ai-emergency-tools

Analyze shellcode and perform Linux emergency response via SSH.

4|1|Updated Jan 21, 2026

Search Tags:#security #linux #incident-response #emergency #threat-intelligence #shellcode

Ready to run

npx skills add https://github.com/b0bac/AIEmergencyTools --skill ai-emergency-tools

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ai-emergency-tools
Source: https://github.com/b0bac/AIEmergencyTools/tree/main
Command: npx skills add https://github.com/b0bac/AIEmergencyTools --skill ai-emergency-tools

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires shellcode-analyze, linux-emergency-response.

What problem does it solve?

This Skill consolidates Shellcode analysis and Linux emergency response into a single, extensible toolkit to accelerate security incident response, malware analysis, and forensic workflows across platforms.

Core Features & Use Cases

Shellcode analysis: disassembly, system call mapping, string extraction, and network indicators for Windows and Linux samples.
Linux emergency response: remote host assessment via SSH with automated checks, threat intel lookups (VirusTotal) and WHOIS queries.
Use Case: a security team needs to quickly analyze a suspicious shellcode sample and perform a comprehensive remote host investigation in a unified workflow.

Quick Start

Provide a hex shellcode string to shellcode-analyze and SSH credentials for linux-emergency-response to perform a combined analysis.

Frequently Asked Questions about ai-emergency-tools

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I analyze suspicious shellcode and investigate a compromised Linux host in one workflow?▼

Perform shellcode analysis and Linux emergency response by inputting a hex shellcode string for disassembly and SSH credentials for remote host assessment, unifying malware analysis and incident response workflows.

What dependencies do I need to perform shellcode analysis and Linux emergency response?▼

To run shellcode analysis and Linux emergency response, you need Python 3, Capstone for disassembly, psutil for process information, and optional VirusTotal and WHOIS integrations for threat intelligence lookups.

Does this incident response toolkit support both Windows and Linux shellcode samples?▼

Yes, the shellcode analysis component supports both Windows and Linux samples, performing disassembly, system call mapping, string extraction, and network indicator extraction to assist malware analysis.

How do I run remote host assessments and threat intelligence lookups during a security incident?▼

Run remote host assessments by providing SSH credentials to the linux-emergency-response module, which automates host checks and performs threat intelligence lookups using VirusTotal and WHOIS integrations.

What is the best way to extract system calls and network indicators from hex shellcode?▼

Use the shellcode-analyze sub-skill to extract system calls and network indicators from hex shellcode, leveraging Capstone for disassembly and mapping syscalls across Windows and Linux samples.

Can I use this toolkit for incident response across on-premises and cloud hosts?▼

Yes, the toolkit applies to security teams performing incident response and threat intelligence lookups across on-premises and cloud hosts via SSH-based remote assessments and automated checks.