skills
Security finding triage and binary patch analysis
All Skills in This Repository (2)
Pure Emerald Level Indicatorswaf-bypass-hunter
Test payload variants against a Go WAF and Node.js backend to discover parser-differential bypasses.
patch-diff-analyzer
Generate diffs from decompiled Java and .NET binaries to identify security-relevant changes.
Frequently Asked Questions
FAQPage SchemaHow to install Hacktron skills?โผ
Run `npx skills add HacktronAI/skills --all -g -y` in your terminal to install all skills in this repository globally.
How to triage security scan findings automatically?โผ
The finding-triage skill fetches findings from the Hacktron API, reads the affected source code, verifies reachability, and marks each finding as a true or false positive with adjusted severity.
How to analyze what a security patch changed in a JAR or DLL?โผ
The patch-diff-analyzer skill decompiles both the unpatched and patched binaries, generates a git diff, and identifies the exact security-relevant code changes.
What tools do these security skills require?โผ
Finding triage needs curl, jq, and a Hacktron API key. Patch analysis needs git plus jadx for JAR files or ilspycmd for .NET DLLs.
Can these skills fix confirmed vulnerabilities automatically?โผ
Yes. After you approve a proposed fix, the triage skill applies the smallest correct change and commits each fix separately without pushing unless you ask.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core