← all repositories
yaklang/hack-skills

101 Hacking Skills Packaged for AI Agents

It distills sprawling public security research into a hierarchical library of 101 structured skills so AI agents can load only the attack knowledge they need.

2.2k stars CSS Agents
hack-skills
Velocity · 7d
+32
★ / day
Trend
accelerating
star history

What it does

hack-skills is a structured knowledge base that distills public security research into 101 discrete markdown skills across 14 domains—from web app attacks and Active Directory to blockchain and AI/ML security. Instead of raw payload dumps, it compresses methodologies into a three-tier hierarchy: a master router entry, six category entries, and deep topic playbooks meant to be loaded on demand by an AI agent.

The interesting bit

The project ships in three synchronized forms: plain GitHub source, a static fuzzy-searchable web UI, and an AES-256 encrypted ZIP with a public password so markdown can be used offline or behind strict AV. That distribution awareness—treating a knowledge base as software that needs deployment—is unusual for a collection of markdown files.

Key highlights

  • 101 skills covering web, API, auth, OS privilege escalation, AD attacks, mobile, binary exploitation, reverse engineering, cryptography, blockchain, AI/ML, networking, and forensics
  • Hierarchical loading: one master entry routes to six category entries, which then load specific deep skills only when needed
  • Static web UI with weighted fuzzy search, tier filters (P0/P1/P2), and field qualifiers like category:auth or tier:deep
  • Distilled from public sources (PayloadsAllTheThings, hacktricks, ctf-wiki, etc.) into small, stable, auditable methodology files rather than raw dictionaries
  • Uniform structure: every skill lives at skills/{semantic-identifier}/SKILL.md for predictable programmatic access

Verdict

Worth bookmarking if you are building a security-focused AI agent or LLM toolchain and need a maintainable, routable source of offensive knowledge. Skip it if you are looking for a standalone exploitation framework—this is purely a structured knowledge layer.

Frequently asked

What is yaklang/hack-skills?
It distills sprawling public security research into a hierarchical library of 101 structured skills so AI agents can load only the attack knowledge they need.
Is hack-skills open source?
Yes — yaklang/hack-skills is open source, released under the MIT license.
What language is hack-skills written in?
yaklang/hack-skills is primarily written in CSS.
How popular is hack-skills?
yaklang/hack-skills has 2.2k stars on GitHub and is currently accelerating.
Where can I find hack-skills?
yaklang/hack-skills is on GitHub at https://github.com/yaklang/hack-skills.

heatdrop uses Google Analytics to see which pages get read — nothing else. Your call. How we handle data.