chain Internal downstream skill for ctf-sandbox-orchestrator.
Competition Pcap Protocol Internal downstream skill for ctf-sandbox-orchestrator.
Competition Prompt Injection Internal downstream skill for ctf-sandbox-orchestrator.
Competition Queue Worker Drift Internal downstream skill for ctf-sandbox-orchestrator.
Competition Race Condition State Drift Internal downstream skill for ctf-sandbox-orchestrator.
Competition Relay Coercion Chain Internal downstream skill for ctf-sandbox-orchestrator.
Competition Request Normalization Smuggling Internal downstream skill for ctf-sandbox-orchestrator.
Competition Reverse Pwn Internal downstream skill for ctf-sandbox-orchestrator.
Competition Runtime Routing Internal downstream skill for ctf-sandbox-orchestrator.
Competition Ssrf Metadata Pivot Internal downstream skill for ctf-sandbox-orchestrator.
Competition Stego Media Internal downstream skill for ctf-sandbox-orchestrator.
Competition Supply Chain Internal downstream skill for ctf-sandbox-orchestrator.
Competition Template Render Path Internal downstream skill for ctf-sandbox-orchestrator.
Competition Web Runtime Internal downstream skill for ctf-sandbox-orchestrator.