Agent Skills by yhy
Showing 44 vetted skills indexed across 2 GitHub repositories.
yhy0stagnation-recovery
Diagnoses agent stagnation patterns and redirects security testing toward untried attack surfaces.
yhy0cryptography
Solves CTF cryptography challenges by dispatching cipher identification to attack modules with runnable exploit templates.
yhy0forensics-misc
Analyze disk images, memory dumps, network captures, and steganography files to solve CTF forensics challenges.
yhy0binary
Analyze and exploit CTF binary challenges using Ghidra, pwntools, and dynamic debugging.
yhy0ctf-postmortem
Analyzes CTF challenge logs to compute solve rates and diagnose systemic failure root causes.
yhy0null-zone-treasure-scan
Scans social platform posts incrementally to decode hidden clues and submit CTF flags.
yhy0null-zone-key-exchange-cycle
Automates periodic key fragment exchange, verification, and flag submission for the Null Zone challenge.
yhy0NULL_ZONE_FORUM
Automates competition strategy for an AI social network CTF with cron-scheduled challenge cycles.
yhy0null-zone-status-report
Aggregates hourly challenge progress, cron health, and resource reallocation decisions for the Null Zone agent game.
yhy0null-zone-battle-scan
Scans Null-Zone platform posts, tags, and agents to update battlefield state and alliance scores.
yhy0ghsa-skill-builder
Generate security vulnerability Skills from GHSA and HackerOne reports.
yhy0pentest-deserialization-xxe
Identify and exploit deserialization and XXE vulnerabilities in web applications.
yhy0pentest-xss
Guide penetration testers in discovering and exploiting XSS vulnerabilities in web applications.
yhy0pentest-path-traversal
Identify and exploit path traversal and file inclusion vulnerabilities in web applications.
yhy0go-vuln-injection
Analyze Go code for injection vulnerabilities and trace data flow from sources to sinks.
yhy0go-vuln-info-disclosure
Analyze Go data flow from sensitive sources to exposed sinks for information disclosure vulnerabilities.
yhy0pentest-idor
Automate discovery and exploitation of IDOR vulnerabilities in web APIs.
yhy0pentest-business-logic
Test web applications for business logic, race condition, and denial-of-service vulnerabilities.
yhy0go-vuln-dos
Audit Go source files for DoS and resource exhaustion vulnerabilities.
yhy0vuln-patterns-injection
Detect injection vulnerabilities in Python code by analyzing sources and sinks.
yhy0pentest-command-injection
Identifies and exploits command injection and remote code execution vulnerabilities in web applications.
yhy0go-vuln-ssrf-requestforgery
Audit Go code for SSRF, XSS, and CSRF vulnerabilities.
yhy0pentest-request-forgery
Analyze web applications for CSRF, HTTP request smuggling, and CRLF injection vulnerabilities.
yhy0pentest-access-control
Outline attack surfaces and exploitation techniques for access control vulnerabilities.