Skill Create
Scaffold a complete portable skill package that follows the Skill Tap contract. Use when creating a new reusable agent skill, turning a repeated workflow into a skill, or generating SKILL.md plus portable agents, a matching bin command, PEP 723 scripts, references, and validation-ready structure.
Nano Banana Image
Generate or edit images through Google's Gemini image API using environment-provided credentials, explicit output paths, and reproducible request metadata.
Mcp Server Upgrade
Audit and upgrade an existing MCP implementation to current FastMCP 3 patterns while preserving behavior and verifying protocol compatibility.
Windows Ai Controls
Audit, disable, and restore selected Windows AI features through reviewable registry and policy changes with explicit elevation and verification.
Native Decompile
Decompile a native binary (ELF/PE/Mach-O) to C-like pseudocode with rizin's built-in Ghidra decompiler (pdg over all functions). Static: analyses and decompiles, never runs the target. Prereq-gated on rizin/r2; honest blind spot with an install hint when absent. Pair with elf/pe/macho-analyze.
Project Tracker
Create or update compact durable Markdown memory for long-running projects, including current objective, status, workstreams, attempts, decisions, important artifacts, open questions, and next actions. Use when capturing project state, reconstructing context, preparing a handoff, recording a pivot, or making future sessions resumable across engineering, research, automation, writing, and other mu…
Ord Lookup
Resolve Windows DLL ordinal imports to exported symbol names from a vendored static database (ws2_32/wsock32, oleaut32). Stripped or by-ordinal imports become readable. Pure static lookup — reads no input file, runs no target.
Frida Trace
DYNAMIC: spawn a target under Frida and trace a curated set of network/exec/file/crypto API calls (dynamic instrumentation, no debugger). Logs the calls the sample makes. EXECUTES the target; consent-gated. BYO frida-trace (pip install frida-tools).
Architecture For Comprehension
Evaluate and map a repository's architecture for coherence, discoverability, predictable execution paths, local reasoning, onboarding friction, accidental complexity, and cognitive load. Use for system-level architecture reviews, newcomer usability probes, repository legibility scorecards, or requests to make a codebase easier to understand as a whole.
Cron Job Manager
Inspect, render, install, or remove named user crontab jobs with explicit mutation confirmation and marker-bounded edits. Use on Unix-like systems when a user wants recurring local command scheduling through cron rather than a platform-specific automation service.
Exec Observe
DYNAMIC: run a target in a fresh working directory with a timeout and capture its behavior — exit code, stdout/stderr, wall-clock time, and files it creates. EXECUTES the target; use the tracer skills for syscall, API, or network visibility. Run only where you accept the target's risk.
Pyscylla
Dump, realign, and rebuild Import Address Tables of Windows PE binaries through Rekit's Python adapter for the external libscylla engine. Supports process enumeration, live dump, IAT search/parse/fix, XML tree round-trip, and reference scanning. Windows-only; bring your own arch-matched libscylla DLL and comply with its upstream GPL-3.0-only license. DYNAMIC on a live process (ReadProcessMemory)…
Hex View
Non-interactive hex dump of a file or byte range (offset + hex + ASCII), with total size and sha256. Pure-Python stdlib, no dependencies. Reads bytes only — never executes the input.
Pe Unmap
Convert between PE file alignments via hasherezade's pe_unmapper (libpeconv): UNMAP a memory dump back to raw-file alignment, MAP raw→virtual, or REALIGN. Essential for finishing a memory dump into a loadable EXE. Windows-only vendored binary. Static: reads bytes, writes a converted file, runs no target.
Js Covert Scan
Detect covert/evasive tactics in JavaScript/TypeScript: Unicode steganography (invisible/zero-width/bidi chars, confusable-homoglyph punctuation and letters), XOR/char-code/escape string hiding, and environment-keyed conditional behavior (timezone/locale/geo/proxy). Emits judgment-free parallax atoms (XFRM.UNICODE / XFRM.BITWISE / XFRM.ENCODE / LOAD.EVAL / ENVI.ENVCHECK), each tagged method=\"cov…
Dex Dump
Dump decrypted DEX and CompactDex images from a RUNNING Android app's memory with Rekit's clean-room Apache-2.0 device tool (ptrace on a rooted aarch64 device). Defeats class-loading packers by reading the image after the app decrypts it. Does not launch the app or execute a sample on the host. BYO rooted device + adb; build the device tool from the included Rust source.
Diaphora Diff
Match functions between two builds of a program with Diaphora, recover symbol names from a build that has them onto stripped builds, and emit per-function pseudocode diffs documenting what changed. Use for version lineage archaeology, renaming stripped binaries from an unstripped sibling, and reconstructing undocumented source changes between releases. Export needs IDA; diffing and reporting are…
Native Disassemble
Disassemble PE, ELF, or Mach-O binaries to function-oriented assembly without executing them. Automatically uses llvm-objdump/objdump, then falls back to Rizin/radare2 analysis for stripped binaries. Writes the complete listing to disassembly.txt and reports instruction/function-line counts.
Pyc Decompile
Decompile Python bytecode (.pyc / compiled code objects) back to source with decompyle3. Best for CPython 3.7-3.8 bytecode (e.g. PyInstaller-extracted payloads); reports honestly when the bytecode version is out of range. Static: reads bytecode, never runs it.
Gitops
Drive git through plain verbs — clone, status, commit, branch, switch, stash, push, pull, remote-add, merge, cherry-pick, tag, worktree-add/list/remove, undo, discard, reset-hard — for harnesses or smaller models that can't or shouldn't hand-write git commands, refspecs, or worktree plumbing. Every op runs git non-interactively and returns ONE structured JSON result (branch, ahead/behind, staged…
Net Capture
DYNAMIC: capture a target's network traffic to a pcap while it runs (tcpdump), then summarize packets, talking-to IPs, and DNS queries. Point --iface at a sinkholed interface for safer detonation. EXECUTES the target and captures on an interface (usually needs root); consent-gated.
Emulate Code
Emulate a raw code/shellcode blob on a virtual CPU (x86/x64/arm/arm64) with Unicorn and report the final register state, instruction count, and memory writes. Contained: the bytes run on an emulated CPU, not the host (memory-only; no host syscalls unless wired) — the safe way to 'run' shellcode or an isolated function.
Ios Dump
Dump a decrypted iOS app binary (FairPlay 砸壳) from a jailbroken device via frida-ios-dump: attaches to the running app with Frida and writes the decrypted Mach-O from memory so it can be loaded into IDA/Ghidra/Hopper. BYO the frida-ios-dump toolchain + a jailbroken device with frida-server. Does NOT execute a sample on the host — attaches to an app the operator already launched on a connected dev…
Shellcode Stub
CONSTRUCT: wrap a raw shellcode blob into a runnable native PoC — a tiny C loader compiled with clang, whose exit code is the shellcode's return value. --os picks the loader: posix (mmap RW → memcpy → mprotect RX → call, default) or windows (VirtualAlloc RWX → memcpy → call → ExitProcess). --emit c dumps just the loader source. The last link in the write chain: asm-assemble → shellcode-stub → exe…
Dotnet Analyze
Static triage of .NET / CLR managed assemblies (.dll/.exe) with dnfile: runtime version, assembly + referenced assemblies, type/method counts, IL-only vs mixed-mode, strong-name signing, unmanaged module refs, and the P/Invoke (DllImport) native-API surface classified by capability. Emits DOTNET.* atoms. Parses CLR metadata only — never loads or runs the assembly.
Pe Analyze
Static triage of Windows PE binaries (EXE/DLL) with pefile: machine/arch, subsystem, entry/imagebase, sections + per-section entropy (packing) and RWX flags, imports classified by capability (inject/exec/network/anti-debug/persist/crypto), exports, TLS callbacks, overlay, and Authenticode presence. Emits BINARY.* atoms. Reads structure only — never runs the binary.
Forensic Archive Carve
Recover structurally complete classic ZIP and RAR4 archives from raw disk images or media blobs, preserving absolute byte offsets, SHA-256 identities, validation method, and duplicate relationships in a JSONL manifest. Use after disk-image-scan or for direct archive carving from unallocated space. Pure Python; reads the source image without mounting or modifying it.
Ioc Extract
Pull indicators of compromise from a file or directory (URLs, IPs, domains, emails, md5/sha1/sha256 hashes, .onion, CVEs, BTC/ETH addresses, registry keys) — from text and from strings mined out of binaries. Every value is DEFANGED in output (hxxp://evil[.]com, 1[.]2[.]3[.]4) so a report can't ship a live IOC. Pure stdlib, read-only; never resolves or fetches anything.
Pyinstaller Extract
Carve the Python out of a PyInstaller executable: locate the appended CArchive, extract every entry, and unpack the inner PYZ into individual .pyc files with reconstructed headers — ready for pyc-decompile. Pure stdlib. Static: parses archive structures and marshal.loads the PYZ TOC (deserialization, not execution); never runs the executable or the extracted code.
Bin Triage
Fast format-agnostic first look at any file, pure-stdlib: identify format from magic bytes (and route to the right analyzer), chunked Shannon entropy (packed/encrypted regions), string extraction with interesting-string surfacing (URLs/IPs/onion/shell/paths/exec-APIs), and an embedded-signature scan (mini-binwalk: ZIP/gzip/ELF/PDF at non-zero offsets). When given an output dir, also CARVES large…
Binwalk Carve
Carve and recursively extract embedded files from a firmware image or blob (filesystems, bootloaders, nested archives) with binwalk. The heavy sibling of bin-triage's embedded-signature preview. Prereq-gated on binwalk; honest blind spot with an install hint when absent.
Intellidiff
Compare files exactly or with deliberate text normalization, compare directory trees, find duplicate files, calculate SHA-256 and CRC32 identities, and read bounded line ranges. Use for change analysis, duplicate/orphan discovery, checksum verification, or focused source inspection. Pure-stdlib and read-only; never executes input or follows symlinks.
Js String Decode
Statically decode constant-key XOR / charCode string obfuscation in JavaScript so a downstream scanner can read the hidden strings (C2 URLs, victim domains, timezone names, shell commands). Finds decode sites with regex/heuristics — a `String.fromCharCode(x ^ KEY)` / `x ^ KEY` applied over a STATIC encoded literal (int array, string, or `\\xNN`/`\\uNNNN` blob, incl. a `Buffer.from(p,\"base64\")`/…
Qiling Emulate
Emulate a FULL binary (PE/ELF/Mach-O/…) with the Qiling framework: loads the program and emulates the OS/syscalls against a BYO rootfs, so a Linux ELF or Windows PE can be detonated on this host cross-arch/cross-OS WITHOUT native execution or a VM. Contained: syscalls hit Qiling's emulation, not the host kernel. Complements emulate-code (raw shellcode, no OS) and exec-observe (native run).
Js Deobfuscate
Deobfuscate and unpack obfuscated JavaScript (webcrack): reverses string arrays, folds constants, deflattens control flow, unminifies, and splits webpack/browserify bundles. Encoded string arrays are decoded by running the decoder inside an isolated-vm sandbox — not the whole program.
Native Lift
Lift a bounded raw x86, amd64, or aarch64 machine-code region into LLVM IR or bitcode with pinned Remill. Use for semantic analysis of an isolated function, shellcode, or decoder stub. Static and offline: never executes the bytes; rejects whole executable containers.
Js Sourcemap Extract
Recover the original, un-minified sources from a JavaScript source map's sourcesContent — turning a bundled/minified .js back into a readable file tree. Accepts a .map (JSON) or a .js that references one via //# sourceMappingURL (inline data: map or sibling .map). Pure stdlib, read-only; path-traversal guarded (strips webpack:// and ../).
Protection Survey
Statically survey source trees for anti-analysis and protection patterns across C/C++, Objective-C, assembly, Rust, Go, Python, JavaScript/TypeScript, Java/Kotlin, C#, and Swift. Finds anti-debug/VM checks, runtime API resolution, executable-memory changes, early execution, custom sections, inline assembly, opaque/flattened control flow, stack strings, obfuscating build flags, injection primitive…
R2 Recon
Cross-format static recon of a native binary with radare2: drives r2 headless (-q -c, JSON commands) in one session for binary info, sections + per-section entropy, imports, exports, entry points, analysed functions, and decoded strings (incl. UTF-16). r2 auto-detects ELF/PE/Mach-O/DEX/..., so one skill covers them all and reports the relational view r2 is good at. Classifies imports by capabilit…
Disk Image Scan
Read-only forensic inventory of raw disk images and large media blobs: hash a selected byte range, parse MBR/GPT partition maps, validate ext/NTFS/FAT/ISO filesystem candidates, and locate archive and evidence signatures with absolute byte and LBA offsets. Use before carving or filesystem recovery to map evidence-bearing regions. Pure Python; never mounts or modifies the image.
Dotnet Decompile
Decompile a .NET / CLR assembly (IL) back to C# with the ilspycmd dotnet tool. Static: reads metadata + IL, never runs the assembly. Prereq-gated on ilspycmd (needs the .NET runtime); honest blind spot with an install hint when absent. Pair with dotnet-analyze for the P/Invoke surface.
Cc Build
CONSTRUCT: compile C/C++/ObjC source into a native artifact (exe / .o / .s / LLVM IR) with clang (falls back to cc/gcc). For building PoCs, test harnesses, stubs, and shared libs rekit needs. Cross-compiles via --target/--arch. Compiles only — does NOT run the result (feed the output to exec-observe/emulate-code yourself). BYO C compiler.
Macho Analyze
Static triage of Mach-O binaries (macOS/iOS executables, dylibs, bundles, kexts) with macholib: arch/fat slices, file type, PIE, linked dylibs, RPATH, code-signature presence, and encryption (LC_ENCRYPTION_INFO). Emits BINARY.* atoms. Reads structure only — never runs the binary.
Elf Analyze
Static triage of ELF binaries (Linux/BSD) with pyelftools: class/arch/type, sections + per-section entropy (packing), needed libraries, RPATH/RUNPATH, imported symbols classified by capability (network/exec/inject/load/crypto), and hardening (PIE/NX/RELRO). Emits BINARY.* atoms. Reads structure only — never runs the binary.
Secrets Scan
Find leaked credentials in files: high-signal provider patterns (AWS/GitHub/Slack/Google/Stripe/OpenAI/SendGrid/Twilio/JWT/PEM private keys) plus a generic high-entropy secret-assignment catch with placeholder filtering. Matches are REDACTED in output — never echoes a full secret. Pure stdlib, read-only.
Mcp Server Create
Scaffold and verify a portable FastMCP 3 server project with declarative configuration, library-first logic, tests, and safe transport defaults.
Agent Create
Scaffold a portable Markdown role prompt for a focused subagent or independent review role. Use when creating an agent definition, extracting a specialist role from a workflow, or defining explicit inputs, evidence standards, constraints, and output without depending on one orchestration vendor.
Local Ocr Vlm
Run OCR on local images through an OpenAI-compatible local vision endpoint (LM Studio, vLLM/vmlx). Use when you need offline, on-machine document OCR into markdown, including batch directory processing, without sending images to a hosted service.
Google Calendar Cli
Authenticate a desktop Google Calendar client, inspect calendars and events, query free/busy data, and create or delete events through a reviewable plan with hash-bound explicit confirmation. Use when a user wants direct Google Calendar CLI automation without an MCP server.
Project Retrospective
Turn a completed or paused body of work into an evidence-based retrospective covering goals, outcomes, decisions, pivots, effective practices, friction, failed approaches, unfinished work, open questions, and concrete improvements. Use with conversation history, project trackers, session notes, plans, logs, or user-specified files and folders across engineering, research, writing, automation, and…
External Ip
Resolve and cross-check a machine's public IP address through bounded external services with clear disagreement and network-failure reporting.
Jvm Decompile
Decompile Java / Android bytecode (.apk / .dex / .jar / .class) back to Java source with jadx. Static: reads bytecode, never runs it. Prereq-gated on the jadx CLI (which needs a JRE); when jadx is absent the skill reports the honest blind spot with an install hint.
Reverse Brief
Reconstruct a concise implementation brief from an existing codebase or artifact when original requirements are missing, stale, or incomplete.
Play Tic Tac Toe
Play, resume, inspect, or clear a terminal tic-tac-toe game with persistent user-scoped state and deterministic aggressive or defensive AI. Use when a user asks to play tic-tac-toe, supplies a board position, makes a numbered move, or wants to resume a saved match.
Joern Slice
Build a bounded code property graph and focused data-flow or usage slice with pinned Joern. Use when reverse engineering or security analysis needs interprocedural source context beyond syntax trees. Static and offline; never executes target code.
Docker Cleanup
Survey and safely reclaim Docker disk usage with category-specific confirmation, export options, and platform-aware virtual disk handling.
Filesystem Recover
Recover allocated, deleted, or all files from an ext, NTFS, FAT, or other Sleuth Kit-supported filesystem at an explicit image sector offset. Use after disk-image-scan validates a filesystem start. Runs tsk_recover without mounting the source, emits an fls metadata-address/MFT record-to-name map, safely renames unambiguous OrphanFile-record placeholders from surviving metadata, and hashes recover…
Deliverable Hygiene
Keep or restore a codebase as a finished, human-readable work product by separating agent scratch from source, pruning excess documentation and tests, deleting obsolete compatibility paths, and validating that process residue does not leak into the deliverable. Use during implementation cleanup or when a repository has visibly drifted.
Frida Android Instrument
DYNAMIC: inspect an authorized Android app's Java runtime through Frida: list loaded classes, enumerate method signatures, or install observation-only hooks that report arguments and return values without intentionally changing them. Use for runtime discovery when static APK/DEX analysis is insufficient. Attaches to or spawns the app on a BYO Frida-capable USB device; executes the target and is c…
Ghidra Decompile
Decompile a native binary (ELF/PE/Mach-O) with full Ghidra headless analysis — higher fidelity than native-decompile (rizin pdg) for hard targets. Runs analyzeHeadless with a bundled Ghidra script that decompiles every function to one C file. Static: analyses + decompiles, never runs the binary. Prereq-gated on Ghidra's analyzeHeadless (needs a JRE 17+).
Tetromino Guideline Review
Audit or plan a single-player falling-tetromino implementation against an explicit historical gameplay baseline covering field geometry, seven-bag generation, controls, lock-down, scoring, spins, game-over, UI, and audio. Use for evidence-based implementation reviews or remediation plans; this is an unofficial engineering checklist, not Tetris certification.
Py Covert Scan
Detect covert/evasive tactics in Python: hidden code execution (exec/eval/compile of base64/hex/zlib/marshal output, pickle deserialization, dynamic import, chr()/\\x string building), environment-keyed evasion (platform/VM/sandbox/analyst detection, timezone/locale, debugger/tracer checks), and Unicode steganography. Emits judgment-free parallax atoms (XFRM.UNICODE / XFRM.ENCODE / LOAD.EVAL / LO…
Macos Screenshot
Check macOS screen-recording readiness and capture a full display, selected region, window ID, or interactive selection to a caller-chosen image path using the native screencapture command. Use for local visual evidence, UI debugging, or screenshot capture outside browser-specific tooling.
Skill Python Portability
Audit and modernize Python scripts inside portable skills with PEP 723 dependency metadata, stable uv launchers, standard-library fallbacks, and no hidden virtualenv or global-package assumptions. Use when a skill invokes Python directly, has undeclared imports, fails outside its author’s machine, or needs contract-compliant bin and scripts structure.
Work Product Audit
Audit repositories and public documentation for internal notes, defensive explanations, unexplained assertions, stale project residue, hidden assumptions, and generated-sounding meta commentary. Use when scanning launch material, cleaning public prose, or deciding which reasoning belongs outside the finished deliverable.
Mcp Testing
Test FastMCP servers through direct unit tests, in-memory MCP clients, elicitation handlers, and focused deployed-transport integration checks.
Frida Api Trace
DYNAMIC: spawn an authorized target under Frida and trace selected exported APIs using signatures parsed from a user-supplied API Monitor XML tree. Reports typed argument names, safe string previews, return values, hook coverage, and bounded events. The proprietary definition corpus is never shipped and stays gitignored. EXECUTES the target; consent-gated. BYO frida-tools and legally obtained def…
Bin Table Diff
Find fixed-stride record tables compiled into a binary (song lists, level tables, item stats), infer each column's type from the data, extract them to JSON/CSV, and diff two builds record by record. Use when content lives in static tables rather than data files and a function-level diff would miss it entirely — added or removed entries, rebalanced values, regional catalogue swaps. Pure stdlib and…
Mcp Elicitations
Implement and test FastMCP user elicitation and MCP Apps interaction patterns with explicit accept, decline, cancel, validation, and security behavior.
Publish Ready
Prepare a repository for public release by removing development residue and dead paths, consolidating documentation, tightening generated-sounding prose, checking for secrets and local-machine references, and proving that surviving quickstarts and checks work. Use before open-sourcing, sharing, handing off, demonstrating, or releasing a project.
Engineering Diagrams
Create or revise evidence-backed engineering diagrams that explain system context, component ownership, data movement, runtime interactions, state transitions, or trust boundaries. Use when a visual model would make architecture, behavior, lifecycle, dependencies, or security boundaries easier to understand or review.
Mcp Server Design
Design FastMCP 3 tools, providers, transforms, authorization, background work, output contracts, and human approval boundaries for a production server.
Skill Refine
Audit and improve a portable skill for contract compliance, triggering, progressive disclosure, script correctness, portability, safety, and verification. Use for skill reviews, pre-publication checks, broken-skill diagnosis, quality scoring, or modernizing an older package to the Skill Tap contract.
Bindiff
Match functions across two builds of a binary with Google BinDiff: per-function similarity and confidence, renamed or moved functions, and functions added or removed. Use for patch diffing (what did this update actually change?), porting symbols from a named build onto a stripped one, malware variant comparison, and finding a known function again after a recompile moved every address. Complements…
Excalidraw
Create, patch, validate, and render Excalidraw diagrams through deterministic JSON and layout checks before delivery.
Github Publish
Publish a local project to GitHub or update an existing GitHub repository with deliberate visibility, scoped commits, appropriate ignore rules, useful metadata, and verified CI. Use when creating a repository, connecting a local checkout to GitHub, preparing the first push, publishing local changes, or repairing incomplete repository setup.
Intellidiff
Compare files or directory trees, detect exact duplicate files, calculate SHA-256 checksums, normalize text for semantic comparison, and read targeted line ranges. Use when determining whether artifacts are identical, finding orphaned or changed files between folders, deduplicating collections, inspecting backups, or explaining content differences without modifying the inputs.
Minimal Executable
CONSTRUCT: generate a deterministic, conservative no-runtime executable that exits with a chosen status: Linux ELF (x86_64/i386), Windows PE (PE32+/PE32), or a static macOS arm64 Mach-O research artifact. Emits bytes, verifies its own header invariants, measures/hash-inspects the result, and labels proof honestly. Builds only; never runs the artifact.
Apple Reminders
Manage Apple Reminders on macOS through a native EventKit command with explicit confirmation for mutations and machine-readable results.
Code Quality Review
Review or improve source code for reader-facing maintainability across naming, functions, models, comments, error handling, tests, external boundaries, and concurrency. Use for broad code-quality audits, behavior-preserving cleanup, generated-code humanization, refactoring prioritization, or focused requests to reduce local cognitive load without redesigning the whole architecture.
Asm Assemble
CONSTRUCT: assemble asm text (a file or --code) into machine-code bytes with the LLVM/clang integrated assembler — x64/x86/arm64/arm — emitted as hex, a C array, a raw blob, or JSON. Backed by clang (no fragile native python binding), so it works cross-arch anywhere clang does. The write-side partner of emulate-code: assemble a snippet, then run it on the virtual CPU. Transforms text→bytes; runs…
Codebase Archeology
Investigate and preserve archived, inherited, abandoned, or poorly understood codebases by mapping project variants, toolchains, build assumptions, duplicate artifacts, historical value, and modernization options. Use for legacy project intake, repository preservation, compatibility work, build recovery, false-start comparison, or deciding what should be kept, merged, archived, or retired.
Skill Node Portability
Audit and modernize Node.js scripts inside portable skills with explicit dependencies, committed lockfiles, local npm commands, compiled runnable JavaScript, and no global-tool assumptions. Use when a skill contains JavaScript or TypeScript, relies on global npm installs, lacks deterministic setup, or fails when copied to another machine.
Emulation Session
Create and operate persistent Unicorn or Qiling emulation sessions across separate agent, CLI, or MCP calls. Use for iterative reverse engineering that requires stepping, register or memory changes, address/syscall/API hooks, traces, branch snapshots, or repeated inspection without restarting the emulated target. Contained execution only; never runs the target natively.
Windows Elevation
Choose and execute the narrowest Windows elevation method while preserving output, with a guarded SYSTEM fallback for exceptional protected operations.
Google Maps Query
Query current Google Maps Platform geocoding, Places, and Routes APIs from a thin JSON CLI using an environment-supplied API key and explicit billable-call execution. Use when a user needs place IDs, coordinates, place details, text search, or route distance and duration from Google Maps data.
System Recon
Collect a bounded, read-only system inventory for troubleshooting while identifying privilege gaps and avoiding secrets or invasive enumeration.
Claude Session Handoff
Build a redacted, evidence-backed continuation brief from a Claude Code JSONL transcript. Use when resuming an interrupted agent task, handing work to another agent, or reconstructing objectives, edits, validation, and remaining work.
Codebase Writeup
Analyze a codebase and produce an evidence-backed technical narrative or onboarding guide covering purpose, stack, architecture, execution paths, data flow, external integrations, setup, safe-change guidance, operational constraints, and important gaps. Use for engineering handoffs, unfamiliar-project explainers, README or contributor documentation, technical writeups, due-diligence summaries, or…
Decision Records
Create, recover, review, or update durable decision records that preserve context, constraints, considered alternatives, chosen direction, consequences, evidence, uncertainty, and reconsideration criteria. Use for architecture decisions, product or operational tradeoffs, design-rationale interviews, superseding stale records, or reconciling documented intent with actual practice.