SkillRadar

Reverse Skill is an open-source, client-neutral cybersecurity skills router for AI coding agents performing reverse engineering, authorized penetration testing, security research, and CTF work. It processes a task through structured routing rules and a primary master-routing workflow, initializes authorization and network scope before action, selects a scenario-specific skill, checks available tools, MCP servers, and scripts, and records a timeline, evidence-to-finding path, report, and field journal rather than relying on guessed commands. Supported scenarios include APK and mobile analysis, binary and .NET reverse engineering, frontend JavaScript and encrypted-parameter analysis, DSL-VM reverse engineering, HTTP capture and request replay, malware and YARA analysis, penetration testing, attack-chain orchestration, case review, CTFs, firmware and IoT security, patch-diff analysis, exploit development, EDR bypass research, API and GraphQL security, supply-chain and SBOM security, and LLM security. Its documented tool ecosystem includes JADX, Apktool, Frida, IDA Pro, radare2, Ghidra, BurpSuite, and YARA. The repository provides platform-specific setup and tool-index refresh scripts for Windows, Linux, macOS, and Kali Linux, with prerequisites including a JDK, Node.js, and Python. It supports Claude Code, Codex, Cursor, OpenCode, and other compatible clients while keeping client adapters separate from the routing core, and includes cross-platform CI, routing regression tests, structure and supply-chain checks, and generated skill-navigation indexes.

Skill Cabinet is a local catalog for agent skills installed on a machine. It scans user-level skill locations such as .agents, .claude, .codex, .cursor plugins, Hermes profiles, and other ~/.* /skills folders, then lets users filter skills by drawer, metadata, risk, invocation mode, and status; inspect rendered or source bodies, YAML frontmatter, extra files, symlinks, duplicates, origins, and broken links; and review disk usage. It runs with Node 20 or later through npx skill-cabinet, starting a server bound to 127.0.0.1 and opening the catalog in a browser. Users can quarantine skills to ~/.skill-cabinet/quarantine and restore them, or delete individual skills or groups; deletion removes folders, files, or symlinks from the scanned locations, while a symlink's target is retained. The project is distributed under the MIT license.

Agent Skills is a curated skill registry and npm-based CLI for extending AI coding agents such as Claude Code, Cursor, Copilot, and Antigravity with packaged instructions, templates, and reference files. The CLI fetches a catalog, lets users search and select skills, caches downloads locally, and installs them to selected agents by copying or symlinking them at global or project scope; it also supports updating, removing, auditing, and managing cached skills. The repository describes the catalog as an open-source, human-curated library with CI static analysis, content hashing, lockfiles, path isolation, symlink guards, sanitization, audit logging, and Snyk Agent Scan checks. It also includes an MCP server that exposes progressive-disclosure tools for listing, searching, reading, and fetching skill files. The CLI source is MIT-licensed; maintainer-authored skills are generally CC BY 4.0, while third-party skills retain their own licenses.

Skills is a command-line tool for the open agent skills ecosystem. It installs reusable instruction sets defined in SKILL.md files into supported coding agents such as OpenCode, Claude Code, Codex, Cursor, and others. The `npx skills` CLI resolves skills from GitHub, GitLab, other Git URLs, local paths, or direct file and archive URLs; lists available skills, selects individual skills, and installs them project-wide or globally by symlink or copy. It can also generate a prompt for a skill without installing it, launch a supported agent with that prompt, search for skills, update or remove installations, and create new SKILL.md templates. Skills use YAML frontmatter with a name and description, and the CLI discovers them in standard agent and repository skill directories. The project is licensed under the MIT License.

Codex Security is an OpenAI CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in authorized code repositories. It scans directories and codebases, including repository changes, uses AI-assisted analysis to trace attack paths and apply custom threat models, validates findings, and can generate reviewable patches and exports in SARIF, JSON, and CSV formats. The CLI supports CI use with an API key and can stop builds at a selected severity threshold. The package also supports configurable deep scans, worker and subagent counts, time limits, containerized bulk scans, and a preview findings service. The service stores findings and embeddings in SQLite, provides paginated listings and a read-only dashboard, identifies potential duplicates through embedding similarity, and allows completed findings to be published and deduplicated through the CLI or SDK. It requires Node.js 22.13.0 or later and Python 3.10 or later, and can use OpenAI or other documented inference providers.