一键在 Manus 中运行任何 Skill

general

星标76

分支23

更新时间2026年5月12日 19:53

Strong activation entry for AlgoKiller general trace-analysis mode. Bind an ARM64 trace, force-load the trace-analysis methodology, and answer field semantics / execution flow / detection-point / data-flow questions.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

icloudza

icloudza/algokiller-plugin

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

相关职业SOC

基于 SOC 职业分类

其他计算机职业计算机与数学类职业·SOC 15-1299

SKILL.md

readonly

name	general
description	Strong activation entry for AlgoKiller general trace-analysis mode. Bind an ARM64 trace, force-load the trace-analysis methodology, and answer field semantics / execution flow / detection-point / data-flow questions.
argument-hint	<absolute_trace_path> <task description>
disable-model-invocation	true

You are now entering AlgoKiller general trace-analysis mode. Open-ended questions over ARM64 trace evidence. Discipline still matters — drift = hallucination.

MANDATORY FIRST STEPS — execute in order:

Load the full methodology from the ak:trace-analysis skill. Read it completely before any tool call. It contains search-key selection rules, single-purpose-per-search discipline, call-boundary parsing rules, field-semantics layering, execution-flow extraction, and detection-point analysis methodology.
Parse the user input below. The first whitespace-separated token is the absolute path to the ARM64 trace log; the rest is the task description.
Call MCP tool ak.bind_trace with that path and mode="general". Do not proceed if bind fails.
Proceed with the methodology from the skill. Every trace_search / trace_context return will include a discipline_reminder field — read it and respect it.

NON-NEGOTIABLE RULES (skill expands each):

Pick a SINGLE purpose per search (locate / origin / consumer / branch / boundary / verify / exclude). Do not reuse one result for multiple roles.
Open call / hexdump / ret hits as data-flow boundaries: function name, args, return, hexdump address/length/bytes, x0–x7 set-before, consumers-after.
hexdump ASCII is a search hint only — field boundaries come from left-side hex bytes + address + length.
Separate confirmed / high-confidence inference / open question in every finding.
Do NOT ask the user for missing field names / business semantics / extra samples — search and infer first.
Stop once the user's actual question is answerable; one cross-check pass on the key conclusion is enough.
write_artifact with .py source ONLY if the task requires code reproduction. Otherwise deliver text/markdown directly, or write .md report for long deliverables.

User input:

$ARGUMENTS

同仓库更多 Skills

同仓库

ciphertext-recovery

icloudza/algokiller-plugin

ARM64 trace 密文还原方法论。当用户给出一段 ARM64 执行 trace 文件并要求从某段密文/header/token/加密结果反向还原加密、签名或编码算法时使用。提供候选算法穷举、key schedule 提取、轮函数提取、魔改检测、表查找证据、闭环验证的完整方法论。激活此 skill 前应已通过 ak MCP 的 bind_trace 工具绑定 trace 文件并选择 mode=ciphertext。

2026-05-1476

trace-analysis

icloudza/algokiller-plugin

ARM64 trace 通用证据分析方法论。当用户给出一段 ARM64 执行 trace 文件并询问字段含义、执行流、检测点、数据来源、call 边界、buffer 生命周期等开放问题（不属于纯密文还原）时使用。提供搜索键选择、单一目的搜索纪律、call 边界解析、字段语义分层、执行流抽取与检测点分析的完整方法论。激活此 skill 前应已通过 ak MCP 的 bind_trace 工具绑定 trace 文件并选择 mode=general。

2026-05-1476

ciphertext

icloudza/algokiller-plugin

Strong activation entry for AlgoKiller ciphertext-recovery mode. Bind an ARM64 trace, force-load the ciphertext-recovery methodology, and start cipher / algorithm recovery from a target ciphertext.

2026-05-1276

name	general
description	Strong activation entry for AlgoKiller general trace-analysis mode. Bind an ARM64 trace, force-load the trace-analysis methodology, and answer field semantics / execution flow / detection-point / data-flow questions.
argument-hint	<absolute_trace_path> <task description>
disable-model-invocation	true

You are now entering AlgoKiller general trace-analysis mode. Open-ended questions over ARM64 trace evidence. Discipline still matters — drift = hallucination.

MANDATORY FIRST STEPS — execute in order:

Load the full methodology from the ak:trace-analysis skill. Read it completely before any tool call. It contains search-key selection rules, single-purpose-per-search discipline, call-boundary parsing rules, field-semantics layering, execution-flow extraction, and detection-point analysis methodology.
Parse the user input below. The first whitespace-separated token is the absolute path to the ARM64 trace log; the rest is the task description.
Call MCP tool ak.bind_trace with that path and mode="general". Do not proceed if bind fails.
Proceed with the methodology from the skill. Every trace_search / trace_context return will include a discipline_reminder field — read it and respect it.

NON-NEGOTIABLE RULES (skill expands each):

Pick a SINGLE purpose per search (locate / origin / consumer / branch / boundary / verify / exclude). Do not reuse one result for multiple roles.
Open call / hexdump / ret hits as data-flow boundaries: function name, args, return, hexdump address/length/bytes, x0–x7 set-before, consumers-after.
hexdump ASCII is a search hint only — field boundaries come from left-side hex bytes + address + length.
Separate confirmed / high-confidence inference / open question in every finding.
Do NOT ask the user for missing field names / business semantics / extra samples — search and infer first.
Stop once the user's actual question is answerable; one cross-check pass on the key conclusion is enough.
write_artifact with .py source ONLY if the task requires code reproduction. Otherwise deliver text/markdown directly, or write .md report for long deliverables.

User input:

$ARGUMENTS