Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

skill-template

Estrellas19

Forks5

Actualizado1 de julio de 2026 a las 15:22

One to three sentences describing what this skill does and the conditions under which an agent should activate it. Start with a verb, name the tools and artifacts involved, and end with the trigger phrasing (e.g. "Activates for requests involving ...").

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

meltedinhex

meltedinhex/analyst-ai-pack

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

Explorador de archivos

4 archivos

SKILL.md

readonly

name	skill-template
description	One to three sentences describing what this skill does and the conditions under which an agent should activate it. Start with a verb, name the tools and artifacts involved, and end with the trigger phrasing (e.g. "Activates for requests involving ...").
domain	cybersecurity
subdomain	malware-analysis
tags	["tag-one","tag-two","tag-three","tag-four","tag-five"]
version	1.0.0
author	analyst-ai-pack
license	Apache-2.0
mitre_attack	["T0000"]
d3fend	["D3-XXX"]
car	["CAR-0000-00-000"]
references	["Source title — https://example.com/primary-source"]

Skill Title

Replace every bracketed placeholder. Delete this quote block and the Safety & Handling section if the skill does not touch live malware samples. Keep section order.

When to Use

[Concrete trigger: a situation where this skill is the right tool]
[Another trigger]
[Another trigger]

Do not use for [explicit out-of-scope cases]; instead reach for [the correct skill].

Prerequisites

[Tool + minimum version, with install/download pointer]
[Lab/environment requirement]
[Prior knowledge or input artifact required]

Safety & Handling

(Sample-handling skills only — delete otherwise.)

Work only inside an isolated analysis VM with no path to production or the internet unless deliberately routed through a controlled gateway.
Store samples encrypted or in password-protected archives (password infected); never leave live samples loose on disk.
Defang indicators (hxxp://, 1.2.3[.]4) in any output that leaves the lab.
Never execute a sample on the host or detonate outside the sandbox.

Workflow

Step 1: [Action]

[What to do and why.]

# Real, runnable command — not pseudocode
tool --do-the-thing sample.bin

Step 2: [Action]

[Explanation.]

# Original example code

Step 3: [Action]

[Explanation.]

Validation

[How to confirm the analysis/hunt produced a correct, trustworthy result]
[A cross-check or second method to corroborate findings]

Pitfalls

[Common mistake and how to avoid it]
[Evasion trick or false-positive trap to watch for]

References

See references/api-reference.md for tooling details and the full list of sources this skill was synthesized from.
[Key external source — title and URL]

Más de este repositorio

mismo repositorio

analyzing-android-dex-malware

meltedinhex/analyst-ai-pack

Reverses Android malware: unpacking APKs, decompiling DEX bytecode to readable Java, auditing the manifest for abused permissions and components, and locating dynamically loaded or native payloads. Activates for requests to analyze an APK, decompile DEX, or investigate a suspicious Android app.

2026-06-2519

analyzing-api-call-traces

meltedinhex/analyst-ai-pack

Analyzes API call traces from a sandbox or API monitor (JSON) to group calls by category, reconstruct high-level behaviors (process injection, file drops, network, crypto), and flag suspicious call sequences. Activates for requests to analyze an API trace, interpret sandbox API logs, or identify behavior from Win32/Native API calls.

2026-06-2519

analyzing-authenticode-signatures

meltedinhex/analyst-ai-pack

Analyzes Windows Authenticode signatures on PE files: checking for a signature, reading the signer certificate chain, detecting revoked/expired/stolen certs, and recognizing signature-stripping and catalog-signing abuse. Activates for requests to analyze a code signature, verify Authenticode, or assess signer trust on a PE.

2026-06-2519

analyzing-banking-trojan-webinjects

meltedinhex/analyst-ai-pack

Analyzes banking trojan webinject configurations to extract targeted institutions, injected JavaScript/HTML, and data-theft hooks, mapping the fraud workflow. Activates for requests to analyze banking trojan webinjects, parse a webinject config, or map targeted banks and credential-theft injections.

2026-06-2519

analyzing-compiled-python-malware

meltedinhex/analyst-ai-pack

Analyzes Python-based malware packaged as PyInstaller/py2exe executables by detecting the packer, locating the embedded archive, and identifying bundled .pyc modules for extraction and decompilation. Activates for requests to analyze compiled Python malware, unpack a PyInstaller binary, or extract pyc modules from a frozen Python executable.

2026-06-2519

analyzing-cryptominer-malware

meltedinhex/analyst-ai-pack

Analyzes cryptojacking/coinminer malware by extracting mining pool endpoints (stratum), wallet addresses, algorithm and miner identifiers (XMRig and forks), and persistence or resource-control settings from static strings and config. Activates for requests to analyze a cryptominer, extract mining pool and wallet IOCs, or identify coinminer configuration.

2026-06-2519

name	skill-template
description	One to three sentences describing what this skill does and the conditions under which an agent should activate it. Start with a verb, name the tools and artifacts involved, and end with the trigger phrasing (e.g. "Activates for requests involving ...").
domain	cybersecurity
subdomain	malware-analysis
tags	["tag-one","tag-two","tag-three","tag-four","tag-five"]
version	1.0.0
author	analyst-ai-pack
license	Apache-2.0
mitre_attack	["T0000"]
d3fend	["D3-XXX"]
car	["CAR-0000-00-000"]
references	["Source title — https://example.com/primary-source"]

Skill Title

Replace every bracketed placeholder. Delete this quote block and the Safety & Handling section if the skill does not touch live malware samples. Keep section order.

When to Use

[Concrete trigger: a situation where this skill is the right tool]
[Another trigger]
[Another trigger]

Do not use for [explicit out-of-scope cases]; instead reach for [the correct skill].

Prerequisites

[Tool + minimum version, with install/download pointer]
[Lab/environment requirement]
[Prior knowledge or input artifact required]

Safety & Handling

(Sample-handling skills only — delete otherwise.)

Work only inside an isolated analysis VM with no path to production or the internet unless deliberately routed through a controlled gateway.
Store samples encrypted or in password-protected archives (password infected); never leave live samples loose on disk.
Defang indicators (hxxp://, 1.2.3[.]4) in any output that leaves the lab.
Never execute a sample on the host or detonate outside the sandbox.

Workflow

Step 1: [Action]

[What to do and why.]

# Real, runnable command — not pseudocode
tool --do-the-thing sample.bin

Step 2: [Action]

[Explanation.]

# Original example code

Step 3: [Action]

[Explanation.]

Validation

[How to confirm the analysis/hunt produced a correct, trustworthy result]
[A cross-check or second method to corroborate findings]

Pitfalls

[Common mistake and how to avoid it]
[Evasion trick or false-positive trap to watch for]

References

See references/api-reference.md for tooling details and the full list of sources this skill was synthesized from.
[Key external source — title and URL]