encoding-toolkit

Detect input string encoding and convert across Base64, URL, Hex, HTML entities, ROT13, and JWT.

21|1|Updated Apr 12, 2026
One-click install
npx skills add https://github.com/woohyun212/security-skill --skill encoding-toolkit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: encoding-toolkit
Source: https://github.com/woohyun212/security-skill/tree/main/encoding-toolkit
Command: npx skills add https://github.com/woohyun212/security-skill --skill encoding-toolkit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Encoding and decoding data across multiple formats can be tedious and error-prone; this toolkit automatically detects the encoding format of an input string and performs conversions across Base64, URL encoding, Hex, HTML entities, ROT13, and JWT using only standard tools.

Core Features & Use Cases

  • Auto-detect encoding formats in a single pass and reveal possible decodings to aid quick analysis of web traffic, logs, or captured tokens.
  • Provide multi-format conversions (Base64, URL, Hex, HTML entities, ROT13) and include JWT header/payload inspection for quick token analysis.
  • Useful in incident response, capture-the-flag challenges, and forensic workflows to flatten multi-layer encodings for human or automated processing.

Quick Start

Run the encoding-toolkit on an input string to auto-detect and convert across common encodings.

Frequently Asked Questions about encoding-toolkit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I decode a Base64 string to inspect its payload?

To decode a Base64 string, the toolkit auto-detects the encoding format and converts it to reveal the original payload. It handles Base64, URL encoding, Hex, HTML entities, and ROT13 in a single pass for quick analysis.

Can I inspect JWT header and payload without manually splitting the token?

Yes, you can inspect JWT header and payload without manual splitting because the toolkit includes built-in JWT payload inspection. It automatically decodes the token structure to aid in quick security investigations and token analysis.

What is the easiest way to convert Hex or URL-encoded data from web traffic logs?

The easiest way to convert Hex or URL-encoded data is to run the toolkit directly on the input string. It flattens multi-layer encodings from web traffic or logs into human-readable formats using standard tools.

Do I need any special dependencies to auto-detect and resolve multi-layer encodings?

You do not need special dependencies to auto-detect and resolve multi-layer encodings; the toolkit relies solely on python3, base64, and xxd. These standard tools provide robust handling with clear error messaging.

Does this encoding toolkit handle ROT13 and HTML entity conversions for CTF challenges?

The encoding toolkit does handle ROT13 and HTML entity conversions, making it highly useful for CTF challenges. It automatically detects these formats and performs the necessary decode conversions to extract hidden data.