Agent building

Install, upgrade, recommend, or combine the AlignFirst CLI, skills, docmap, and workspace in a consumer repository, or through a companion directory that…

Inspect and explain bmad-loop run artifacts under `.bmad-loop/runs/`.

Plan and run manual tests of the project's running app.

Plan verification and validation campaigns for simulation codes using manufactured solutions, canonical benchmark problems, grid/time refinement, uncertainty…

Create FAIR-minded reproducibility bundles for materials simulations by collecting input/output file inventories, hashes, units, engine versions, structure…

Rigorously evaluate an Agent Skill end-to-end across ANY coding-agent CLI — verify its scripts emit the documented numbers (deterministic checks), test…

Install AI agent skills as roles & behaviors from any source — local folder, GitHub, GitLab, SSH git URL.

Install, update, remove, or inspect optional Codex agent profiles for pstack, including explicit model-role configuration.

Mobile competitive-game security research for 和平精英、王者荣耀、PUBG Mobile、Honor of Kings、Game for Peace and similar Android/iOS titles.

Detection engineering research — analyze AV/EDR detection logic, profile signature/heuristic/behavioral/cloud classifiers, develop minimal bypass proofs…

CTF Pwn and vulnerability research — crash triage, primitive analysis, and exploit engineering for stack/heap/kernel/sandbox targets.

Create reproducible technical research workspaces for reverse engineering, penetration testing, memory analysis, fuzzing, malware analysis, protocol research…

Malware analysis and threat intelligence — unpacking, configuration extraction, behavior profiling, C2 protocol decoding, IOC extraction, YARA/Sigma rule…

Cross-platform process memory, dump, runtime, heap, pointer-chain, signature, structure, and memory-forensics analysis for Windows, Linux, Android, Unity…

Evidence-driven penetration and attack-surface engineering for web applications, APIs, networks, identity systems, Active Directory, cloud, containers…

Deep reverse engineering for PE, ELF, Mach-O, firmware, drivers, APK/DEX, .NET, Go, Rust, Unity IL2CPP, Unreal, packed binaries, custom VMs, and undocumented…

Headless, invisible Playwright browser over MCP for scripted automation - testing and verifying web apps, scripted data extraction, accessibility snapshots…

建立或修改 subagent 定義檔（~/.claude/agents/*.md 或專案 .claude/agents/*.md）前必讀的流程 skill——frontmatter 欄位語意、tools 欄陷阱、載入時機、上線前 smoke test。觸發：「建 / 寫 / 加一個 agent」「改 agent…

Run one repo's ticket batch in a terminal worker inside a target worktree through Herdr — Claude Code by default, or Codex CLI or pi when the user picks that…

Analyzes bootkit and advanced rootkit malware that infects the Master Boot Record (MBR), Volume Boot Record (VBR), or UEFI firmware to gain persistence below…

Designs and documents structured incident response playbooks that define step-by-step procedures for specific incident types aligned with NIST SP 800-61r3 and…

Evaluate whether a popular or hyped agent/dev tool is worth adopting or borrowing from, measured against the user's OWN existing stack — never in the abstract.

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource…

Deobfuscates malicious JavaScript code used in web-based attacks, phishing pages, and dropper scripts by reversing encoding layers, eval chains, string…