xianzhi-research

Run `npx skills add tanweai/xianzhi-research --all -g -y` in your terminal to install the skill globally.

It gives your AI a structured security research methodology covering web injection, binary exploitation, domain penetration, fuzzing, and reverse engineering, so it reasons like an expert researcher instead of just listing facts.

Yes. It applies a four-layer thinking model that shifts from attack surface mapping to defense reverse-engineering, helping you find bypasses such as WAF evasion or alternate attack chains.

Yes. It follows the standard SKILL.md format and can be invoked in Claude Code with commands like /vuln-research followed by your research question.

Yes. It was built to transfer expert thinking patterns to newcomers, with topic modules and a CVE case index that guide analysis step by step.