Analyzing Linux Elf Malware
Analyzing Linux Elf Malware is an agent skill (a SKILL.md file) from mukul975/Anthropic-Cybersecurity-Skills. Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through static… It works with Claude Code, Codex, Cursor, Gemini CLI and GitHub Copilot and has 35,033 GitHub stars across a repository of 6 listed skills.
Data as of from the GitHub API; description from the skill's SKILL.md. Report an error
Add this skill
Claude
This repository is a Claude Code plugin marketplace. In Claude Code:
/plugin marketplace add mukul975/Anthropic-Cybersecurity-Skills
/plugin install cybersecurity-skills@anthropic-cybersecurity-skillsIn the Claude apps, zip the analyzing-linux-elf-malware folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
cp -r Anthropic-Cybersecurity-Skills/skills/analyzing-linux-elf-malware .agents/skills/analyzing-linux-elf-malware # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
cp -r Anthropic-Cybersecurity-Skills/skills/analyzing-linux-elf-malware .cursor/skills/analyzing-linux-elf-malware # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), code.claude.com/docs/en/plugin-marketplaces (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Analyze malicious Linux ELF binaries — botnets, cryptominers, ransomware, and rootkits targeting Linux servers, containers, and cloud infrastructure — through static analysis, dynamic tracing, and reverse engineering of x86_64 and ARM samples. Use when investigating Linux malware, triaging a suspicious ELF binary, assessing a compromised Linux server, or analyzing container-targeted malware. Do not use for Windows PE binary analysis; use PEStudio, Ghidra, or IDA for Windows malware.
When it triggers
- Use when investigating Linux malware, triaging a suspicious ELF binary, assessing a compromised Linux server, or analyzing container-targeted malware.
More skills in mukul975/Anthropic-Cybersecurity-Skills
6 skills are listed from this repository.
Implementing Secret Scanning With Gitleaksmukul975/Anthropic-Cybersecurity-Skills
Analyzing API Gateway Access Logsmukul975/Anthropic-Cybersecurity-Skills
Analyzing Azure Activity Logs For Threatsmukul975/Anthropic-Cybersecurity-Skills
Analyzing Indicators Of Compromisemukul975/Anthropic-Cybersecurity-Skills
Analyzing iOS App Security With Objectionmukul975/Anthropic-Cybersecurity-Skills
Similar skills
More security skills
Chatgpt App Builder
mcp-use/mcp-use
Build, modify, debug, migrate, review, or verify TypeScript MCP servers and MCP Apps with mcp-use.
Active · last commit Oct 21, 2026
OfficialSecurityTypeScriptFixing Metadata
ibelick/ui-skills
Audit and fix HTML metadata including page titles, meta descriptions, canonical URLs, Open Graph tags, Twitter cards, favicons, JSON-LD structured data, and robots directives.
Active · last commit Oct 25, 2026
SecurityTypeScriptJava Architect
Jeffallan/claude-skills
Use when building, configuring, or debugging enterprise Java applications with Spring Boot 3.x, microservices, or reactive programming.
Active · last commit Oct 26, 2026
SecurityPythonLeanback To Compose Tv Migration
android/skills
Provides instructions and architectural patterns for migrating Android TV applications from legacy Leanback UI Toolkit, Android Views, or Support Fragments to Jetpack Compose for TV (androidx.tv).
Active · last commit Oct 23, 2026
SecurityKotlinLark Mail
larksuite/cli
飞书邮箱:Use when user mentions 起草邮件、写邮件、草稿、发送/回复/转发邮件、查阅邮件、看邮件、搜索邮件、邮件文件夹、邮件标签、邮件联系人、监听新邮件、邮件收信规则等;use for mail/email intent only.
Active · last commit Oct 14, 2026
SecurityGoMeta Apply
wanshuiyin/Auto-claude-code-research-in-sleep
Privileged applier that LANDS meta-optimize / corpus-audit patches the user approved — the ONLY skill permitted to mutate the skill corpus from a self-modification proposal, with cross-model jury…
Active · last commit Oct 24, 2026
SecurityPython
How do I install the Analyzing Linux Elf Malware skill?
In Claude Code, run /plugin marketplace add mukul975/Anthropic-Cybersecurity-Skills and then /plugin install cybersecurity-skills@anthropic-cybersecurity-skills. For Codex or Cursor, copy the analyzing-linux-elf-malware folder into .agents/skills/ or .cursor/skills/.
Is the Analyzing Linux Elf Malware skill free?
Yes. The repository is open source under the Apache-2.0 license.
Is Analyzing Linux Elf Malware maintained?
The repository's most recent commit was on Aug 31, 2026. Its latest release is v1.3.0. appsgit only lists skills from repositories with a commit in the last six months.