By wshobson
Reverse engineer binaries, triage and unpack malware, extract and analyze firmware, perform memory forensics, and dissect network protocols using specialized AI agents and skills for authorized security research, CTFs, and incident response.
Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering. Masters firmware extraction, analysis, and vulnerability research for routers, IoT devices, automotive systems, and industrial controllers. Use PROACTIVELY for firmware security audits, IoT penetration testing, or embedded systems research.
Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification. Handles static/dynamic analysis, unpacking, and IOC extraction. Use PROACTIVELY for malware triage, threat hunting, incident response, or security research.
Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis. Masters IDA Pro, Ghidra, radare2, x64dbg, and modern RE toolchains. Handles executable analysis, library inspection, protocol extraction, and vulnerability research. Use PROACTIVELY for binary analysis, CTF challenges, security research, or understanding undocumented software.
Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques, when implementing anti-debugging protections for CTF challenges, when reverse engineering packed binaries, or when building security research tools that need to detect virtualized environments.
Master binary analysis patterns including disassembly, decompilation, control flow analysis, and code pattern recognition. Use when analyzing executables, understanding compiled code, or performing static analysis on binaries.
Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when analyzing memory dumps, investigating incidents, or performing malware analysis from RAM captures.
Master network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation. Use when analyzing network traffic, understanding proprietary protocols, or debugging network communication.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
⚡ Updated for Opus 4.6, Sonnet 4.6 & Haiku 4.5 — Three-tier model strategy for optimal performance
🎯 Agent Skills Enabled — 147 specialized skills extend Claude's capabilities across plugins with progressive disclosure
A comprehensive production-ready system combining 182 specialized AI agents, 16 multi-agent workflow orchestrators, 147 agent skills, and 95 commands organized into 75 focused, single-purpose plugins for Claude Code.
This unified repository provides everything needed for intelligent automation and multi-agent orchestration across modern software development:
Each plugin is completely isolated with its own agents, commands, and skills:
Example: Installing python-development loads 3 Python agents, 1 scaffolding tool, and makes 16 skills available (~1000 tokens), not the entire marketplace.
Add this marketplace to Claude Code:
/plugin marketplace add wshobson/agents
This makes all 75 plugins available for installation, but does not load any agents or tools into your context.
Browse available plugins:
/plugin
Install the plugins you need:
# Essential development plugins
/plugin install python-development # Python with 16 specialized skills
/plugin install javascript-typescript # JS/TS with 4 specialized skills
/plugin install backend-development # Backend APIs with 3 architecture skills
# Infrastructure & operations
/plugin install kubernetes-operations # K8s with 4 deployment skills
/plugin install cloud-infrastructure # AWS/Azure/GCP with 4 cloud skills
# Security & quality
/plugin install security-scanning # SAST with security skill
/plugin install comprehensive-review # Multi-perspective code analysis
# Full-stack orchestration
/plugin install full-stack-orchestration # Multi-agent workflows
Each installed plugin loads only its specific agents, commands, and skills into Claude's context.
You install plugins, which bundle agents:
| Plugin | Agents |
|---|---|
comprehensive-review | architect-review, code-reviewer, security-auditor |
javascript-typescript | javascript-pro, typescript-pro |
python-development | python-pro, django-pro, fastapi-pro |
blockchain-web3 | blockchain-developer |
# ❌ Wrong - can't install agents directly
/plugin install typescript-pro
# ✅ Right - install the plugin
/plugin install javascript-typescript@claude-code-workflows
"Plugin not found" → Use plugin names, not agent names. Add @claude-code-workflows suffix.
Plugins not loading → Clear cache and reinstall:
rm -rf ~/.claude/plugins/cache/claude-code-workflows && rm ~/.claude/plugins/installed_plugins.json
npx claudepluginhub wshobson/agents --plugin reverse-engineeringJavaScript and TypeScript development with ES6+, Node.js, React, and modern web frameworks
Documentation generation, code explanation, and technical writing with automated doc generation and tutorial creation
Modern Python development with Python 3.12+, Django, FastAPI, async patterns, and production best practices
Technical debt reduction, dependency updates, and code refactoring automation
Systems programming with Rust, Go, C, and C++ for performance-critical and low-level development
872 on-demand security skills for CTF, pentest, bug bounty, DFIR, detection engineering, cloud, identity, and red/blue team work. Skills are plain Markdown and activate by task without permanently consuming context. Bundles vendored skills under mixed licenses (MIT, Apache-2.0, CC-BY-SA-4.0) — see per-source attribution in .claude/skills/SKILLS.md.
Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.
Clarify ambiguous requirements by asking questions before implementing. Only when invoked explicitly.
Security testing skills for AI-assisted IDEs and coding agents. 25 vulnerability patterns across code execution, prompt injection, data exfiltration, and trust persistence.
Specialized security review subagent
🛡️ Security Engineer — Security Engineer + Adversarial Security Specialist