Linux plugins

Provides structured guidance for executing cybersecurity operations across penetration testing, incident response, threat hunting, cloud security, and malware analysis, with step-by-step procedures and tool usage.

Ship production infrastructure faster using AWS serverless, Kubernetes, Terraform, and Docker patterns with safe deployment strategies, GitOps workflows, and environment setup guidance.

Conduct full-spectrum security assessments: audit web apps with Burp Suite, test cloud infrastructure across AWS/GCP, enumerate Linux systems for privilege escalation, and apply OWASP threat modeling with DevSecOps compliance review.

Run a full security engineering workflow: web app penetration testing with Burp Suite, cloud infrastructure assessment on AWS/GCP, Linux privilege escalation, DevSecOps auditing for Docker/Kubernetes, threat modeling with STRIDE/PASTA, and OWASP-based vulnerability analysis.

Deploy and manage cloud infrastructure with automated CI/CD pipelines, container orchestration (Docker, Kubernetes), and infrastructure-as-code (Terraform). Includes AWS serverless patterns, environment setup, and production deployment best practices.

Conduct comprehensive security assessments and penetration testing across web applications, APIs, cloud infrastructure, and Linux systems, using OWASP methodologies, SAST scanning, and threat modeling for DevSecOps.

Build, debug, and deploy n8n automation workflows with AI agent guidance, covering node configuration, expression validation, error handling, sub-workflow design, and production deployment on Linux via Docker Compose.

Diagnose and resolve CentOS Linux issues with RHEL-compatible commands, SELinux-aware practices, and firewalld — step-by-step system triage using systemctl, journalctl, and dnf/yum.

Diagnose and resolve Fedora Linux issues using dnf, systemctl, journalctl, and SELinux-aware guidance with step-by-step triage and remediation.

Triage and resolve Debian Linux system issues with apt, systemd, AppArmor, and dpkg. Provides step-by-step remediation, verification, and rollback commands for common problems.

Triage and resolve Arch Linux problems by executing pacman, systemd, and journalctl commands. Covers rolling-release diagnostics, package fixes, service recovery, and system rollback.

Run AI models locally with Ollama — automates installation, GPU setup, and hardware-based model selection, then provides Python/Node.js/REST clients for private inference at zero cost.

Manage FairDB PostgreSQL production servers with automated health checks, incident response playbooks, disk space recovery, VPS hardening, PostgreSQL installation and tuning, backup configuration, and compliance auditing

Perform authorized security testing, bug bounty hunting, and penetration testing across web, API, mobile, cloud, infrastructure, and smart contract environments. Includes reconnaissance, exploitation, authentication testing, and reporting automation.

Execute disciplined red-team and pentest operations using a kill-chain engine with scope enforcement, evidence validation, and cross-engagement pattern memory. Includes skills for AD, cloud, containers, mobile, web, AI/ML, CI/CD, malware analysis, and exploit development.

Manage Hetzner Cloud infrastructure using hcloud CLI with guided decision trees and command suggestions for servers, networks, firewalls, load balancers, volumes, DNS, and storage.

Reproduce ML papers from arxiv, debug failing experiments with evidence-first protocols, compare training runs across tracking systems with epoch-aligned analysis, and audit paper claims against code and data. Includes LaTeX environment setup, literature gap analysis, and pre-launch training run verification.

Execute 183+ pentesting and OSINT tools (nmap, Sherlock, amass, nuclei, sqlmap) via natural language — ask Claude to recon a target, scan networks, or investigate usernames, and it auto-selects the right tool and backend (Bash, WSL, or Docker).

Perform full-spectrum cybersecurity operations including reconnaissance, vulnerability assessment, exploit development, reverse engineering, malware analysis, threat hunting, incident response, and security auditing across network, web, cloud, mobile, and OT/ICS environments.

Interact with interactive terminal programs — REPLs, debuggers, installers, TUIs — by starting PTY sessions, typing keystrokes, waiting for screen stability, and capturing output for programmatic control and automation.

Manage and run LLM inference workloads on NVIDIA DGX Spark clusters: install the CLI, configure multi-node clusters with SSH mesh, launch inference servers from recipe registries, monitor GPU/CPU metrics live, run benchmarks, and stop workloads.

Schedule recurring and one-off Claude Code tasks (skills, prompts, scripts) with cross-platform support, safety controls, and notifications. Manage task lifecycle (add, list, pause, resume, remove) and review execution results and logs.

Schedule recurring Claude Code tasks using native OS schedulers (launchd, crontab, Task Scheduler) with cron expressions or natural language. Manage tasks: create, list, view logs, remove, trigger, and check scheduler health.

Capture desktop screenshots (full screen, app/window, or region) on macOS and Linux via Python/Bash scripts. Useful when explicit screenshot requests are made or when tool-specific capture is unavailable.

Assess and implement CIS Controls v8 cybersecurity baseline across IG1/IG2/IG3, with compliance checks, evidence checklists for cloud and OS platforms, and safeguard guidance for all 18 controls and 153 safeguards.

Structure coding work into goal packages with outcome contracts and evidence gates, execute plans sequentially through agent and reviewer gates, and set up a hardened Linux VPS for remote agent workflows.

Analyze log files or pasted content by compressing lines into patterns, detecting anomalies, scoring severity, and suggesting fixes using the ctrlb-decompose CLI tool, which is automatically installed on macOS/Linux if needed.

Validates and enforces quality for Bash and shell scripts using ShellCheck, with best practices for portability, error handling, and defensive coding

Audit and pentest AI-assisted IDEs against 46 vulnerability patterns spanning code execution, prompt injection, data exfiltration, sandbox escapes, MCP poisoning, supply chain risks, and terminal command filter bypasses.

Automate FedRAMP 20X compliance assessments with Key Security Indicators, continuous monitoring, and machine-readable policy syncing from official FedRAMP docs.

Takes a project from idea to live URL in a single session: scaffolds, builds, deploys, and debugs with autonomous decision-making for routine tasks and user approval for costly actions. Includes memory, progress tracking, and plain-language explanations.

SSH into remote servers with agent forwarding to execute commands, monitor logs, restart services, and manage Docker containers, enabling remote infrastructure management from Claude Code.

Enforce modern shell script best practices and auto-format using shfmt, covering POSIX, Bash, mksh, and Bats dialects via configurable rules and EditorConfig integration.

Manage a self-hosted homelab: configure credentials, monitor service health (Plex, Radarr, Sonarr, Unraid, Docker, ZFS, system resources), manage media libraries and downloads (qBittorrent, SABnzbd, Prowlarr), and organize notes/bookmarks/documents (Memos, Linkding, Paperless-ngx, ByteStash). Includes deep web research via NotebookLM and git workflow automation.

Write, audit, and maintain Bash 5.1+ and POSIX shell scripts with modern best practices, structured logging, Shellcheck linting, shfmt formatting, shunit2/shellspec testing, and version-specific patterns for 5.1-5.3. Includes dedicated agents for script development and security auditing.

Provides 872 on-demand cybersecurity skills for CTF, pentest, bug bounty, DFIR, detection engineering, cloud security, and red/blue team operations. Skills activate by task without consuming context, covering vulnerability assessment, exploitation, forensics, threat hunting, and compliance.

Build Linux kernels and boot QEMU VMs with custom NUMA/CXL/NVDIMM topologies, managing the full VM lifecycle for kernel testing workflows.

Develop, build, flash, and debug embedded firmware for STM32, ESP32, GD32, and RISC-V MCUs using CMake, IAR, Keil, Makefile, PlatformIO, and ESP-IDF build systems, with CAN/Modbus/VISA instrument debugging, static analysis, RTOS-aware debugging, and a multi-agent competition workflow for structured firmware development.

Develop, test, lint, and audit Perl 5.30+ scripts with environment management via perlbrew, CPAN dependency handling, Perl::Critic linting, PerlTidy formatting, and Test::More-based testing. Includes specialized agents for CLI architecture and security auditing.

Analyze sosreport archives to diagnose Linux system issues including kernel panics, OOM events, network misconfigurations, Open vSwitch problems, resource exhaustion, and configuration errors.

Debug, integrate, and port embedded firmware for MCUs, RTOS, bootloaders, peripherals, and communication protocols across ARM Cortex-M/R, RISC-V, and 8051 architectures.

Replace hardcoded paths like ~/.appname with XDG Base Directory standard paths for config, data, cache, and state files in Python CLI tools and cross-platform apps using platformdirs.

Edit, convert, organize, and analyze image libraries at scale — batch resize, format-shift (AVIF, WebP, JPEG XL), auto-correct exposure/white-balance/stretch, strip or embed EXIF, deduplicate by hash or perceptual similarity, bucket by resolution/aspect-ratio/orientation/camera/date, and generate AI graphics or diagrams via Fal AI.

Orchestrate development workflows with infinite-context focus tasks, prompt optimization, agent/skill creation, quorum code reviews, and rules management across sessions.

Manage Docker containers across Windows, Linux, and macOS with cross-platform expertise including Windows Git Bash path conversion, Dockerfile optimization, multi-stage builds, security hardening, and the latest Docker Engine 28 features for production-ready deployments.

Expert guidance for command-line excellence: shell scripting, Unix pipelines, text processing with sed/awk/grep, permissions management, and CLI tool composition. Automates robust script generation and stream processing workflows.

Query 400+ AI agents on the Teneo Protocol network via CLI—browse available agents, execute tasks like token swaps, social media scraping, crypto analytics, and product search, all with x402 USDC micropayments and WebSocket daemon support.

Orchestrate multi-AI swarms in tmux: launch roundtable discussions with Codex, Claude, and Gemini, conduct isolated multi-round voting with consensus analysis, then promote conclusions to an execute-mode swarm with supervisor dispatch and role-based task delegation.

Diagnose and resolve Haskell Language Server (HLS) issues within Claude Code, including PATH/installation problems, startup failures, unresponsive processes, resource limits, and LSP errors via status checks.

Build native Linux packages (.deb, .rpm, .apk, .pkg.tar.zst) from a single PKGBUILD or yap.json, with cross-compilation, signing, SBOM generation, and dependency-graph inspection. Also automates Docker container deployment and management.

Run professional penetration tests and red-team operations with 27 specialist agents, 6 engagement commands, and 5 reference skill libraries covering reconnaissance, exploitation, post-exploitation, Active Directory attacks, cloud security, web/API testing, wireless attacks, social engineering, and report generation.

Manage LimaCharlie environments for MSSP and SOC workflows: onboard organizations, manage data adapters, deploy EDR sensors, investigate threats, tune false positives, generate multi-tenant dashboards and reports, and track fleet coverage with risk scoring.

Run network diagnostics, reconnaissance, and load testing from Claude Code using Rust-based CLI tools for DNS queries, traceroute, ping, port scanning, bandwidth monitoring, and HTTP benchmarking

Intelligence-driven job application system that automates resume tailoring, interview preparation, company OSINT, offer evaluation, and employment crisis management with jurisdiction-specific legal support.

Manage HPC jobs on Slurm clusters by submitting, monitoring, and controlling job queues directly from Claude Code.

Manage environment modules (Lmod) on Linux systems, allowing dynamic loading, unloading, and querying of modulefiles to configure software environments for development and HPC workflows.

Manage cmux terminal multiplexer workspaces from Claude: batch-create daily project layouts, organize multi-tab sessions into panes by AI-classified groups, snapshot and restore full workspace trees with Claude sessions, preview Markdown files in a side panel, and set up predefined layouts for skill or frontend development.

Orchestrate a team of AI agents via aweekly file-based calendar plans. Each Claude Code subagent runs on a scheduled heartbeat, following monthly goals and weekly tasks drawn from markdown specs. Supports agent hiring, lifecycle management, task delegation, recurring agendas, budget tracking, and optional Slack relay.

Deploy and manage a hardened 3X-UI VPN server on Ubuntu/Debian VPS with Docker Compose, nginx proxy, ACME certificates, SSH tunneling, UFW hardening, and Xray VLESS over XHTTP on port 443, including fresh installs, repairs, client management, and safe updates.

Automates AI ecosystem workflows for Baidu PaddlePaddle/ERNIE: partner registration, product certification review, social media monitoring, lead generation, technical proposal generation, and market intelligence collection across Chinese platforms.

Manage LimaCharlie EDR operations from the CLI: create and test D&R detection rules, investigate security cases and noisy alerts, task sensors for live response and fleet-wide payload deployment, monitor sensor health across organizations, and integrate Velociraptor DFIR workflows.

Manage a bento VPS over SSH: install on a fresh Ubuntu/Debian server, deploy and update application stacks, register AI-provider API keys, and run health checks.

Automate Linux KDE Plasma 6 Wayland desktops with GUI actions (click, type, screenshot), window management, virtual desktop control, and AT-SPI2 accessibility queries via MCP tools, enabling AI-driven desktop automation, E2E testing, and kiosk control.

Develop, test, and debug InterSystems IRIS applications with ObjectScript and Python — compile code, run SQL queries, manage interoperability productions, configure Docker containers, measure test coverage, and navigate codebases via MCP tools.

Deploy Hysteria2 and Xray/Trojan proxy nodes on Linux via SSH with automated server probing, TLS setup, and TunPilot registration. Run SSH diagnostics for IP reputation (risk scores, streaming unlock) and network performance (latency, speed, BGP).

Orchestrate offensive security operations: manage Neo4j intel graphs, coordinate multi-agent CVE/code analysis teams, preserve exploit state during compaction, and generate structured CTF/pentest writeups with failure analysis.

Build and manage a complete Home Assistant smart home platform: deploy Ubuntu servers with Docker, configure automations, sensors, cameras, energy monitoring, and local LLM integration via Ollama, all through natural language commands and YAML generation.

Automatically launches a browser-based diff viewer (cmux) on Claude Code session start, allowing you to view code diffs in a browser without manual setup.

Lint, review, scaffold, and validate GNOME Shell extensions for EGO (extensions.gnome.org) compliance. Runs automated checks on metadata, schemas, code patterns, and packaging, then produces a readiness report with pass/fail scoring before submission.

Automatically resizes oversized screenshot images to prevent Claude API dimension errors and session corruption, with backup and recovery of corrupted chat history files.

Manage FairDB PostgreSQL service operations: health checks, incident response, automated recovery, VPS hardening, backup configuration, and compliance auditing.

Develop and manage decentralized applications on the Freenet peer-to-peer network with AI-assisted workflows for code review, release management, debugging, and integration testing.

Run browser behavior tests from natural language files, execute test suites with AI-powered failure analysis, and automate browser and desktop interactions via CLI or MCP server — all without external API keys.

Submit GPU compute jobs to a Slurm cluster by generating sbatch scripts with GPU type selection and log management.

Instrument running binaries with Frida for dynamic analysis: trace function calls, hook APIs, inspect memory, enumerate modules, and perform instruction-level tracing on live processes across Linux, iOS, and Android.

Configure and optimize nginx web servers: set up load balancing with upstream servers and health checks, harden SSL/TLS with secure protocols and ciphers, analyze configs for performance and security issues, and receive strategic recommendations from an agent specializing in nginx architecture.

Solves CTF challenges across categories (crypto, forensics, stego, web, pwn, reversing, OSINT, misc) with specialized skills and multi-agent team orchestration for parallel investigation and live competition management.

Generate production-grade Bash scripts with defensive error handling, POSIX compliance, and integrated testing for CI/CD pipelines, system utilities, and automation tasks.

Monitor Claude Code sessions in real time with a dashboard showing cost breakdowns, token usage, tool performance metrics, context utilization, and optimization tips. Customize display presets and integrate into the statusline for ongoing awareness.

Sends desktop notifications from Ghostty terminal when Claude Code needs user input, such as permission prompts, authorization dialogs, or idle alerts.

Repairs oversized images in Claude Code session files to prevent API dimension errors, with automated scanning, replacement, and backup workflows

Run product research simulations by generating AI personas with behavioral psychology, then simulate user responses to pricing, features, onboarding, and retention decisions. Ask a product question and receive a research synthesis.

Creates, runs, and manages Apple Shortcuts programmatically from the command line, including generating Shortcuts as plist XML files without the GUI app, and controlling execution with input/output handling and permission prompts.

Debug factory production issues by checking status, pulling logs, diagnosing root causes, and suggesting fixes, automatically activating on related phrases like 'debug factory' or 'factory down'.

Supports Go development with GoFrame best practices, automated code review of Go, C++, and Ansible, enforces Ginkgo/Gomega testing standards, and troubleshoots remote SSH servers including Kubernetes and containers.

Start, stop, restart, and monitor services running in dedicated TMUX panes without cluttering your current view, with automatic environment initialization on session start.

Audit and optimize dotfiles for zsh, tmux, git, and nvim — scans configurations for security issues, performance bottlenecks, and outdated tools, then recommends modern replacements and best-practice improvements.

Manage Omarchy desktop themes by editing colors.toml, with automatic color propagation to Alacritty, Kitty, Ghostty terminals, Hyprland, Waybar, and btop. Install and remove themes via CLI.

Sends desktop notifications via notify-send when Claude Code needs user input, enabling you to step away from the terminal and return only when action is required.

Fixes image pasting in Claude Code on WSL2 by automatically converting BMP clipboard images to PNG via a background daemon. Guides through setup of wl-clipboard and ImageMagick, verifies WSLg, and provides troubleshooting.

Provision hardened Hetzner VPS instances with automated security setup (UFW, fail2ban, SSH hardening) and Claude Code pre-installed, plus cost estimation, status monitoring, and one-command destruction.

Write production-grade shell scripts with defensive patterns, POSIX compliance, Bats testing, and ShellCheck linting for reliable automation in CI/CD and system administration.

Reverse engineer binaries, analyze malware, and perform firmware security audits using disassembly, memory forensics, and network protocol analysis. Supports anti-debugging bypasses, unpacking, IOC extraction, and static/dynamic analysis with industry tools.

Watch Twitch, YouTube, and Kick streams with audio and chat inside Claude Code while coding. Streams play via mpv and chat appears in a tmux pane, keeping your terminal workspace intact.

Run and control interactive CLI programs (TUI apps like htop, lazygit; REPLs like python, bun; pagers like less, bat) inside Zellij terminal multiplexer, enabling keyboard-driven interactions that would otherwise hang or fail in a non-interactive shell.

Run rigorous performance investigations with baselines, profiling, and controlled experiments. Identify code paths, profile CPU/memory hotspots, generate flame graphs, and produce evidence-backed recommendations with abandoned hypotheses and next steps.