Menu
Team collaboration — share findings, merge analysis, generate reports
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Next-generation 0day discovery & exploit development — comprehensive code analysis, allocator vulnerabilities, compiler-induced bugs, SIMD/vector issues, JIT vulnerabilities, custom allocator attacks, ASLR/kASLR bypass, UAF, OOB, RCE with exploit generation, privilege escalation, backdoor establishment
Next-generation 0day discovery — novel overflow patterns, allocator exploits, compiler-induced bugs, bounds-check bypass, SIMD/vector overflows, JIT vulns, custom allocator attacks, ASLR/kASLR bypass, UAF, OOB, RCE with weaponized exploit generation, privilege escalation, backdoor establishment
Container escape vulnerability discovery — Docker, Kubernetes, container runtime exploitation, namespace isolation bypass, privilege escalation through container boundaries
Crypto implementation analysis — weak algorithms, side-channels, key management flaws, padding oracles, random generation failures, implementation bugs
IoT device security analysis — firmware extraction, RTOS exploits, hardware interfaces, protocol vulnerabilities, side-channel attacks, update mechanism exploitation
Industrial control system security — Modbus, DNP3, IEC 104, Ethernet/IP, PLC exploitation, control logic manipulation, sensor/actuator attacks, ICS protocol analysis
| name | Collaborative Analysis |
| description | Team collaboration — share findings, merge analysis, generate reports |
| tags | ["collaboration","team","sharing","merge","reporting"] |
| allowed_tools | ["export_analysis","list_shared_analyses","generate_team_report","merge_analyses","add_finding"] |
Task: Collaborative Analysis. Work with your team to analyze binaries efficiently.
A snapshot contains:
A finding represents:
1. Document your findings with `add_finding`
2. Rename important functions
3. Add comments for complex code
4. Export with `export_analysis`
5. Share the JSON file with your team
1. Use `list_shared_analyses` to see available snapshots
2. Load interesting snapshots
3. Review their findings and annotations
4. Learn from their approach
5. Build upon their work
1. Collect multiple snapshot files
2. Use `merge_analyses` with file paths
3. Review merged findings (deduplicated)
4. Use `generate_team_report` for final report
5. Share with stakeholders
Export your current analysis to a shareable snapshot.
Parameters:
analyst - Your name or handlesummary - Brief description of your analysisExample:
export_analysis(
analyst="SecurityResearcher",
summary="Analyzed driver.sys, found 3 critical IOCTL vulnerabilities"
)
Output: File path where snapshot was saved
List all available snapshots in the collaboration directory.
Output: Table of snapshots with metadata
Generate a markdown report from one or more snapshots.
Parameters:
snapshot_path - Path to specific file, or "all" to mergeExample:
# Report single analysis
generate_team_report("/path/to/snapshot.json")
# Merge and report all analyses
generate_team_report("all")
Combine multiple snapshots into a merged report.
Parameters:
snapshot_paths - Comma-separated file paths, or empty for auto-mergeExample:
# Auto-merge all
merge_analyses()
# Merge specific files
merge_analyses("/path/s1.json,/path/s2.json,/path/s3.json")
Add a manual finding to be included in snapshots.
Parameters:
address - Function or code addresstitle - Short descriptive titleseverity - critical, high, medium, low, infocategory - overflow, uaf, crypto, network, api, etc.description - Detailed descriptionExample:
add_finding(
address=0x140001000,
title="Stack Buffer Overflow in IOCTL 0x222003",
severity="critical",
category="overflow",
description="Unbounded memcpy from user input to 128-byte stack buffer"
)
HandleIoctlReadPhysMem)Generated team reports include:
[Analyst A] exports initial analysis:
export_analysis(analyst="Alice", summary="Initial driver analysis")
[Analyst B] reviews and extends:
list_shared_analyses() # Sees Alice's work
# Reviews findings, adds more
[Analyst C] merges and generates report:
merge_analyses() # Combines all work
generate_team_report("all") # Final report
[Team] reviews report and assigns priorities
Snapshots are stored in:
~/.spectra/collab/{binary_name}_{timestamp}.json